Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/1-X5Ujq8ToFWZN9qkoksUEO1EX-s.roa
File:                     1-X5Ujq8ToFWZN9qkoksUEO1EX-s.roa (raw, json)
Hash identifier:          U5mB1PxWiSBAAHyMnZIJMPy/3I/UerymbiNutK1kJ9U=
Subject key identifier:   F9:7E:54:8E:AF:13:A0:55:99:37:DA:A4:A2:4B:14:10:ED:44:5F:EB
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       01FE16C8
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/1-X5Ujq8ToFWZN9qkoksUEO1EX-s.roa
Signing time:             Sat 01 Jan 2022 06:03:00 +0000
ROA not before:           Sat 01 Jan 2022 06:03:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     400040
IP address blocks:        185.228.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33429192 (0x1fe16c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: Jan  1 06:03:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f97e548eaf13a0559937daa4a24b1410ed445feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:dd:b3:c8:37:3e:d4:35:7b:33:f3:09:ce:
                    09:cf:b2:bc:5a:d9:65:14:ec:e1:18:39:be:9b:12:
                    c3:f8:c0:7f:02:33:84:c5:4b:06:68:fa:24:95:4d:
                    6c:0f:51:04:14:80:3d:78:ec:a0:e5:65:e0:8f:34:
                    dd:ee:6e:78:f4:13:15:c7:d0:7b:7f:ce:dc:51:0d:
                    9b:ca:a0:dc:f8:73:d5:f5:65:94:64:f3:cf:61:c5:
                    5d:c2:08:58:2d:36:85:4b:81:7a:0d:9f:17:9c:ae:
                    bf:b5:f1:64:74:99:1f:91:a0:1e:f2:65:05:dc:de:
                    92:a8:1c:9c:9e:45:43:f8:97:f1:ea:e8:0c:05:5f:
                    de:99:e0:19:bf:93:a4:70:34:ea:17:11:2d:f9:8d:
                    63:a0:dc:9b:ed:73:60:11:ba:a0:12:2c:d7:9d:de:
                    98:f6:b3:a7:5c:07:67:95:fa:ca:f0:d9:dc:9f:35:
                    8c:45:c5:d9:ba:34:49:64:4a:86:e6:d6:e8:14:f8:
                    a9:08:74:1f:0b:7d:f4:be:3c:24:49:5c:e8:d6:66:
                    ec:1c:9a:6d:36:8a:08:7d:67:d4:06:f2:ff:ac:fd:
                    e1:75:a3:bb:2a:d3:1b:b8:f6:ff:9b:d8:7f:ea:87:
                    59:f9:7d:e8:c3:2c:d4:a7:37:31:8d:e6:ad:b5:74:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7E:54:8E:AF:13:A0:55:99:37:DA:A4:A2:4B:14:10:ED:44:5F:EB
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/1-X5Ujq8ToFWZN9qkoksUEO1EX-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.228.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:c3:ed:57:72:e6:9f:5b:da:69:24:2e:1f:83:86:b8:32:51:
         d5:d9:d5:72:e2:8f:e6:2d:57:f8:73:f9:29:7a:90:eb:4d:81:
         58:8e:f4:93:83:50:22:6d:2a:25:0e:80:49:7e:8c:6a:01:c0:
         39:59:46:bd:11:97:3e:03:e3:a4:46:28:8d:1f:47:30:b7:33:
         45:6a:05:a5:d8:60:2a:70:1e:56:b1:0f:7e:e6:0d:5a:ba:47:
         f9:17:e7:ea:55:a3:5d:8a:a2:1f:17:dd:e2:95:65:30:7e:61:
         f5:e2:71:3a:c1:6e:54:28:e9:75:8b:e5:d3:6f:6f:81:28:c2:
         1b:d3:35:0a:ab:62:a8:1c:2b:94:2b:35:37:05:54:dd:4f:a0:
         cd:6f:e9:5d:a9:0e:f6:d5:c1:fb:f3:7d:27:2d:82:b0:d1:35:
         30:81:74:8a:49:23:9a:12:75:22:ef:57:36:f1:b6:9e:19:b0:
         9d:13:6f:0d:23:7a:9b:2f:f1:16:7f:c0:42:3b:4b:c5:8c:bb:
         93:21:01:24:34:34:2a:be:8b:ab:b8:01:c6:c9:d1:b5:e3:20:
         56:8f:05:b5:76:2c:20:19:bc:6c:14:27:b0:e6:7b:da:bf:42:
         21:a2:56:cc:f5:42:82:91:f9:86:c8:a7:09:9b:d1:02:e8:ce:
         52:86:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----