Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/fWydkBUulvWcGyEGGLy3X75Cd1k.roa
File:                     fWydkBUulvWcGyEGGLy3X75Cd1k.roa (raw, json)
Hash identifier:          g+JrjaBawJ9knUGsGtRxkmFT+73KH+NbrVknaTvGjc4=
Subject key identifier:   7D:6C:9D:90:15:2E:96:F5:9C:1B:21:06:18:BC:B7:5F:BE:42:77:59
Certificate issuer:       /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial:       01F2A48C
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/fWydkBUulvWcGyEGGLy3X75Cd1k.roa
Signing time:             Sat 01 Jan 2022 15:59:40 +0000
ROA not before:           Sat 01 Jan 2022 15:59:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1299
IP address blocks:        85.198.32.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32679052 (0x1f2a48c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
        Validity
            Not Before: Jan  1 15:59:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d6c9d90152e96f59c1b210618bcb75fbe427759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:b2:16:6e:5d:51:8d:40:8e:ba:82:22:b4:
                    2e:d2:7c:3e:51:95:f9:9c:aa:fd:d0:27:7f:2d:31:
                    a3:bc:25:b3:b6:84:d4:f9:af:2a:c0:47:8f:fd:cd:
                    c5:cd:23:f4:4d:dd:d8:cc:94:47:e5:a2:5a:04:1f:
                    be:3e:03:b3:aa:82:62:20:c0:5a:fb:a3:3a:1d:e8:
                    2e:63:89:29:be:0f:2d:8d:c4:6a:88:03:24:1f:c3:
                    56:76:07:92:d2:6d:1d:13:77:0e:0a:6f:42:01:23:
                    34:8d:4c:4e:04:14:ee:0e:5c:31:26:2e:16:31:53:
                    bf:e5:1f:0f:12:d6:91:c2:80:c2:0c:a4:f3:22:5c:
                    6c:0d:a6:2c:f8:65:bb:ae:df:93:ca:b8:d3:23:10:
                    85:1d:ef:0d:07:f8:05:5b:54:ce:c5:99:e9:f4:8e:
                    cd:06:d1:0f:ec:02:04:36:7e:cd:7f:7b:db:3e:e8:
                    0c:47:41:46:2e:0b:9a:8d:ff:6d:7e:6b:03:ad:9d:
                    be:d8:f4:3f:ac:7c:4d:1e:b6:55:79:4f:bf:ed:89:
                    d4:ab:25:a5:cd:64:51:65:e7:af:48:b4:b5:35:d5:
                    38:58:a5:d7:d3:a5:bc:0d:db:fb:71:4f:9e:00:4e:
                    8c:5e:04:10:ca:6d:a3:38:0d:d4:bb:95:cd:c0:ba:
                    f0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6C:9D:90:15:2E:96:F5:9C:1B:21:06:18:BC:B7:5F:BE:42:77:59
            X509v3 Authority Key Identifier:
                keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/fWydkBUulvWcGyEGGLy3X75Cd1k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.198.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:93:8f:57:af:12:66:cf:4f:16:a3:ab:06:4a:ed:33:4e:8d:
         85:7b:b9:49:4b:0d:73:14:41:84:02:78:ae:70:25:aa:6f:c1:
         2f:87:34:9f:5e:a5:7a:37:15:55:9a:d4:f2:bb:10:7a:bc:9d:
         44:25:3b:ec:bd:23:cb:37:44:56:be:77:3f:ec:e7:78:50:29:
         83:9f:ad:e6:5e:f9:4a:d7:1b:f2:c3:e7:9e:05:49:2c:6c:de:
         28:4f:cc:01:5c:5a:a8:9a:18:61:29:5a:aa:95:e5:dc:7d:b9:
         72:14:31:b8:a5:15:26:fa:93:09:dd:f2:6c:3a:35:56:95:53:
         b1:2d:ff:93:a1:37:c0:6d:2f:1a:65:90:ba:44:29:59:58:6f:
         2a:0d:af:92:1e:fc:fb:98:ab:3f:21:6a:18:5f:15:87:18:82:
         93:fc:8a:b3:29:ed:ef:f7:36:b8:20:91:4f:aa:87:67:9f:c0:
         ef:c9:e6:8a:61:81:bd:a2:6d:37:98:e3:58:7e:b0:5d:06:48:
         d1:31:6b:7a:f6:a1:72:41:c4:68:c9:99:6b:f4:de:98:ae:bb:
         22:0e:02:2a:ab:19:c1:1c:93:41:37:6a:d5:30:37:f5:92:9f:
         47:e6:4e:6a:83:52:e2:2f:3d:c4:e4:28:da:7c:29:87:6c:dc:
         61:50:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----