Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/PWriC2rz5Ff-XAOGt4bNaQBX4L4.roa
File:                     PWriC2rz5Ff-XAOGt4bNaQBX4L4.roa (raw, json)
Hash identifier:          rxbx2C37Olq5ExFuamu2laBaj2ET9Fd5NY8jFVQIC8Q=
Subject key identifier:   3D:6A:E2:0B:6A:F3:E4:57:FE:5C:03:86:B7:86:CD:69:00:57:E0:BE
Certificate issuer:       /CN=1af16a3cf8116721afad8c1e5b3e83a2959ceb99
Certificate serial:       4BAD
Authority key identifier: 1A:F1:6A:3C:F8:11:67:21:AF:AD:8C:1E:5B:3E:83:A2:95:9C:EB:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvFqPPgRZyGvrYweWz6DopWc65k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/PWriC2rz5Ff-XAOGt4bNaQBX4L4.roa
Signing time:             Tue 01 Feb 2022 09:46:49 +0000
ROA not before:           Tue 01 Feb 2022 09:46:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49321
IP address blocks:        185.128.225.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19373 (0x4bad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af16a3cf8116721afad8c1e5b3e83a2959ceb99
        Validity
            Not Before: Feb  1 09:46:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3d6ae20b6af3e457fe5c0386b786cd690057e0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:cf:8d:57:d3:53:0d:31:93:f1:d7:45:d9:
                    11:6d:f8:09:a1:79:f8:87:34:a9:0e:b8:47:80:ee:
                    79:2e:23:ef:87:a9:07:ab:4a:4d:f8:59:22:45:17:
                    fd:0c:9b:88:62:93:8f:cc:d0:0a:c0:e3:11:af:72:
                    24:2b:6d:f3:0c:3e:9f:4c:53:14:2a:82:06:24:02:
                    47:5d:62:6d:2e:21:86:e5:c5:2a:aa:43:ef:9b:29:
                    f8:7b:e9:48:30:8e:c7:75:c6:ff:2f:d5:7c:48:5b:
                    a4:42:3a:f5:f5:7a:9e:69:92:a4:7d:b9:24:ed:44:
                    48:4a:0e:b8:d9:33:a0:4a:5f:46:02:8b:6e:2e:44:
                    84:68:0b:0d:29:2d:fb:c9:2d:c6:73:21:7b:b4:eb:
                    f8:2b:9a:e1:71:85:c3:cc:54:59:21:63:57:ff:7f:
                    80:88:9a:e3:7d:de:8c:a5:f2:92:05:47:5a:1b:4a:
                    33:ad:01:c6:ac:9d:45:a5:f3:e5:aa:cf:b4:2c:36:
                    51:bc:d4:5c:fa:6c:d2:12:a0:ea:b2:67:05:34:30:
                    dc:c1:82:90:cd:8d:83:e9:29:7b:08:d8:6c:53:ba:
                    c2:d3:9f:57:e2:27:97:11:c5:00:ac:61:98:8e:ed:
                    cc:00:1a:2e:6f:37:a3:1c:0a:61:7b:1d:75:ee:96:
                    f5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6A:E2:0B:6A:F3:E4:57:FE:5C:03:86:B7:86:CD:69:00:57:E0:BE
            X509v3 Authority Key Identifier:
                keyid:1A:F1:6A:3C:F8:11:67:21:AF:AD:8C:1E:5B:3E:83:A2:95:9C:EB:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFqPPgRZyGvrYweWz6DopWc65k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/PWriC2rz5Ff-XAOGt4bNaQBX4L4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.128.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:7a:c2:a9:d4:82:04:b1:1b:de:41:48:8a:d8:39:2e:61:65:
         53:cd:d9:c1:49:50:df:9e:8c:75:42:35:58:1e:8a:08:3f:b8:
         f5:af:58:66:3c:81:ba:c8:31:c1:96:35:6c:88:06:0d:8b:55:
         17:5c:a6:4c:46:f4:4b:72:14:92:28:82:ae:10:03:00:8e:cc:
         53:bd:a6:e6:94:e7:cd:4f:5b:8f:69:ad:36:b5:73:83:07:fc:
         40:33:6c:bc:74:6c:b4:66:63:cc:01:ac:cc:47:ff:5b:58:ad:
         a6:b3:ac:d0:7a:f5:b5:8b:d0:3e:b3:af:f0:54:47:db:59:dc:
         30:66:4e:9a:e9:8e:6a:30:75:af:0f:da:a0:35:4a:bc:08:56:
         55:f5:e9:96:84:ca:ac:36:31:b7:01:b7:cd:2f:a9:0c:8e:53:
         e7:ea:86:8a:b9:ea:3f:9a:2b:85:c1:84:0f:a7:dd:01:7e:91:
         9e:50:62:b6:4f:32:7f:51:90:31:0a:8a:a9:f8:d9:29:47:f9:
         c2:75:bc:c3:35:a2:56:64:44:63:31:9d:2a:b1:a1:86:8b:70:
         95:31:d1:73:45:b6:43:fe:73:b6:26:50:a8:3a:66:13:69:eb:
         77:db:7b:55:8a:93:4a:e0:67:95:d6:cc:5e:ac:9f:e6:25:ed:
         9c:ab:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----