Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/e9bz_Ftg7C4R_nnOeQqpXHQS30o.roa
File:                     e9bz_Ftg7C4R_nnOeQqpXHQS30o.roa (raw, json)
Hash identifier:          +oOgEAv14B14N02cv9Va0/jzGkrGehVzXLmLKKT3t/E=
Subject key identifier:   7B:D6:F3:FC:5B:60:EC:2E:11:FE:79:CE:79:0A:A9:5C:74:12:DF:4A
Certificate issuer:       /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial:       0184BE8B25616FDD22A66E600727CD56EB41
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/e9bz_Ftg7C4R_nnOeQqpXHQS30o.roa
Signing time:             Mon 28 Nov 2022 14:01:40 +0000
ROA not before:           Mon 28 Nov 2022 14:01:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201457
IP address blocks:        185.74.204.0/22 maxlen: 24
                          2a03:4760::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:be:8b:25:61:6f:dd:22:a6:6e:60:07:27:cd:56:eb:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
        Validity
            Not Before: Nov 28 14:01:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7bd6f3fc5b60ec2e11fe79ce790aa95c7412df4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:73:ce:8c:f7:cb:51:a7:cc:53:00:ec:7e:98:
                    3a:1e:fc:86:64:50:3b:48:2a:9d:98:d1:22:93:c5:
                    43:5f:a5:b4:1c:9e:fd:10:c9:fd:8e:2f:e1:c4:a5:
                    6e:88:54:a5:cd:f0:b8:c6:b9:88:83:27:e3:d0:79:
                    09:e0:5c:60:09:cd:54:67:9b:5a:a8:4f:fa:ce:50:
                    f7:42:42:82:38:f4:23:64:68:67:23:41:e8:91:5e:
                    fc:7e:0c:af:92:ec:87:5e:26:1d:50:75:d8:da:67:
                    83:65:d9:f9:e7:29:2a:2f:05:29:1b:04:59:9b:82:
                    b4:07:9f:fd:67:80:32:99:11:e5:41:1b:5e:f1:11:
                    82:f9:47:fa:a8:00:15:d1:49:1b:b7:5f:9f:89:02:
                    9f:29:07:46:36:16:b7:1b:9e:88:4a:da:55:ef:1c:
                    80:ba:90:cf:dc:80:bd:1b:9e:af:3e:77:a6:b7:cc:
                    f1:90:9b:32:19:bd:6d:7c:cc:a6:4f:0f:8c:96:9e:
                    02:a9:6b:7c:84:22:8e:89:e5:bf:19:6a:ba:70:89:
                    6c:c5:d3:ae:40:d7:48:4f:82:a2:ab:12:09:b6:33:
                    f1:61:33:f1:77:bf:a4:ef:5a:f4:f5:5a:1f:bb:f8:
                    e9:74:2d:4e:68:ae:69:57:d3:8d:05:ce:9a:b6:40:
                    56:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D6:F3:FC:5B:60:EC:2E:11:FE:79:CE:79:0A:A9:5C:74:12:DF:4A
            X509v3 Authority Key Identifier:
                keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/e9bz_Ftg7C4R_nnOeQqpXHQS30o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.74.204.0/22
                IPv6:
                  2a03:4760::/29

    Signature Algorithm: sha256WithRSAEncryption
         43:42:35:d5:a1:56:ee:a1:d7:36:e8:e0:ed:87:06:69:2e:7a:
         b9:80:f7:3f:fe:7d:dc:ca:3d:c8:f0:c6:32:09:7f:3a:c7:25:
         78:ee:b5:0e:f6:2c:be:ff:78:b7:81:bf:76:42:bf:00:21:cb:
         87:66:31:ba:bc:3e:51:52:83:6f:81:9e:a6:4d:6d:1b:ee:21:
         d4:f9:6c:80:da:0b:b4:74:97:1c:d5:25:bd:04:48:e4:07:b5:
         c2:4c:b9:5b:ff:57:13:3b:0a:7c:b6:55:80:78:d0:a9:52:0e:
         29:11:35:bd:3c:3c:6e:16:2f:a9:33:3d:41:b9:c7:af:16:ce:
         ac:fb:c8:91:02:f1:ac:e5:8e:26:12:39:ce:d6:be:65:69:bb:
         a8:23:4e:1f:60:7d:22:b4:f8:bf:d3:0e:27:9a:22:c0:ef:00:
         49:1d:9a:26:b6:f1:9d:e1:fb:8c:57:e1:3a:dc:7b:a2:14:2f:
         5c:45:25:e3:12:0b:b5:22:61:a3:f4:e9:be:1b:86:3b:d8:63:
         af:d0:d9:0f:12:0e:6d:64:9f:f9:8c:ee:2a:30:3c:32:44:60:
         27:2f:22:3c:04:87:d1:c0:22:62:21:f2:4d:0e:99:18:4b:21:
         a3:e9:77:f6:76:65:02:b6:82:ba:ce:5c:d3:42:c5:12:70:93:
         91:bd:54:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----