Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/fFnAhk_eAojs1-th60ayC9pIVuw.roa
File:                     fFnAhk_eAojs1-th60ayC9pIVuw.roa (raw, json)
Hash identifier:          sjF8OasPHJPMufh6Q2pMGQTR+/CjQAZ1sraG3w+itIU=
Subject key identifier:   7C:59:C0:86:4F:DE:02:88:EC:D7:EB:61:EB:46:B2:0B:DA:48:56:EC
Certificate issuer:       /CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
Certificate serial:       1840B712
Authority key identifier: EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/fFnAhk_eAojs1-th60ayC9pIVuw.roa
Signing time:             Sat 01 Jan 2022 11:03:44 +0000
ROA not before:           Sat 01 Jan 2022 11:03:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62167
IP address blocks:        185.44.163.0/24 maxlen: 24
                          185.44.160.0/24 maxlen: 24
                          185.44.160.0/22 maxlen: 22
                          185.44.162.0/24 maxlen: 24
                          185.44.161.0/24 maxlen: 24
                          89.107.29.0/24 maxlen: 24
                          89.107.28.0/24 maxlen: 24
                          89.107.28.0/22 maxlen: 22
                          2a01:7520:5::/48 maxlen: 48
                          2a01:7520::/32 maxlen: 32
                          2a01:7520::/48 maxlen: 48
                          2a01:7520:4::/48 maxlen: 48
                          2a01:7520:2::/48 maxlen: 48
                          2a01:7520:8::/48 maxlen: 48
                          2a01:7520:3::/48 maxlen: 48
                          2a01:7520:6::/48 maxlen: 48
                          2a01:7520:1::/48 maxlen: 48
                          2a01:7520:7::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406894354 (0x1840b712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb1dc00fd2c1e3eaafceccc1b4ba1f8fd0a4a98c
        Validity
            Not Before: Jan  1 11:03:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7c59c0864fde0288ecd7eb61eb46b20bda4856ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:ae:5d:d1:26:f0:46:12:1c:0f:d8:92:15:
                    4d:cf:4d:3d:25:71:aa:d2:dc:a1:12:40:ae:0d:ba:
                    29:71:13:9f:cb:8b:c1:ed:01:f5:90:80:c5:50:e6:
                    f1:d0:da:fa:31:0b:bc:c2:ca:2b:00:e3:90:8f:a4:
                    70:27:96:a5:3c:d9:bf:3e:23:9f:5b:a8:c8:7d:28:
                    72:cf:31:32:33:d0:19:2b:50:c1:52:5e:77:f4:dd:
                    72:74:1e:e7:8e:dd:73:dd:47:a8:68:8f:d6:44:18:
                    82:98:3a:be:2e:13:83:eb:e8:e9:c8:aa:70:cb:9d:
                    cf:c2:ee:79:9e:8a:26:07:6d:f3:ac:e7:00:35:21:
                    2a:49:75:c5:b8:00:ca:16:d9:60:70:53:7d:35:7e:
                    ca:95:0a:7a:d9:06:0e:b9:67:83:d3:2f:a1:ff:e0:
                    96:3c:4a:5b:07:8f:9f:67:22:27:76:ce:1b:96:f0:
                    09:7d:cf:f8:0e:fe:7e:66:73:5b:b4:16:fe:ae:de:
                    a8:98:af:80:28:bd:2c:49:6f:c2:ce:a2:8f:5a:7d:
                    02:00:79:62:2d:3d:2f:9b:d6:2d:10:b8:5b:c6:5f:
                    5d:d4:3a:93:16:3e:42:29:6d:2a:d3:41:57:72:f0:
                    d4:70:d4:3f:37:16:11:2c:db:10:4b:bd:bb:ed:e3:
                    9e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:59:C0:86:4F:DE:02:88:EC:D7:EB:61:EB:46:B2:0B:DA:48:56:EC
            X509v3 Authority Key Identifier:
                keyid:EB:1D:C0:0F:D2:C1:E3:EA:AF:CE:CC:C1:B4:BA:1F:8F:D0:A4:A9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6x3AD9LB4-qvzszBtLofj9CkqYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/fFnAhk_eAojs1-th60ayC9pIVuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5ab585-b29b-4e71-8038-90e21df01e91/1/6x3AD9LB4-qvzszBtLofj9CkqYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.107.28.0/22
                  185.44.160.0/22
                IPv6:
                  2a01:7520::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:9f:f3:a2:99:35:a9:0e:60:d4:a2:34:ef:f5:32:b1:9f:54:
         81:09:0a:94:13:9a:78:2a:2e:19:fe:56:9c:ea:e3:71:fc:17:
         cc:c3:87:81:0d:36:dc:77:b4:ba:84:cd:ba:ff:c6:7e:98:17:
         72:ce:ec:7f:50:92:fc:cc:0f:43:04:14:19:f6:b9:dd:5e:1f:
         18:97:3a:bf:f2:ad:16:f5:4b:85:8c:1b:c3:32:37:65:6e:60:
         81:24:c5:b3:44:ef:ee:04:dd:06:d6:a3:cd:1c:e9:c7:69:82:
         f7:df:8f:19:b8:ef:73:a0:bc:8c:34:34:0c:de:1a:c0:4e:98:
         64:72:84:81:6d:ef:a1:e7:82:d8:ee:fe:0a:e4:2d:3f:00:fe:
         3c:15:2a:f9:66:df:c7:e0:35:c5:21:d6:2f:a2:ac:e5:2e:02:
         73:9a:4a:82:74:c0:f8:71:22:52:31:ea:7e:61:f3:5f:7d:8b:
         74:5e:c7:86:14:31:3a:39:70:fb:e5:ac:85:b5:e1:c7:ae:b6:
         b1:f7:63:f7:3a:c6:29:6f:fc:9e:d1:df:dd:d1:75:28:f7:77:
         1b:6d:20:b0:42:aa:83:47:79:5d:6f:37:35:b5:e0:2d:b2:89:
         07:0e:5e:69:35:c5:1f:11:3a:41:9b:08:f5:c4:24:75:c9:91:
         5e:be:78:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----