Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/0rdGC3qH0AsQ3xWpIuqusTL7gsM.roa
File:                     0rdGC3qH0AsQ3xWpIuqusTL7gsM.roa (raw, json)
Hash identifier:          p1xP2vvV7ANlPbHAV7OtnmJJuTFRkmeFeNey2TMHvAs=
Subject key identifier:   D2:B7:46:0B:7A:87:D0:0B:10:DF:15:A9:22:EA:AE:B1:32:FB:82:C3
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17B32499
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/0rdGC3qH0AsQ3xWpIuqusTL7gsM.roa
Signing time:             Sat 01 Jan 2022 04:54:12 +0000
ROA not before:           Sat 01 Jan 2022 04:54:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44992
IP address blocks:        195.85.42.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397616281 (0x17b32499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d2b7460b7a87d00b10df15a922eaaeb132fb82c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:df:93:56:45:95:3b:cc:d9:93:c9:7c:fb:
                    91:8b:92:d0:7f:08:10:9a:b8:5c:4b:84:bb:da:26:
                    ec:50:46:58:6e:9a:6e:b1:e2:ea:1b:90:96:ae:2c:
                    98:dc:44:b6:c7:57:08:c6:3e:b3:a2:d6:88:b3:77:
                    ae:bd:37:62:8d:34:44:8f:60:09:02:bc:1f:05:d4:
                    8d:3c:f9:96:1f:a9:fd:50:a0:f3:03:4a:da:61:59:
                    26:e8:84:96:cb:78:a7:d3:ab:a1:84:78:23:f2:89:
                    91:1d:be:25:aa:38:9e:10:93:bb:3d:72:1e:f7:4f:
                    7e:ec:0d:76:ea:94:c1:25:3a:d9:a0:0a:72:75:bd:
                    c1:30:9e:2d:3c:fb:45:8f:74:7d:12:63:56:b7:85:
                    8a:65:24:cc:09:19:73:06:9c:e9:1b:e5:54:d3:3f:
                    88:a8:f5:2b:21:89:a8:9a:7c:57:14:88:32:f6:7e:
                    3e:5e:42:f1:3f:b5:8c:bb:ac:9b:87:f5:c4:ff:e5:
                    26:69:a2:6e:13:06:07:3f:a6:a2:ff:78:42:45:d1:
                    50:c6:0d:81:de:ee:53:e1:ba:09:d1:77:e2:9f:34:
                    a1:84:79:1a:2f:f7:d2:3a:44:82:5a:ad:2d:7f:9c:
                    eb:d2:cb:61:f3:a3:6c:04:f7:7f:53:12:bb:97:2f:
                    70:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B7:46:0B:7A:87:D0:0B:10:DF:15:A9:22:EA:AE:B1:32:FB:82:C3
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/0rdGC3qH0AsQ3xWpIuqusTL7gsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:b4:f5:72:a0:55:02:11:c5:fc:00:b0:4c:16:af:4e:ae:8f:
         a4:af:15:55:29:bc:34:8f:52:0c:90:bd:1d:57:ca:21:5b:4b:
         7a:02:d0:48:9f:c6:dc:91:74:3b:34:6c:fc:1f:10:99:43:5a:
         a7:e4:ce:bc:6c:4d:4f:ed:58:43:64:22:a6:ab:95:61:d8:ad:
         26:71:04:ef:c5:dc:11:e1:fe:22:f5:b2:58:fe:f2:2a:08:2c:
         0d:a9:bf:f8:3b:e8:cf:b4:cc:39:e0:66:16:77:9a:06:cd:b0:
         0e:69:4b:f9:ec:1d:c5:b7:d6:f7:48:0b:b1:48:f1:36:e5:9b:
         fc:0e:b2:68:86:14:74:3b:45:2c:8a:c0:a1:15:8f:6f:26:de:
         01:23:21:db:93:a3:7a:49:7b:c3:4e:e9:aa:ba:cf:b3:26:3c:
         50:00:2a:38:24:9d:26:7e:0e:a0:7f:55:a0:24:bd:c1:57:13:
         75:f8:c3:94:1c:58:51:27:92:43:42:53:6e:00:c0:96:35:e4:
         4d:1e:5f:61:d2:cf:af:53:8d:03:9f:fa:33:cd:c8:b6:37:d4:
         ba:49:0b:c3:0c:5f:75:30:05:7d:b3:c7:c2:aa:be:8e:21:48:
         7b:a2:5a:8a:82:46:86:1e:21:1c:8d:0e:43:37:57:ea:8f:c3:
         d7:ad:54:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----