Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/3MppfS2KCqvjjPCO1HQXoDXD0kw.roa
File:                     3MppfS2KCqvjjPCO1HQXoDXD0kw.roa (raw, json)
Hash identifier:          srDA026Qj5L89Pn/5v4Nv/gaQhqxazVQ2vo7HQXEF6M=
Subject key identifier:   DC:CA:69:7D:2D:8A:0A:AB:E3:8C:F0:8E:D4:74:17:A0:35:C3:D2:4C
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       179C9DB3
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/3MppfS2KCqvjjPCO1HQXoDXD0kw.roa
Signing time:             Sat 01 Jan 2022 13:03:26 +0000
ROA not before:           Sat 01 Jan 2022 13:03:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205597
IP address blocks:        80.77.27.0/24 maxlen: 24
                          2a01:367:ff0f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396139955 (0x179c9db3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Jan  1 13:03:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dcca697d2d8a0aabe38cf08ed47417a035c3d24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:45:c8:a8:b9:6d:34:d7:7a:4e:ae:f5:3b:03:
                    25:ec:c4:11:70:5f:55:2b:96:bd:22:ef:1a:0d:9f:
                    b5:91:6a:5f:f3:af:f7:4f:0c:8c:b0:43:2c:73:2d:
                    1d:a3:e5:7d:dd:01:fc:2e:10:e0:70:f3:a9:49:48:
                    e8:eb:84:68:a7:ec:77:1d:c1:03:d2:66:5c:f7:c6:
                    ce:cd:db:bf:a8:f2:90:09:51:1d:8b:6b:3a:d1:cd:
                    1b:34:54:dc:97:8b:fc:bd:01:23:5f:a4:4f:26:76:
                    7b:83:c4:e5:b4:ce:38:7e:7d:61:1d:c6:fe:3a:a7:
                    aa:a4:47:3f:16:ad:9c:63:5b:06:52:09:88:1f:97:
                    3b:8f:68:bb:43:48:91:7e:d9:79:f5:29:dd:28:20:
                    69:bd:67:e5:ee:92:d0:63:fd:d0:eb:c2:cb:45:ae:
                    7a:3a:8c:cc:5f:c9:5a:80:31:4d:fa:31:9a:7e:b4:
                    8b:39:e8:d4:40:3a:f0:71:6e:78:f5:ef:b7:9b:21:
                    44:31:8c:97:9c:d0:e5:ad:06:75:7a:33:7e:79:49:
                    d9:d6:0f:66:a2:19:2a:a2:32:ac:ae:55:cd:bd:f6:
                    ec:87:19:a7:5d:ef:89:34:f4:db:36:a7:b2:6f:76:
                    3c:e9:d6:6e:e6:84:d8:35:49:5e:b8:4e:02:c1:3c:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CA:69:7D:2D:8A:0A:AB:E3:8C:F0:8E:D4:74:17:A0:35:C3:D2:4C
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/3MppfS2KCqvjjPCO1HQXoDXD0kw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.77.27.0/24
                IPv6:
                  2a01:367:ff0f::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:68:23:6c:3a:2a:90:be:14:3e:d1:a1:82:1e:87:88:fa:67:
         3c:4a:16:fb:55:8f:fa:ed:b4:70:e2:f0:95:15:6c:f0:be:35:
         ad:9e:55:17:ba:f3:f0:6e:fd:89:34:ea:74:92:3b:12:3e:f1:
         69:81:8e:20:f4:74:11:af:54:5c:bf:66:f4:33:90:74:93:eb:
         2a:25:46:99:a0:7b:87:bc:dd:50:e4:3e:05:ba:23:6b:2a:e0:
         8b:6c:34:6b:68:66:33:fa:1e:d7:36:9e:b0:ef:d7:df:3c:58:
         26:73:7b:81:a7:b4:a3:fb:29:88:a3:65:49:f2:32:29:a8:1b:
         4b:7b:9d:85:21:c2:a9:68:cd:06:ce:d4:3d:4f:3f:a4:5e:bd:
         c3:a2:f0:c1:05:5c:4b:4f:fe:bb:1b:78:66:db:00:e5:47:85:
         65:3b:a1:60:36:43:fe:c0:4f:8c:98:91:d1:fc:ca:d4:3a:70:
         88:73:2f:61:08:9d:03:93:c8:7f:6d:a1:ab:17:e6:f2:0c:69:
         2d:3c:1b:49:1e:72:bf:80:ab:1c:58:70:16:de:c4:04:a2:c8:
         35:04:10:47:bb:db:e4:c8:37:f0:44:d4:31:79:e9:85:b2:7e:
         a2:ff:8f:20:9a:61:9d:18:7c:47:a7:75:da:6e:45:19:07:85:
         00:c6:0e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----