Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/6INDERGtaCEV9va-XBJN1cNxFCA.roa
File:                     6INDERGtaCEV9va-XBJN1cNxFCA.roa (raw, json)
Hash identifier:          xW/BclxC9IHfQev6gklgsuVO2QuFgrCpF0o74bK1gNk=
Subject key identifier:   E8:83:43:11:11:AD:68:21:15:F6:F6:BE:5C:12:4D:D5:C3:71:14:20
Certificate issuer:       /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial:       07226209
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/6INDERGtaCEV9va-XBJN1cNxFCA.roa
Signing time:             Sat 01 Jan 2022 09:54:36 +0000
ROA not before:           Sat 01 Jan 2022 09:54:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197033
IP address blocks:        185.97.204.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119693833 (0x7226209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
        Validity
            Not Before: Jan  1 09:54:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e883431111ad682115f6f6be5c124dd5c3711420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0f:30:53:c7:fb:1e:1d:52:f9:43:d4:a7:05:
                    73:85:9e:92:48:cd:4c:ef:33:1e:dd:cb:e8:b7:ee:
                    ea:ab:ef:b4:e2:91:f1:2e:17:19:67:7c:37:97:06:
                    db:5a:a6:08:c2:90:19:17:e7:fc:a8:97:b9:84:bb:
                    5e:52:32:3f:9f:53:5f:1f:5d:c0:24:21:c4:41:30:
                    87:cd:01:6e:6b:60:0d:32:57:7b:57:c1:0e:26:67:
                    f6:45:98:f9:ee:71:3b:21:73:13:f7:fc:16:da:70:
                    8e:0f:3b:74:a2:31:d8:f8:64:6a:d6:9b:f5:11:0f:
                    a2:03:dd:98:9f:a5:89:b1:b3:b5:59:24:e9:18:68:
                    a6:00:7a:e1:1d:bd:83:99:0e:55:38:8c:2e:67:13:
                    18:74:15:80:ef:67:fe:96:7a:2f:3a:60:9b:5e:48:
                    1c:ab:81:f2:a2:7f:c3:5f:1c:3d:a7:a9:01:82:8d:
                    40:76:88:c9:22:a9:97:ce:3a:1d:a4:b1:40:ce:6b:
                    d3:0a:dd:a5:35:6f:ee:f1:37:f2:ec:03:3a:af:e6:
                    27:e5:dd:26:48:37:81:f8:76:17:ed:c3:6c:50:27:
                    c4:f1:bc:a0:53:8a:e0:0f:8d:fb:ce:ae:c7:a0:6e:
                    18:fe:23:17:e2:a3:5f:aa:9a:e5:8c:98:0e:f8:4e:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:83:43:11:11:AD:68:21:15:F6:F6:BE:5C:12:4D:D5:C3:71:14:20
            X509v3 Authority Key Identifier:
                keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/6INDERGtaCEV9va-XBJN1cNxFCA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.97.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:d8:b3:a1:e5:db:cf:82:19:a6:cd:93:04:6e:e5:80:2f:c3:
         a3:ec:bd:5a:ff:d7:34:62:3d:61:87:fc:ec:36:4c:59:ef:d4:
         8e:ef:2c:f2:9a:1c:97:46:d8:9b:8e:64:9f:2e:53:dd:88:26:
         ea:9e:f2:e5:22:24:7a:56:3c:ee:df:4d:35:c3:1d:ed:79:35:
         48:7e:db:bc:57:f1:82:48:a7:bf:0b:61:7b:65:bf:27:7d:e7:
         73:80:47:17:9c:4e:a8:ef:38:c7:f0:dd:3c:a9:53:31:4c:d1:
         d4:14:ad:eb:b2:d0:67:55:5b:ab:ca:fc:60:15:80:eb:0c:77:
         fa:32:e9:82:42:53:9f:5b:28:a6:a1:08:5b:dc:4e:d4:a2:a2:
         7c:82:1f:b7:20:92:a8:a9:41:03:d0:a5:69:ea:03:28:1b:c7:
         8c:4b:f3:f9:3b:69:08:fc:4e:da:6d:1c:f2:6b:f4:28:fc:39:
         44:aa:7c:9e:cf:8d:cf:ad:db:0a:79:31:5e:5a:e8:fa:26:59:
         af:b9:08:41:a0:2b:b1:72:fc:d0:86:4c:f3:8e:7d:85:2d:1b:
         1f:ff:20:27:de:ff:02:1e:3d:5c:3e:ab:3d:76:66:f0:73:ac:
         28:37:d0:05:48:23:ed:71:d1:5c:31:e1:de:4d:4b:a4:fd:50:
         16:79:92:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----