Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/F7h-y1T1ZfADcTlvrV3V6sNtLIA.roa
File:                     F7h-y1T1ZfADcTlvrV3V6sNtLIA.roa (raw, json)
Hash identifier:          QrIJ24a+e+j5guUSgWPqPFRtMZuKJfeurySkQ4Yx6as=
Subject key identifier:   17:B8:7E:CB:54:F5:65:F0:03:71:39:6F:AD:5D:D5:EA:C3:6D:2C:80
Certificate issuer:       /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial:       0182ED7A859A9B70DD805E781F827AB654E6
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/F7h-y1T1ZfADcTlvrV3V6sNtLIA.roa
Signing time:             Tue 30 Aug 2022 06:40:05 +0000
ROA not before:           Tue 30 Aug 2022 06:40:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202803
IP address blocks:        80.64.212.0/23 maxlen: 23
                          80.64.212.0/22 maxlen: 22
                          80.64.214.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ed:7a:85:9a:9b:70:dd:80:5e:78:1f:82:7a:b6:54:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
        Validity
            Not Before: Aug 30 06:40:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17b87ecb54f565f00371396fad5dd5eac36d2c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ff:76:6d:64:df:19:ff:af:45:5d:5a:59:54:
                    99:89:3b:4a:5e:9f:e1:31:32:3e:40:3b:20:ee:45:
                    9f:19:ff:81:63:14:26:6b:5b:ef:f3:09:f6:9b:a7:
                    d3:b0:d5:24:f4:07:2e:06:bd:b8:bb:3d:4b:57:01:
                    ca:42:dc:a3:84:d6:f0:b4:1c:c8:49:58:92:59:7e:
                    e3:5a:96:80:21:4f:f9:c0:3d:9f:96:b2:ef:88:16:
                    12:d8:48:06:3e:5d:bd:9b:5f:8e:48:e2:af:f5:18:
                    49:a0:7f:5e:f8:bc:89:c2:13:56:e1:0e:3e:4b:cc:
                    f6:f8:37:ab:9d:5c:41:7a:d4:81:4c:0f:37:9f:e4:
                    a0:76:03:c0:31:bf:83:a8:1c:d8:de:2f:71:c4:78:
                    47:fb:5b:9d:9d:fc:29:4e:ee:5a:eb:02:59:d4:cb:
                    c3:b9:82:bc:6e:a3:a3:e2:dc:ac:f1:3f:e7:26:d4:
                    ee:50:29:ad:69:b2:51:b7:60:2f:3e:78:6f:1d:95:
                    05:e5:4d:a9:5d:94:e8:86:d6:97:ea:a5:82:fa:e4:
                    e3:59:66:ef:ce:e1:00:87:c0:ff:ed:85:d3:a8:c8:
                    6c:61:0c:a8:62:2f:1b:10:33:b1:ab:ac:c3:c3:5c:
                    98:90:0f:83:5c:09:f2:67:36:49:16:3e:6a:c4:dd:
                    d3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B8:7E:CB:54:F5:65:F0:03:71:39:6F:AD:5D:D5:EA:C3:6D:2C:80
            X509v3 Authority Key Identifier:
                keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/F7h-y1T1ZfADcTlvrV3V6sNtLIA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.64.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:73:87:12:25:a8:5e:e2:2b:b3:b4:38:57:86:fe:c1:df:4c:
         67:47:24:70:bc:05:0c:11:bc:26:44:cd:54:8c:31:d3:de:77:
         f9:fd:30:fb:8b:8d:87:61:5a:db:b7:d8:2e:de:5d:3c:50:2e:
         0e:e8:dd:58:ef:2f:21:98:da:a2:b5:53:5b:80:f9:ab:a5:2b:
         63:df:b1:34:01:b8:b2:47:07:b9:0b:42:63:4b:05:c0:0e:94:
         42:0a:d0:74:59:a0:79:7f:3f:b6:42:92:c2:d9:8b:06:ca:a5:
         e6:d4:16:c4:61:65:bc:21:f7:05:d0:ed:49:5f:dc:cf:77:29:
         cb:d8:94:d4:cd:15:4f:f2:8c:1a:4e:73:0b:b1:0a:67:80:53:
         3f:4f:31:3c:06:75:29:f2:fb:c2:c0:7f:75:5c:02:3c:1c:54:
         81:f0:6e:b6:b9:e7:47:e2:43:d5:83:6e:19:7a:65:1c:9f:e6:
         69:9b:26:81:f1:17:82:99:3c:7f:40:b8:7a:73:5a:53:c7:26:
         79:b2:82:57:7d:cd:f7:6f:d5:79:cf:44:24:3a:f3:1e:90:bf:
         5d:90:c2:5d:7e:5e:38:bf:8d:de:6d:00:58:38:9c:8b:ae:2a:
         f0:b9:eb:f0:77:11:87:d6:30:55:aa:a3:19:47:7c:86:43:2b:
         70:3a:22:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----