Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/b2XpgneX7JtCpa8nXl_BH4_J7A4.roa
File:                     b2XpgneX7JtCpa8nXl_BH4_J7A4.roa (raw, json)
Hash identifier:          6AbcVALpSvhEUUOrTIWe6bCU7Ss0xtLimvNdJ0ykkBU=
Subject key identifier:   6F:65:E9:82:77:97:EC:9B:42:A5:AF:27:5E:5F:C1:1F:8F:C9:EC:0E
Certificate issuer:       /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial:       03860E1E
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/b2XpgneX7JtCpa8nXl_BH4_J7A4.roa
Signing time:             Sat 01 Jan 2022 12:56:32 +0000
ROA not before:           Sat 01 Jan 2022 12:56:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211100
IP address blocks:        185.53.34.0/24 maxlen: 24
                          2a10:fa40::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59117086 (0x3860e1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
        Validity
            Not Before: Jan  1 12:56:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6f65e9827797ec9b42a5af275e5fc11f8fc9ec0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8c:73:83:b7:38:03:b2:c9:88:b7:7c:ed:8e:
                    7b:df:25:70:77:29:aa:01:09:c1:a8:91:cb:97:4d:
                    0a:bd:59:a7:c2:bb:ba:e7:a0:c5:ef:ed:94:1b:c7:
                    0f:5c:19:a7:82:ba:33:e4:08:f1:fa:2f:8f:b5:32:
                    11:e9:4d:2f:ac:55:1c:ff:16:78:ad:25:34:fd:bc:
                    3f:c5:22:81:2d:eb:0f:f9:91:03:b4:ee:2d:aa:86:
                    57:34:48:6b:04:72:31:36:b7:51:ab:8c:94:b1:47:
                    89:cc:d1:42:13:53:df:d7:67:46:21:cd:c4:3c:7b:
                    36:7e:57:cb:a2:90:06:d7:22:28:0e:cc:a3:2f:9b:
                    d5:f2:38:3e:2c:e9:10:aa:d0:03:24:3e:bf:38:e9:
                    ed:32:7e:95:95:05:34:19:96:65:d5:57:e0:c9:19:
                    e7:55:61:10:2b:26:3a:ac:07:d3:20:30:3b:b9:fc:
                    e9:0d:59:cf:37:43:8d:7b:71:0b:ad:ab:d1:2d:f6:
                    7f:5b:28:37:2b:47:37:26:fb:16:76:90:c1:2e:2a:
                    29:25:86:15:f1:01:a7:c5:b0:91:b2:fc:06:72:5b:
                    91:7a:54:fd:ed:f6:61:df:88:39:0b:69:68:ea:b3:
                    62:cb:ca:58:9f:39:b8:01:dd:c0:17:41:33:93:6c:
                    eb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:65:E9:82:77:97:EC:9B:42:A5:AF:27:5E:5F:C1:1F:8F:C9:EC:0E
            X509v3 Authority Key Identifier:
                keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/b2XpgneX7JtCpa8nXl_BH4_J7A4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.53.34.0/24
                IPv6:
                  2a10:fa40::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:96:91:7a:42:5c:b8:d3:de:fb:84:30:d7:26:cf:48:6f:e6:
         45:b7:98:cc:b3:18:70:5d:c2:b0:fe:1f:8e:3c:fa:8a:0d:74:
         70:34:ce:6e:36:74:47:34:43:8d:ca:b3:8d:f0:80:f2:f4:d0:
         f1:fc:1a:8e:bd:f7:99:30:3d:0b:8e:63:64:62:cd:83:1d:4a:
         86:d0:1e:44:10:3d:70:6c:96:fd:a0:5f:15:45:e0:1e:ae:01:
         e7:5a:21:6b:59:31:15:7a:f4:19:ec:96:87:8f:2f:bd:eb:23:
         b1:00:2b:43:2e:5c:8b:3b:ae:e2:e8:79:0b:92:58:f6:8d:fc:
         8c:e6:60:2b:58:11:1f:27:84:6e:ac:7a:b2:ad:39:21:df:32:
         01:65:2b:8a:43:3f:a3:de:ec:48:8c:7c:9a:d5:66:6c:93:4f:
         96:c3:53:7d:3f:3b:61:e0:9e:99:d3:71:6b:71:77:a2:52:9f:
         84:3e:f0:bc:38:b3:2d:64:54:1b:2c:c0:44:d2:bb:d9:f5:aa:
         85:69:97:58:37:48:10:9e:53:27:bd:65:5a:a1:47:02:aa:32:
         6e:c1:2b:e4:45:b5:e9:5f:53:7e:87:75:93:a1:81:26:84:44:
         9d:8d:c3:10:81:82:c9:f0:7b:af:1c:fe:31:fa:cb:f4:d2:e8:
         98:f9:32:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----