Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/dNSZPXRVivLwj3ZHpays3m6_zR0.roa
File:                     dNSZPXRVivLwj3ZHpays3m6_zR0.roa (raw, json)
Hash identifier:          eT1pkZ7dfSJ8cOqUvcfK0zEXMq7xtUXwFswp6dT5RPc=
Subject key identifier:   74:D4:99:3D:74:55:8A:F2:F0:8F:76:47:A5:AC:AC:DE:6E:BF:CD:1D
Certificate issuer:       /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial:       FC033B
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/dNSZPXRVivLwj3ZHpays3m6_zR0.roa
Signing time:             Sat 01 Jan 2022 08:57:29 +0000
ROA not before:           Sat 01 Jan 2022 08:57:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15576
IP address blocks:        185.79.200.0/23 maxlen: 23
                          2a03:5e20::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16515899 (0xfc033b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
        Validity
            Not Before: Jan  1 08:57:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=74d4993d74558af2f08f7647a5acacde6ebfcd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5b:d0:e2:9d:81:f5:2a:88:e7:49:08:bd:75:
                    98:f1:4b:c8:46:05:0c:8f:4e:2d:f9:19:c3:18:fa:
                    9c:f0:e7:3f:06:ae:fc:36:52:92:c8:ec:d1:aa:6f:
                    91:44:95:cf:f7:f0:f6:aa:78:79:17:c6:d4:b3:d8:
                    46:99:f0:01:be:60:87:0f:c7:c0:d9:22:0e:5c:92:
                    15:49:de:c2:50:e3:69:64:b2:ba:f9:50:02:97:2d:
                    51:1d:37:3b:41:8f:b3:56:e5:db:00:bf:bd:06:d4:
                    43:44:c6:6a:33:65:d8:31:f8:f1:81:15:c4:28:cd:
                    8c:a1:d4:ba:d2:b9:60:be:dd:86:dc:ee:44:72:71:
                    05:43:72:dc:22:03:ca:d2:f9:30:56:50:86:0a:ff:
                    51:f7:d3:27:de:31:df:db:a3:3c:38:c7:45:98:8d:
                    ea:65:fc:1e:10:20:f7:13:19:ec:1b:20:c6:aa:4c:
                    6d:db:76:3b:9a:db:de:76:50:40:8f:42:ce:e2:71:
                    2f:b7:10:1e:1d:d1:44:3e:79:c1:bb:a3:a4:e0:08:
                    69:ea:82:b2:1e:32:a3:be:24:12:d2:e2:e9:30:35:
                    d3:96:4f:aa:4d:92:2d:63:c9:fd:ad:65:a0:85:1b:
                    52:f6:30:58:13:ad:bb:ef:b8:68:01:7e:28:2a:39:
                    b4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D4:99:3D:74:55:8A:F2:F0:8F:76:47:A5:AC:AC:DE:6E:BF:CD:1D
            X509v3 Authority Key Identifier:
                keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/dNSZPXRVivLwj3ZHpays3m6_zR0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.79.200.0/23
                IPv6:
                  2a03:5e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:e5:1c:13:2e:01:1b:3f:c3:c4:6a:1d:ae:75:be:80:2e:2b:
         ef:25:d8:3e:ce:39:5a:fc:85:16:e4:a3:f0:91:5d:62:4b:91:
         47:8c:9c:a9:38:8d:7d:98:58:51:e1:82:d9:ca:d7:82:32:ba:
         cb:75:f5:9d:0a:22:2f:cc:99:00:d8:d0:ec:93:1e:71:02:22:
         31:e9:85:68:4b:e1:3c:68:7b:f3:5e:26:f7:60:7a:94:e0:72:
         a0:5b:0a:0d:de:39:3e:55:fe:bc:cb:f1:10:7e:35:6f:49:75:
         15:9d:22:54:0d:0b:2a:e2:b7:c1:14:f3:14:02:f0:39:26:1c:
         1d:10:ee:ec:2e:4a:93:82:7c:77:c7:86:ab:1d:51:bf:9a:87:
         74:00:f6:1f:f7:c9:ee:b6:35:81:41:d7:cb:89:e0:d6:cb:79:
         bc:be:b7:fb:f0:2b:09:ac:80:52:e6:3f:72:3f:f8:5c:89:e6:
         d0:0b:a0:9e:f3:cd:97:bd:ba:52:16:61:dd:88:59:18:76:2b:
         05:54:c2:24:b4:d3:93:86:5b:48:9d:34:9b:08:0c:44:60:b0:
         72:f2:86:82:4e:da:96:9d:0d:dc:a9:b7:25:5a:84:73:e4:44:
         20:3c:b8:da:1b:fa:82:e2:83:ea:84:98:3e:39:0e:3f:30:4f:
         8b:1e:cc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----