Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/lInAY4b3uCT0nQufJrvsSlvRPhc.roa
File:                     lInAY4b3uCT0nQufJrvsSlvRPhc.roa (raw, json)
Hash identifier:          /Pzc/ZuNjcTwLExGbRJrRIOpvsYvuKl4nnx2EiIXfi8=
Subject key identifier:   94:89:C0:63:86:F7:B8:24:F4:9D:0B:9F:26:BB:EC:4A:5B:D1:3E:17
Certificate issuer:       /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial:       0881B8B6
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/lInAY4b3uCT0nQufJrvsSlvRPhc.roa
Signing time:             Sat 01 Jan 2022 06:55:41 +0000
ROA not before:           Sat 01 Jan 2022 06:55:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19905
IP address blocks:        80.172.222.0/24 maxlen: 24
                          2001:4cc0:8000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142719158 (0x881b8b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
        Validity
            Not Before: Jan  1 06:55:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9489c06386f7b824f49d0b9f26bbec4a5bd13e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a4:8e:c3:4b:2c:5b:75:93:37:60:53:01:39:
                    42:3e:5f:15:4c:26:d7:89:1b:d6:0f:a9:98:0f:f4:
                    b8:aa:78:71:6b:04:2d:98:a1:28:69:6d:f5:c6:b1:
                    7f:1b:15:8a:de:c8:21:1e:50:36:53:38:b0:c3:b7:
                    9b:19:4d:5f:b4:c8:00:c7:a1:4b:14:6a:6b:5d:04:
                    7c:54:96:1f:9b:7e:4e:cd:22:c7:8e:b8:52:93:82:
                    a9:62:de:db:f2:e6:41:95:b0:2e:4e:c3:62:df:32:
                    d5:df:eb:e6:ab:e0:64:ff:74:68:fd:a6:96:04:2d:
                    38:05:9a:0a:c4:a2:a4:d7:31:be:e4:e6:a2:62:7f:
                    c2:bc:e2:0a:99:8b:e7:ed:81:98:33:ab:b0:af:2b:
                    c9:e9:ca:52:42:a8:0b:a7:d7:82:5d:6d:47:36:7d:
                    7e:8a:3c:4c:87:74:1f:c1:a6:c0:a6:44:c1:6d:fe:
                    d4:37:c5:b0:95:13:0c:2a:5e:63:52:fd:bb:d4:a8:
                    b8:ce:60:07:3e:9f:7d:e1:9b:10:5e:a5:2b:61:41:
                    0a:7b:e0:ad:e3:98:33:43:1e:12:ed:69:40:ce:77:
                    e7:e7:fc:b4:ab:90:0a:37:1a:0f:89:90:95:99:47:
                    cf:ec:dc:42:da:36:9d:81:cb:2b:9f:6a:8e:59:3a:
                    32:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:89:C0:63:86:F7:B8:24:F4:9D:0B:9F:26:BB:EC:4A:5B:D1:3E:17
            X509v3 Authority Key Identifier:
                keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/lInAY4b3uCT0nQufJrvsSlvRPhc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.172.222.0/24
                IPv6:
                  2001:4cc0:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:e5:e4:2b:68:97:b0:55:f1:5d:5e:34:64:57:60:5b:f6:a1:
         3e:44:b4:8b:46:34:bd:51:36:4b:43:ad:ce:43:20:5d:8b:d5:
         01:a9:18:f4:23:80:3a:8b:df:0f:bc:48:5d:d3:c8:fd:1c:7e:
         6e:a5:ed:54:aa:9c:95:e9:01:26:96:b8:93:fe:17:f7:1b:58:
         38:c0:05:8e:50:16:1a:e3:93:75:c3:77:dd:23:38:54:7a:b0:
         65:a6:90:40:9d:25:9d:ef:a2:9a:89:50:8a:c0:a9:b8:95:ca:
         92:94:1a:91:94:3e:03:ff:5d:cf:37:dc:a7:a0:a2:90:cb:c7:
         3b:6c:d5:16:a5:26:59:b1:3e:c1:9f:27:d0:09:e6:4d:98:ff:
         65:ba:c4:ee:92:e3:a5:13:52:6b:62:0a:76:89:83:5a:d5:84:
         50:db:c1:e7:1a:ee:6b:17:26:4d:bc:f2:29:bf:b2:84:42:1c:
         5b:70:20:ea:ed:50:92:59:2b:ad:5d:b0:df:3b:ad:83:cf:d8:
         52:93:dc:ba:b8:07:15:58:1c:f7:48:72:de:ee:db:78:25:9b:
         ad:c2:36:0b:50:1b:7c:cf:64:2b:df:a9:72:9e:89:6c:b2:ae:
         b0:73:b0:ff:57:9b:62:2f:93:29:7c:09:37:29:82:c3:f5:2e:
         51:c7:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----