Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/BBXOyAQp3T-jNvJJjyeSTbFiB2c.roa
File:                     BBXOyAQp3T-jNvJJjyeSTbFiB2c.roa (raw, json)
Hash identifier:          JFU/JnT+5208vTUi8QkHIyFQsyOugyAhkpQGiBNfmws=
Subject key identifier:   04:15:CE:C8:04:29:DD:3F:A3:36:F2:49:8F:27:92:4D:B1:62:07:67
Certificate issuer:       /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial:       0183ADFC3F7B9968CE1D3F9A5D0F0C4F1133
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/BBXOyAQp3T-jNvJJjyeSTbFiB2c.roa
Signing time:             Thu 06 Oct 2022 15:48:53 +0000
ROA not before:           Thu 06 Oct 2022 15:48:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        185.127.164.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ad:fc:3f:7b:99:68:ce:1d:3f:9a:5d:0f:0c:4f:11:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
        Validity
            Not Before: Oct  6 15:48:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0415cec80429dd3fa336f2498f27924db1620767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:38:c8:21:d4:20:57:aa:41:45:75:a3:c0:38:
                    f0:b0:20:8e:68:f9:fe:75:9e:c0:3b:40:31:89:f9:
                    6b:2b:ab:ab:10:a0:31:42:cb:63:34:9e:01:81:9d:
                    e4:47:e6:4a:93:b6:31:4a:b8:93:7a:43:5d:0d:ea:
                    2b:71:e2:d0:a6:6c:f5:b1:3d:38:8e:f9:f9:bc:58:
                    90:5c:3b:93:8a:c5:3f:3e:8c:f3:bb:d7:79:74:f0:
                    2f:1d:58:28:89:76:ca:4b:5b:8a:9a:6a:2e:51:c1:
                    18:c5:fd:f6:8b:fb:07:30:5d:0f:cb:d7:19:16:85:
                    01:a5:3f:cc:46:70:c3:67:0f:6d:d8:46:68:1a:9b:
                    6e:c2:9c:d5:be:12:e1:5e:7e:f3:60:73:7d:c1:3e:
                    00:d9:65:0b:e8:51:08:4f:b3:1d:8e:6f:73:e1:69:
                    03:fb:7e:63:a9:38:9d:c1:39:9c:04:70:58:02:dd:
                    b9:b5:9c:80:12:5e:c6:6e:43:dc:43:6a:60:a4:90:
                    13:d0:a8:05:56:d0:7e:32:f2:5f:a8:c3:55:cb:b7:
                    5e:c4:b1:9b:96:bb:3d:37:69:32:3e:9b:27:21:45:
                    0a:dd:f9:67:6b:2a:55:a2:e1:e7:c0:f7:f8:fe:bf:
                    8a:83:9c:54:5a:65:3f:5c:03:ce:89:58:78:b4:aa:
                    02:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:15:CE:C8:04:29:DD:3F:A3:36:F2:49:8F:27:92:4D:B1:62:07:67
            X509v3 Authority Key Identifier:
                keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/BBXOyAQp3T-jNvJJjyeSTbFiB2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:2b:86:34:40:ac:14:70:33:6f:65:b7:97:cc:22:85:4c:ab:
         56:aa:d3:0c:27:1a:f8:7a:cc:60:c2:b1:49:95:e1:93:0d:66:
         89:34:ad:4e:51:b5:53:5d:6f:62:14:92:07:ae:09:4f:2f:a5:
         ba:62:6d:0b:71:80:26:21:24:02:07:e9:f4:0a:3a:69:d9:68:
         d9:41:41:c6:8f:01:51:ac:15:f6:7b:8e:f7:55:96:29:76:45:
         2b:20:6b:39:d1:1f:6d:fc:57:8a:8b:11:16:eb:a0:d4:59:98:
         97:c9:cf:3c:2f:ed:49:c6:88:0b:1f:8c:0d:ca:00:ad:f1:db:
         f3:85:ee:b5:20:bd:d1:e9:8c:12:48:5b:58:82:1a:aa:80:60:
         9d:20:08:4f:b6:3f:df:ce:b7:3b:1a:3a:59:f8:ff:9b:eb:b1:
         ad:bc:9c:73:fc:cd:91:ad:d4:ac:a8:70:40:9f:51:f5:e7:11:
         15:ab:37:7a:ae:aa:24:41:48:b1:06:96:ea:7b:a3:82:aa:c9:
         c0:97:09:d1:24:16:b7:f6:7e:8e:19:ef:23:e9:61:75:af:2b:
         e6:f5:25:d8:9e:b5:7c:61:a7:48:b3:31:2a:95:fc:68:10:74:
         ba:09:41:a4:15:c8:be:9a:fb:9c:95:4c:da:6d:1b:ce:a7:74:
         04:ad:17:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----