Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Oll_CdOLSgWqyRf4Zd-bLkDWjtU.roa
File:                     Oll_CdOLSgWqyRf4Zd-bLkDWjtU.roa (raw, json)
Hash identifier:          PFP4EodQ5JnJAtq2K7yJ85MtsdCGXeG0/IbuTvG4ofg=
Subject key identifier:   3A:59:7F:09:D3:8B:4A:05:AA:C9:17:F8:65:DF:9B:2E:40:D6:8E:D5
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       01848A8865575F41C5FB5DEA7F6BF4B57F20
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Oll_CdOLSgWqyRf4Zd-bLkDWjtU.roa
Signing time:             Fri 18 Nov 2022 11:38:25 +0000
ROA not before:           Fri 18 Nov 2022 11:38:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25369
IP address blocks:        87.246.28.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:8a:88:65:57:5f:41:c5:fb:5d:ea:7f:6b:f4:b5:7f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Nov 18 11:38:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a597f09d38b4a05aac917f865df9b2e40d68ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bc:50:43:21:ce:2b:69:d4:39:98:83:81:97:
                    9c:8b:40:5b:6a:64:cd:0e:db:19:3b:a8:36:e1:30:
                    8d:5a:d4:59:23:6a:00:62:2b:6f:54:41:60:11:3d:
                    b8:3a:5f:17:ff:53:1b:42:e8:67:7b:3e:31:b4:27:
                    6d:4a:ae:96:d3:3c:f4:9d:29:4d:f4:97:1f:e3:4a:
                    51:f4:3f:9b:38:ac:62:29:a4:d8:1b:9e:3d:2c:83:
                    5d:6b:20:82:a1:7d:4f:b2:37:fb:0e:1f:54:5b:57:
                    32:9b:ac:f8:3b:a9:cb:4a:22:ea:47:48:4a:3c:8a:
                    5d:8e:15:9e:06:c8:2b:7d:ec:46:61:d5:86:df:72:
                    b3:a9:bc:78:cf:f5:9b:df:b2:55:bd:36:e6:18:1a:
                    d4:58:a8:6c:7e:8f:d9:64:20:a6:77:0a:19:cd:3f:
                    0d:14:aa:d7:ab:a9:3a:0a:19:72:1e:d1:5d:44:f2:
                    b8:e8:a3:26:a3:38:68:31:d9:b1:35:4c:85:cd:18:
                    84:68:7a:8b:7b:47:98:92:c9:32:54:1c:01:01:f2:
                    ae:4d:d3:12:2c:4f:6a:3a:b9:08:e1:b1:d7:ea:91:
                    2e:af:af:8e:e7:e5:5d:46:e4:26:4c:3e:b2:68:3e:
                    33:8e:16:3f:16:fb:85:7b:6f:21:c8:58:30:0e:a3:
                    51:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:59:7F:09:D3:8B:4A:05:AA:C9:17:F8:65:DF:9B:2E:40:D6:8E:D5
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Oll_CdOLSgWqyRf4Zd-bLkDWjtU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.246.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:66:4b:23:33:1f:a2:31:45:7f:6e:40:a0:c4:28:b4:00:3b:
         aa:d8:7e:2f:09:a4:69:17:a1:d9:13:9c:73:bf:50:86:73:8d:
         f3:96:02:0f:a4:d4:8c:e4:6f:9a:3e:c5:8b:c4:61:e6:5d:b8:
         0c:c9:df:c0:cb:13:87:51:02:04:45:56:3d:e9:28:86:8c:94:
         69:1f:6e:8e:7d:93:b5:cb:38:e1:7c:84:75:23:ca:0a:9e:59:
         72:6e:09:ab:4c:c8:5e:91:07:12:05:82:e4:70:27:2e:91:fe:
         18:c5:ac:16:54:9f:db:10:13:3c:a2:22:19:4d:16:3c:15:1c:
         73:fc:16:06:17:c7:45:4d:75:f2:6c:09:36:8d:7f:9a:37:c4:
         9b:75:30:51:63:95:42:6a:0d:0f:84:8e:a5:03:cc:64:38:c2:
         65:b3:24:c5:3e:f1:99:3e:24:cb:a0:6d:c2:86:8e:61:9a:e3:
         9a:c4:57:17:16:db:67:47:e7:26:f0:e2:00:01:41:8f:10:fe:
         45:db:aa:36:2e:2c:b8:72:56:7a:64:6a:59:d1:62:24:12:c4:
         e8:ae:37:d8:95:12:37:4d:8a:ca:85:45:0e:19:c4:8d:d2:a3:
         95:80:58:cb:fc:99:78:35:56:9e:56:26:5b:57:75:41:d4:5d:
         12:15:3a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----