Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/YXk8KGgiVglA7uUlyMUbZEFBJd0.roa
File:                     YXk8KGgiVglA7uUlyMUbZEFBJd0.roa (raw, json)
Hash identifier:          b18AaidtZz37xcIXtCLsDmoCnaM2FtLYTbWxAaOox2Y=
Subject key identifier:   61:79:3C:28:68:22:56:09:40:EE:E5:25:C8:C5:1B:64:41:41:25:DD
Certificate issuer:       /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial:       0182B00B33E1CD1914D7E3C8CD0751A72B50
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/YXk8KGgiVglA7uUlyMUbZEFBJd0.roa
Signing time:             Thu 18 Aug 2022 08:21:40 +0000
ROA not before:           Thu 18 Aug 2022 08:21:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12750
IP address blocks:        212.80.96.0/19 maxlen: 19
                          2a01:7480::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b0:0b:33:e1:cd:19:14:d7:e3:c8:cd:07:51:a7:2b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
        Validity
            Not Before: Aug 18 08:21:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=61793c286822560940eee525c8c51b64414125dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:7e:01:42:b5:f6:0c:84:97:bf:bd:c5:ee:
                    ff:32:ca:cc:f3:ff:32:d3:c3:05:87:63:e4:45:68:
                    86:ec:f2:f8:84:90:2b:0c:a5:39:43:0a:a8:cb:ed:
                    ed:4a:4e:f2:f2:67:cd:7e:fd:71:60:1f:8b:88:e1:
                    89:79:75:43:4c:7c:f0:0c:97:ce:6f:3d:2f:ee:62:
                    23:a5:65:e7:8f:a2:92:98:06:aa:55:8d:b3:0b:89:
                    99:06:0a:0f:79:f5:1d:cc:a0:db:88:87:57:bf:8b:
                    c2:d8:0e:34:bb:a6:81:85:8f:83:dc:0d:55:1f:d1:
                    0c:c4:dd:e9:60:92:42:55:d3:fa:75:41:79:c4:48:
                    f1:65:d4:24:7a:de:ac:a7:8a:32:ff:56:d9:b8:c9:
                    b9:d2:b3:e5:b8:ab:45:ca:62:0a:51:f6:96:ee:f3:
                    1b:5e:03:00:38:61:d6:87:53:11:17:38:dc:e3:25:
                    bc:47:f7:a9:7b:83:a4:da:a7:12:b7:91:17:19:0f:
                    be:68:19:aa:15:e3:4f:c0:e3:86:cf:0c:9f:9d:16:
                    f0:89:7f:c6:2d:76:1b:d6:50:0a:9a:75:b9:f4:ff:
                    8d:f0:10:8e:0e:b4:02:56:cf:2c:9f:da:bc:bb:1c:
                    4b:d6:99:11:e5:2e:a7:a6:c7:47:0c:d6:4f:7c:07:
                    bc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:79:3C:28:68:22:56:09:40:EE:E5:25:C8:C5:1B:64:41:41:25:DD
            X509v3 Authority Key Identifier:
                keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/YXk8KGgiVglA7uUlyMUbZEFBJd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.80.96.0/19
                IPv6:
                  2a01:7480::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:2a:65:63:b3:e2:44:ca:33:a4:9a:c9:9b:fa:bd:1d:6b:d4:
         c6:e1:e7:eb:cd:bf:75:8f:09:d0:a3:c9:3c:6f:e3:1f:18:03:
         68:ab:a4:38:1a:f0:02:f6:a2:a0:ec:b9:44:ce:fc:8e:be:84:
         c9:9e:84:35:73:66:1d:56:11:2d:b5:c3:c6:3b:8c:fd:0c:ae:
         9b:7d:1a:e4:36:93:94:7a:95:60:d6:21:17:0d:d1:20:50:a6:
         98:2a:f9:df:6b:81:94:e9:8a:bd:72:22:b8:18:76:06:88:95:
         e9:08:7a:77:78:bd:eb:25:3d:8e:43:a5:c6:a1:93:28:90:56:
         ab:fe:b2:84:28:f9:16:c1:7e:30:be:f9:aa:5e:b0:ba:49:e7:
         db:cd:83:70:9e:72:ba:f4:8e:f0:05:95:c3:4d:d2:1b:9d:64:
         1f:d0:d9:d0:d7:43:01:24:20:4b:e7:1a:19:e5:e4:ac:1a:6c:
         22:94:c0:25:22:1d:ac:49:6b:63:5a:43:20:cb:2d:39:29:20:
         52:56:2e:7b:d5:96:df:c8:7e:9d:ff:a0:e7:55:78:48:c7:38:
         b6:37:b8:ad:d0:a2:41:c6:e6:0d:29:ae:9c:8f:ec:74:dc:c2:
         37:4d:7d:45:a0:6c:56:ce:eb:7e:44:4c:68:53:1e:4c:6d:ad:
         5b:15:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----