Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/So_p0c4yJJbMcasFh5lgPGwOSnQ.roa
File:                     So_p0c4yJJbMcasFh5lgPGwOSnQ.roa (raw, json)
Hash identifier:          75+K/KcM+3kMjcU8Kg5V1rWZ/PxQoaU7r8jwcqpbdb4=
Subject key identifier:   4A:8F:E9:D1:CE:32:24:96:CC:71:AB:05:87:99:60:3C:6C:0E:4A:74
Certificate issuer:       /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial:       018414EC10E4DF54BC17AE795F46D239DFD7
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/So_p0c4yJJbMcasFh5lgPGwOSnQ.roa
Signing time:             Wed 26 Oct 2022 15:32:05 +0000
ROA not before:           Wed 26 Oct 2022 15:32:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8758
IP address blocks:        185.5.186.0/23 maxlen: 23
                          2a02:7c40:8000::/33 maxlen: 33

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:14:ec:10:e4:df:54:bc:17:ae:79:5f:46:d2:39:df:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
        Validity
            Not Before: Oct 26 15:32:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4a8fe9d1ce322496cc71ab058799603c6c0e4a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3e:fb:08:91:4c:91:bf:3c:29:90:d2:8a:de:
                    90:c8:bf:d7:5a:52:71:65:45:bb:1b:f7:02:b9:1f:
                    eb:d4:83:c7:5f:75:c6:75:f8:1e:88:55:46:08:42:
                    73:9e:90:6b:75:b1:8d:3b:69:fa:27:39:f7:c3:39:
                    12:ad:8f:31:be:79:4d:47:90:d9:53:a9:b8:d1:df:
                    5b:82:41:31:e6:6b:da:05:c1:b7:e8:da:99:0a:69:
                    f7:ba:eb:df:e8:bb:f6:f7:c2:c6:0b:f0:82:77:86:
                    f6:11:3e:24:39:f0:bc:98:44:e9:80:28:5c:d4:3b:
                    e5:4d:4e:41:77:90:fd:08:b8:25:35:fb:fc:53:d6:
                    6e:39:3c:37:99:34:54:20:bc:94:91:99:61:15:51:
                    fb:e0:49:64:79:b2:e5:af:75:bc:5c:00:3e:b8:dd:
                    2c:12:98:dd:4d:8e:1d:7c:db:3e:54:37:3e:22:a1:
                    b5:4f:f0:d6:bc:04:8c:e1:63:06:df:f6:1b:01:39:
                    f0:66:58:c2:e1:bf:86:86:ee:b9:db:18:13:73:5d:
                    7e:cd:95:da:bb:f1:2b:2a:38:21:fa:1b:96:bb:5b:
                    3d:c4:c3:7e:99:a9:09:82:e3:fc:98:2a:cd:8c:47:
                    80:aa:2f:7f:d6:b8:bc:62:52:f9:49:7b:59:ec:2a:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8F:E9:D1:CE:32:24:96:CC:71:AB:05:87:99:60:3C:6C:0E:4A:74
            X509v3 Authority Key Identifier:
                keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/So_p0c4yJJbMcasFh5lgPGwOSnQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.5.186.0/23
                IPv6:
                  2a02:7c40:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6a:bd:bf:3a:f6:63:2e:37:9b:47:6c:8c:ca:3a:c9:70:d2:87:
         6a:2c:fd:34:b8:7e:df:59:51:70:55:57:37:60:01:d9:4c:26:
         64:39:5f:56:a7:7c:dc:f0:e7:36:d6:e4:64:58:76:00:b8:66:
         7a:6b:c3:cc:f1:13:eb:cc:3c:b7:ba:d6:5a:3c:a8:0a:7d:e0:
         1a:da:8e:3d:6b:b8:33:f9:e2:34:82:d4:87:96:71:9b:a1:73:
         a4:af:24:a8:d4:57:93:89:87:8b:5b:62:ce:a6:bf:71:a3:c3:
         91:79:0b:cb:c0:53:cf:40:a9:c6:fd:26:54:db:a8:da:78:c1:
         f0:10:3a:93:4f:02:a5:d7:44:80:63:ac:be:75:e4:f3:8d:94:
         51:39:7f:c1:9b:e3:13:58:24:23:94:8d:0a:63:98:b1:d1:62:
         b1:89:08:b5:c3:92:5e:52:12:3d:80:6c:f5:3e:43:76:97:25:
         3e:42:99:ae:df:ef:7c:a2:e3:5f:e4:8a:6d:52:dd:8e:20:48:
         de:7b:e0:b1:67:4a:31:6f:7f:70:0e:ac:88:02:dd:84:c1:98:
         45:58:d8:89:05:83:10:b1:49:95:82:50:19:69:ca:04:d8:9e:
         42:3d:f3:3a:5a:0e:de:6b:30:01:3b:1b:0b:12:e0:ea:61:c2:
         c0:47:20:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----