Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/6S361fHCIAqAy4qX13eFGtbWbHA.roa
File:                     6S361fHCIAqAy4qX13eFGtbWbHA.roa (raw, json)
Hash identifier:          A41pg7GErI5SRFj0B+w4ks0US0TVXH7fMbFcchIILc0=
Subject key identifier:   E9:2D:FA:D5:F1:C2:20:0A:80:CB:8A:97:D7:77:85:1A:D6:D6:6C:70
Certificate issuer:       /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
Certificate serial:       102EAEA1
Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/6S361fHCIAqAy4qX13eFGtbWbHA.roa
Signing time:             Sat 01 Jan 2022 03:54:51 +0000
ROA not before:           Sat 01 Jan 2022 03:54:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206828
IP address blocks:        185.175.60.0/24 maxlen: 24
                          185.175.61.0/24 maxlen: 24
                          185.175.62.0/24 maxlen: 24
                          2a0b:d100::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271494817 (0x102eaea1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9
        Validity
            Not Before: Jan  1 03:54:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e92dfad5f1c2200a80cb8a97d777851ad6d66c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ee:91:63:f5:ca:c7:a2:20:99:91:b9:70:82:
                    1f:23:73:91:65:bc:f6:33:0b:62:b8:df:73:18:ad:
                    40:f5:65:1f:33:34:75:18:27:76:90:40:c5:d8:4c:
                    be:94:0a:de:45:62:01:0b:56:e9:f7:90:17:3b:c3:
                    36:c2:d8:62:df:6d:11:c0:7c:91:09:54:8d:e6:c9:
                    f7:d1:3d:e5:de:d6:30:74:3c:10:4e:64:b2:4b:27:
                    3b:fb:7a:23:b0:db:5d:11:64:d8:76:43:7e:15:81:
                    48:f9:db:76:e1:af:db:db:c4:68:86:bd:0b:b4:99:
                    7b:81:94:2e:58:1d:2b:b3:97:0e:b4:fa:30:9e:99:
                    c3:df:80:45:c3:ea:7f:99:09:78:d5:f9:26:42:44:
                    1a:29:90:59:c6:bd:fb:67:e2:4b:a8:f6:2a:be:2b:
                    f1:57:15:ab:2c:1a:58:08:f9:07:67:bf:84:39:34:
                    d1:59:5b:b5:5c:ff:83:e5:46:29:85:6f:12:97:e7:
                    f3:d7:b4:c7:ef:43:9a:d4:fe:e0:8a:5f:d5:c4:c1:
                    30:03:5f:ae:a5:bf:e4:2d:a6:e3:ea:fb:b2:1d:a7:
                    b2:e5:68:5a:29:26:1f:f9:90:cf:14:3e:37:d5:77:
                    e4:a8:6b:fb:da:19:26:d9:1c:13:4f:5b:ac:32:8a:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2D:FA:D5:F1:C2:20:0A:80:CB:8A:97:D7:77:85:1A:D6:D6:6C:70
            X509v3 Authority Key Identifier:
                keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/6S361fHCIAqAy4qX13eFGtbWbHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.175.60.0-185.175.62.255
                IPv6:
                  2a0b:d100::/29

    Signature Algorithm: sha256WithRSAEncryption
         13:fa:85:cb:07:75:a5:6b:55:1a:d2:8b:d8:91:3f:c4:97:e4:
         b1:5f:a2:3b:41:fb:dc:b1:a1:08:8a:e8:67:a5:5f:15:f6:ab:
         5e:60:d7:3f:b9:a8:39:07:67:c1:36:99:9e:12:ee:52:3c:a5:
         62:bf:f2:67:76:e0:d9:74:96:38:e9:e4:b8:25:85:2f:0b:7f:
         86:fb:87:77:25:8f:2e:7f:d6:d2:89:ac:eb:d7:de:0f:95:79:
         c9:a0:83:ce:11:dc:cd:34:78:35:b7:86:a3:df:13:59:66:8b:
         cb:ed:32:17:61:2d:53:9b:aa:9a:9d:6f:92:47:56:06:ae:fb:
         6b:73:6f:1a:fb:e1:7a:a4:da:ce:53:37:a5:8d:3a:aa:15:6c:
         51:0c:2d:3d:ce:84:96:73:7b:30:93:40:56:bd:fc:de:1d:5f:
         b7:57:85:a8:f9:32:49:fe:99:e8:c9:75:eb:21:35:e3:1a:bf:
         e6:6e:63:9f:f1:68:67:98:b9:49:f7:4f:0c:45:2d:cf:aa:ae:
         c1:c3:58:e8:a2:74:c0:15:34:9a:5f:76:0a:95:87:56:0b:a0:
         bc:f9:0f:2d:6d:2c:8d:ff:62:d8:57:23:63:fd:dd:7c:4b:45:
         ed:16:a1:4a:b4:a4:96:07:98:e9:67:e6:ec:14:16:e4:26:3a:
         00:43:56:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----