Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/gXR7TFVYS3UmGK_gH7pG4N7dnmQ.roa
File:                     gXR7TFVYS3UmGK_gH7pG4N7dnmQ.roa (raw, json)
Hash identifier:          RSSvdeWRYVreBPwBt2nQVhFjj9o6hPqkG5TeN9XBHLo=
Subject key identifier:   81:74:7B:4C:55:58:4B:75:26:18:AF:E0:1F:BA:46:E0:DE:DD:9E:64
Certificate issuer:       /CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf
Certificate serial:       06C1A77B
Authority key identifier: AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/gXR7TFVYS3UmGK_gH7pG4N7dnmQ.roa
Signing time:             Sat 01 Jan 2022 08:53:40 +0000
ROA not before:           Sat 01 Jan 2022 08:53:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200748
IP address blocks:        185.241.180.0/22 maxlen: 22
                          2a0c:a780::/31 maxlen: 31

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113354619 (0x6c1a77b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf
        Validity
            Not Before: Jan  1 08:53:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=81747b4c55584b752618afe01fba46e0dedd9e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:f2:43:b8:c7:e2:e8:27:e3:41:56:3e:c5:
                    f2:a7:ad:ea:d0:00:ed:de:e8:6f:34:c9:0e:ec:a2:
                    06:62:e9:d0:7b:82:0d:48:ad:e0:0c:bf:53:fd:c0:
                    0e:be:76:58:f9:05:cf:d3:f8:2f:c9:fa:52:68:b0:
                    bf:03:81:6c:92:f3:bc:be:06:5b:d9:7c:26:fe:fb:
                    a0:6c:be:66:2f:28:b3:90:3e:72:d4:01:6a:a2:c6:
                    3f:52:dd:24:e3:7f:f6:25:11:7f:8b:22:78:ef:78:
                    ae:e5:52:57:e2:e6:32:c0:0c:7b:bc:2e:a7:24:44:
                    70:be:92:e7:c1:89:b7:65:88:8b:05:34:fa:56:02:
                    f9:77:71:9a:80:72:77:f6:7f:55:44:f8:00:6b:8d:
                    0e:b8:ba:dc:56:cb:a3:9e:fc:93:bc:e6:a9:2e:73:
                    82:ff:72:ea:59:ec:a7:f5:35:2c:15:88:68:67:a3:
                    b2:a6:b2:ba:98:ab:d3:9a:f3:ba:25:ed:b9:b6:1c:
                    13:cf:98:5b:fd:3a:2d:e1:b5:bb:50:2a:2a:c7:83:
                    58:63:b8:46:c9:ef:a4:5b:f8:2e:43:c3:f1:a2:6a:
                    9d:91:13:06:12:23:1c:99:dc:a6:fa:77:bd:cf:13:
                    96:d5:32:56:8e:45:db:00:95:e5:d2:92:a6:80:6a:
                    0b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:74:7B:4C:55:58:4B:75:26:18:AF:E0:1F:BA:46:E0:DE:DD:9E:64
            X509v3 Authority Key Identifier:
                keyid:AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/gXR7TFVYS3UmGK_gH7pG4N7dnmQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.241.180.0/22
                IPv6:
                  2a0c:a780::/31

    Signature Algorithm: sha256WithRSAEncryption
         75:c3:4c:d8:12:4f:d3:0c:90:9e:07:6b:72:fc:22:02:de:3a:
         7c:c8:dc:3c:82:53:96:1a:a8:76:21:7e:f4:b3:cb:4d:4b:e1:
         30:47:6a:94:3f:c0:f1:ed:d8:0e:e1:dd:59:18:3e:a9:ab:da:
         b6:ce:e2:21:84:cd:0c:3c:b0:8b:64:f2:3a:9f:3d:86:e2:8d:
         77:34:89:35:a8:08:5a:e4:6e:e2:31:8a:33:bb:83:3f:ac:5d:
         bf:29:b7:d9:34:ee:47:bb:12:a0:93:93:17:32:7e:58:2f:e5:
         4a:e5:ed:c8:e9:df:8b:10:4a:ee:81:bf:b1:7f:f4:44:3f:16:
         20:7c:f9:5b:12:4b:d2:21:b6:ae:51:da:9d:be:be:8e:d4:2f:
         99:c7:f8:cb:23:fb:4c:ce:85:7d:18:1c:86:a1:65:0a:6e:0b:
         bb:cf:69:82:a4:8a:6b:37:12:8a:f2:92:73:20:f0:c9:d5:8d:
         a9:6e:90:00:b6:b7:f3:31:2d:94:71:5b:5a:0a:c9:a7:1b:65:
         81:aa:73:55:67:8d:a2:75:f5:e2:f6:50:fb:0a:8e:fc:6b:b4:
         32:f8:1a:05:d9:23:39:3b:d1:54:37:71:8c:88:ac:7b:9f:fc:
         81:e0:c8:e3:9f:28:1a:7c:4d:8d:47:fe:fb:90:6f:62:8d:aa:
         96:32:55:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----