Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VBixlxJ-BflqWmjJIT2adl823t8.roa
File:                     VBixlxJ-BflqWmjJIT2adl823t8.roa (raw, json)
Hash identifier:          1Gxs9qHIX7IPGn95eoq/IcOgcYAVYzJfIltk0ll+nF8=
Subject key identifier:   54:18:B1:97:12:7E:05:F9:6A:5A:68:C9:21:3D:9A:76:5F:36:DE:DF
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       199B885D
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VBixlxJ-BflqWmjJIT2adl823t8.roa
Signing time:             Sun 10 Apr 2022 22:04:24 +0000
ROA not before:           Sun 10 Apr 2022 22:04:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210977
IP address blocks:        195.85.49.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429623389 (0x199b885d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Apr 10 22:04:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5418b197127e05f96a5a68c9213d9a765f36dedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2e:8d:22:de:d7:11:e4:98:ac:9a:65:ff:dd:
                    45:d4:fa:60:09:ed:f7:0e:ae:a8:0f:00:31:0b:50:
                    b8:b5:77:0d:cb:b0:91:1e:5d:38:82:7a:b1:db:eb:
                    2f:5c:c0:6d:d8:1c:51:38:17:29:cb:27:24:91:48:
                    ad:1a:50:2c:ed:2b:4d:f3:1e:b7:0a:1c:53:4f:eb:
                    40:52:2f:e7:9d:d1:f7:f9:69:ef:ef:d3:9e:81:7e:
                    b9:bc:a2:36:14:4f:eb:a1:78:29:3f:7f:59:b0:fc:
                    55:e9:cf:37:fa:6d:41:ea:bb:53:ca:ad:0b:0a:a4:
                    ba:90:b8:a8:a1:7e:60:a3:e8:a0:c5:50:28:4b:10:
                    20:73:74:c0:6c:2c:42:fd:14:88:e3:83:b7:b3:22:
                    33:96:a8:08:8f:5e:31:83:e1:c4:49:6d:23:e2:12:
                    20:e7:48:b4:da:bb:61:87:5c:7d:09:53:bd:b2:39:
                    ed:f9:c8:53:de:d4:90:23:48:55:e7:c0:18:1d:25:
                    87:a6:82:d9:90:88:e8:26:16:51:a6:a1:17:e7:b7:
                    a6:e2:f1:6f:3f:9c:ee:af:91:cd:22:6f:c0:a8:dc:
                    b8:6f:5d:53:fe:d9:b5:9a:fa:2a:a1:2c:c3:f6:80:
                    56:b9:4f:5e:37:15:c7:3f:8e:02:8c:62:2a:b5:c8:
                    2c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:18:B1:97:12:7E:05:F9:6A:5A:68:C9:21:3D:9A:76:5F:36:DE:DF
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VBixlxJ-BflqWmjJIT2adl823t8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.85.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:a4:48:f5:d5:f2:27:2d:c7:04:95:69:46:c6:52:73:8a:9a:
         01:17:d3:ae:a2:54:a3:3c:ed:f8:76:79:dc:5e:32:cd:a1:07:
         49:0a:89:53:6f:af:78:d1:47:73:b3:ab:1f:22:0f:35:f4:27:
         5b:76:a6:46:71:65:43:6b:bb:cf:e2:03:e0:2c:a5:c5:6c:2d:
         88:ca:bf:a5:ae:c0:34:0f:08:1a:45:3a:29:24:a6:11:c8:99:
         e2:97:47:92:d8:95:e5:34:f7:a5:d9:c2:d1:5c:ef:f0:b4:bb:
         29:40:6a:1c:ca:de:03:5b:15:94:14:9f:2d:b5:0f:23:3b:4c:
         08:11:5c:b7:c0:6e:51:ee:b4:87:fb:84:11:83:76:af:94:8a:
         d9:ce:10:7d:77:c2:6c:ef:b4:49:2a:53:89:cb:b2:40:87:2a:
         3f:18:88:69:84:7c:e2:96:df:d5:23:7e:f4:45:e2:0d:3d:14:
         dc:1d:ed:ad:6d:e1:0e:59:14:1f:41:ca:eb:7b:cb:76:b3:c6:
         14:0f:78:fc:71:98:9f:f5:77:bd:ea:66:26:9d:56:d7:58:aa:
         32:d2:d8:ce:d8:e4:2d:30:7a:c6:58:12:30:ad:99:95:fb:6b:
         95:b7:45:b8:15:aa:d8:80:60:5a:be:a6:4a:ea:5d:1b:76:32:
         04:36:bf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----