Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1WU_j9oSiiqmjSvjy7lUBcIZ4k4.roa
File:                     1WU_j9oSiiqmjSvjy7lUBcIZ4k4.roa (raw, json)
Hash identifier:          EpomqmB07xFek9xOp7ujs6XITPn+vVi4nMoFte3L8D4=
Subject key identifier:   D5:65:3F:8F:DA:12:8A:2A:A6:8D:2B:E3:CB:B9:54:05:C2:19:E2:4E
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       179E5456
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1WU_j9oSiiqmjSvjy7lUBcIZ4k4.roa
Signing time:             Sat 01 Jan 2022 04:54:00 +0000
ROA not before:           Sat 01 Jan 2022 04:54:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     33696
IP address blocks:        185.224.147.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396252246 (0x179e5456)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d5653f8fda128a2aa68d2be3cbb95405c219e24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4d:51:97:a3:66:e6:bb:b8:71:b5:2f:8d:25:
                    eb:c5:e6:ea:81:b8:3b:2b:8a:16:7f:ed:6b:9f:83:
                    c6:04:d6:68:95:17:52:42:2d:85:f5:f2:ab:c8:28:
                    ca:17:ef:d7:bf:ae:ce:78:d7:7b:54:b1:a2:d7:dd:
                    d0:f1:8c:bd:73:82:60:cb:7c:e8:83:27:1e:0e:43:
                    8b:fd:16:4d:e1:5e:fb:f9:55:82:e1:ce:1a:e4:f1:
                    85:a9:ac:4f:92:f8:65:c9:6a:a3:86:dd:e7:f0:35:
                    a0:6d:a5:61:91:ec:e7:64:1b:54:6d:63:57:bb:40:
                    53:e4:e2:47:f1:9e:4c:ec:5a:b4:cd:4d:4f:c6:ed:
                    83:ea:1b:bc:5f:3e:8e:55:c3:0d:9f:7d:fe:84:ee:
                    66:f0:90:a7:ee:62:2c:12:b4:d5:e0:95:96:b9:16:
                    44:91:ad:3b:86:bd:f6:a3:aa:c9:9c:58:f6:2f:4c:
                    83:1f:fa:5f:5d:5a:82:a8:e5:66:70:24:40:50:e7:
                    02:8e:d9:62:54:87:5f:84:fc:46:89:ce:f9:6d:68:
                    cf:f6:1d:a7:02:a9:d0:a6:d3:cd:52:f1:5b:b2:a7:
                    76:58:2b:11:82:92:c1:b5:05:98:2a:60:17:d5:a3:
                    8f:6b:9c:35:c2:10:bb:34:06:6b:b6:21:45:d0:fb:
                    e9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:65:3F:8F:DA:12:8A:2A:A6:8D:2B:E3:CB:B9:54:05:C2:19:E2:4E
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1WU_j9oSiiqmjSvjy7lUBcIZ4k4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.224.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:9d:27:93:4d:4c:bb:9b:c5:2c:50:2d:f3:10:1e:ae:03:
         63:87:de:85:d0:8a:72:c9:59:38:74:c8:3d:ab:97:94:41:96:
         6f:67:f3:b8:f6:db:d0:ae:96:1d:df:26:9e:3c:18:f3:27:64:
         04:b8:64:28:6e:c3:d8:db:08:6b:cc:3e:e9:34:70:73:47:05:
         72:11:91:a3:79:f2:a3:7a:e0:9f:14:a2:4a:3a:18:89:1e:cc:
         3f:35:46:01:43:08:b2:0a:f6:c2:80:94:7c:62:c7:06:e9:55:
         a8:1c:81:b9:ee:1f:88:a2:6c:b3:75:47:92:00:1b:10:37:13:
         c7:c0:d9:49:16:5f:13:5b:e9:12:e7:bf:18:a4:ad:df:82:b9:
         ba:ec:d3:27:4d:93:26:d7:c1:94:70:bf:c9:21:b3:c4:93:17:
         7d:96:ae:51:0c:df:0a:76:fa:79:3d:28:42:8a:83:9e:1b:8e:
         ba:94:a5:23:fa:bd:f2:04:0b:4c:67:5e:83:73:98:be:5e:20:
         ef:44:98:fb:eb:57:c2:48:53:85:c0:ba:cf:04:76:e5:4d:ca:
         da:8c:5f:2d:91:1e:1a:fc:fc:08:34:fe:95:e2:af:7b:97:c0:
         b3:21:f7:86:04:0f:d4:3a:27:81:b9:64:29:aa:12:e3:c9:11:
         bf:f6:3c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----