Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/xeu5y8t9Ygdwz_BWCyx1GVDVoOE.roa
File:                     xeu5y8t9Ygdwz_BWCyx1GVDVoOE.roa (raw, json)
Hash identifier:          eBokCEcshDynTYf9DwoVGks/PChZMk3sm0eLMI28zTg=
Subject key identifier:   C5:EB:B9:CB:CB:7D:62:07:70:CF:F0:56:0B:2C:75:19:50:D5:A0:E1
Certificate issuer:       /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial:       04954E55
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/xeu5y8t9Ygdwz_BWCyx1GVDVoOE.roa
Signing time:             Thu 26 May 2022 09:10:13 +0000
ROA not before:           Thu 26 May 2022 09:10:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        185.69.120.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76893781 (0x4954e55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
        Validity
            Not Before: May 26 09:10:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c5ebb9cbcb7d620770cff0560b2c751950d5a0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:aa:90:fb:ec:b3:f1:37:a9:4b:fa:74:92:ac:
                    c0:78:09:6c:9e:e3:02:11:55:94:84:f5:42:de:9b:
                    a0:16:be:9d:b5:45:cc:30:55:f3:d4:56:ba:cc:56:
                    90:6f:47:5a:de:3d:be:c3:88:27:c7:e7:1f:64:73:
                    4c:bb:da:bc:9e:ca:df:52:e0:a7:35:ad:e2:95:f7:
                    91:2c:ff:97:24:84:2e:cc:21:38:65:45:00:94:3c:
                    88:ca:1b:21:c5:d2:2e:ff:a0:56:4b:04:1d:f3:04:
                    40:b0:91:4b:7c:8c:fe:d1:1c:80:e2:3b:ab:63:cb:
                    7d:a7:68:34:9f:ca:14:ad:bf:51:3b:1b:3f:9c:eb:
                    1b:8f:48:49:00:61:da:6d:16:11:f0:c9:1d:cf:24:
                    48:51:1e:d2:3f:30:6f:47:9e:d5:fc:6c:6c:9f:dc:
                    09:76:17:e5:b5:69:ad:cf:7b:b3:0f:e5:31:85:66:
                    2c:3c:2e:2e:58:ac:21:b3:c6:7d:61:0e:82:ed:76:
                    c7:85:82:0b:2e:a1:85:14:cb:47:32:7f:d8:7c:77:
                    56:3f:ac:74:f4:7d:93:9c:29:c9:e7:94:d5:28:71:
                    22:28:0b:35:1a:95:01:a6:4a:8a:6b:43:df:00:d3:
                    b3:21:9a:bd:94:ef:4a:47:42:79:64:54:66:b5:27:
                    83:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EB:B9:CB:CB:7D:62:07:70:CF:F0:56:0B:2C:75:19:50:D5:A0:E1
            X509v3 Authority Key Identifier:
                keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/xeu5y8t9Ygdwz_BWCyx1GVDVoOE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.69.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:d4:ae:ef:6d:e6:aa:5b:eb:64:14:b2:e2:d8:03:3f:75:96:
         c3:f2:32:f2:30:eb:40:1d:d4:6d:cb:05:f4:a2:72:5a:73:84:
         87:43:d5:07:5b:be:df:78:a0:d2:c6:d7:14:12:95:32:49:da:
         f4:e7:f1:96:a3:a5:18:ee:0c:db:44:a0:59:5e:35:b4:84:b3:
         4e:83:cf:6a:35:8c:bb:15:36:31:1b:18:d9:70:8d:eb:54:39:
         9a:87:fc:97:91:0a:26:0a:ec:6c:58:3e:1d:d6:72:ff:fb:b7:
         4d:93:64:a4:3b:94:4c:2c:a3:c2:54:1f:ad:89:09:d9:f2:d3:
         d6:c2:c4:4b:ef:6a:74:bb:0f:a7:ec:a9:19:56:44:42:fd:a5:
         82:97:df:ba:da:c1:6a:34:4d:11:33:0e:fc:aa:ba:fc:d4:44:
         e7:bf:f4:c1:d3:3a:72:b9:e7:42:e2:89:65:d0:fa:0d:f8:86:
         6e:81:24:a2:fd:6b:ff:f8:24:d7:c4:7f:04:99:46:47:59:60:
         ed:52:4f:68:33:88:9e:22:33:ba:75:d6:dc:55:97:86:e4:ee:
         34:3a:f4:a7:5b:7b:d5:9e:f6:bc:58:78:13:42:99:e4:9b:c6:
         ea:2e:ec:cf:a5:f8:27:5e:b3:b2:b8:74:d7:c8:9d:8a:64:85:
         38:bd:64:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----