Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/pM08NFReCxZNOmKWIHXwJoc2yT8.roa
File:                     pM08NFReCxZNOmKWIHXwJoc2yT8.roa (raw, json)
Hash identifier:          Xd69M89140UYB1yBb1esvmkktzAzYHjGjVrSUXuC5TQ=
Subject key identifier:   A4:CD:3C:34:54:5E:0B:16:4D:3A:62:96:20:75:F0:26:87:36:C9:3F
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17B609DB
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/pM08NFReCxZNOmKWIHXwJoc2yT8.roa
Signing time:             Sat 01 Jan 2022 04:54:14 +0000
ROA not before:           Sat 01 Jan 2022 04:54:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48105
IP address blocks:        185.142.141.0/24 maxlen: 32
                          2a06:7a04::/43 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397806043 (0x17b609db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a4cd3c34545e0b164d3a62962075f0268736c93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fe:f5:91:64:94:a7:68:d6:12:f0:6f:5b:e0:
                    9d:30:2f:15:1c:85:59:88:96:79:05:43:fd:a5:37:
                    fc:0c:86:5a:7d:0d:75:09:12:cf:57:8d:33:dc:1f:
                    a5:78:2b:3e:59:cf:77:75:b3:bc:f1:c5:b5:cf:e5:
                    6f:51:84:02:0a:17:95:d1:16:eb:fb:cd:d6:f1:a7:
                    0d:91:86:52:f9:41:81:43:5e:87:8d:89:d1:a3:a4:
                    fa:b2:a0:7a:43:1f:c1:7c:4b:f8:06:d9:d2:0e:dc:
                    e9:d4:fe:a7:b4:ff:63:89:35:cf:1f:e7:fb:9f:ca:
                    23:7a:d4:c6:a8:e4:87:92:a8:49:fd:95:fd:dd:f9:
                    53:86:92:7f:f6:71:ba:12:f3:34:64:3d:de:eb:73:
                    c8:72:3a:a6:38:a8:66:ba:93:ad:ab:bf:c4:af:15:
                    e6:40:23:2e:18:d7:ae:2a:80:cb:2e:30:e3:7a:f9:
                    00:d4:05:d3:5c:ae:bf:fe:2a:7e:9d:68:f0:b7:f3:
                    bf:86:f6:2c:b1:71:98:43:2d:e7:96:c1:5b:03:86:
                    11:3e:94:e6:75:21:34:72:bd:cf:d5:06:da:55:51:
                    62:65:4d:ad:6f:a2:1f:88:a6:78:59:a3:d1:c4:e2:
                    7b:35:7f:a1:15:5c:52:a3:03:10:45:86:b3:52:d8:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CD:3C:34:54:5E:0B:16:4D:3A:62:96:20:75:F0:26:87:36:C9:3F
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/pM08NFReCxZNOmKWIHXwJoc2yT8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.141.0/24
                IPv6:
                  2a06:7a04::/43

    Signature Algorithm: sha256WithRSAEncryption
         3e:77:89:27:76:bb:a6:2c:1d:7f:b3:8d:7d:33:97:d9:a0:23:
         59:30:8a:3c:49:62:8e:08:68:9a:cf:84:97:cf:e3:a3:14:9d:
         15:7e:fd:fe:8f:01:a6:b5:9c:a6:9d:c6:6c:3d:2f:16:b6:61:
         c9:09:9f:48:2d:bf:85:da:2b:25:60:9f:90:f8:aa:e3:b2:f2:
         63:e1:ea:71:20:ae:c0:62:58:75:66:70:af:28:c1:4a:23:cf:
         df:2c:6d:1e:d1:8b:a6:7b:5e:a1:9f:f1:0a:de:c5:02:4e:34:
         1f:45:d4:35:23:bb:09:13:7a:8a:ae:7b:32:55:ca:4f:39:3f:
         f4:7e:8f:33:43:79:34:aa:96:15:ab:31:09:be:0b:d5:72:6d:
         65:07:97:6f:0f:bf:31:a0:53:5c:de:ad:d7:4f:59:22:81:85:
         5e:a9:d6:54:5c:f5:76:be:4c:ce:f4:4f:38:a2:b2:ed:81:9e:
         c6:84:3a:bb:45:e1:e2:27:c6:a5:65:d6:98:53:c1:7d:75:21:
         a4:fd:ee:e3:f8:51:0d:2a:89:b5:da:b8:d3:cc:7f:94:c8:e0:
         88:7c:08:a2:8c:07:ae:66:99:92:bb:a9:a2:dc:14:38:95:55:
         b0:d8:4a:45:47:dd:f6:4d:c2:ce:d7:c9:79:3c:3f:69:c5:e7:
         e3:ab:1d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----