Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/Hy1nyhTsSZWvOHVoToK799f8Cj8.roa
File:                     Hy1nyhTsSZWvOHVoToK799f8Cj8.roa (raw, json)
Hash identifier:          J8gXyyu/ekMltke+S7fqeUru4ZZPbYkTFDO1RwNUhTk=
Subject key identifier:   1F:2D:67:CA:14:EC:49:95:AF:38:75:68:4E:82:BB:F7:D7:FC:0A:3F
Certificate issuer:       /CN=341fbe0751e211889374d15d6312c224f695faa2
Certificate serial:       B8AD86
Authority key identifier: 34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/Hy1nyhTsSZWvOHVoToK799f8Cj8.roa
Signing time:             Sat 01 Jan 2022 00:58:04 +0000
ROA not before:           Sat 01 Jan 2022 00:58:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197046
IP address blocks:        178.248.56.0/21 maxlen: 21
                          185.22.236.0/22 maxlen: 22
                          2a03:ab00::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12103046 (0xb8ad86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341fbe0751e211889374d15d6312c224f695faa2
        Validity
            Not Before: Jan  1 00:58:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1f2d67ca14ec4995af3875684e82bbf7d7fc0a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:34:e8:5e:e4:2d:e6:c9:fa:6c:90:55:f6:14:
                    ff:52:54:af:0b:c1:be:33:9c:ff:ac:d4:5d:b3:07:
                    a9:9c:38:d8:91:16:bf:59:ab:83:ed:bb:07:5e:e2:
                    c9:7b:13:5d:e9:f9:f3:56:ae:b9:8f:dd:4d:3a:47:
                    6c:54:dc:f1:9e:ab:43:41:16:c8:42:7c:a4:36:54:
                    d4:cd:2b:e0:85:e4:e6:d8:50:d5:7e:f5:41:12:7f:
                    84:22:89:05:74:fa:4f:f8:8a:fc:c1:83:4a:46:20:
                    c6:ee:21:83:6c:70:76:1b:4e:e9:d2:45:34:05:d9:
                    19:32:65:42:1a:5d:f7:3f:66:e4:df:12:9e:27:ef:
                    21:04:3b:9c:e8:ba:cc:6b:ed:b7:bc:b4:07:b2:80:
                    85:be:ee:eb:85:00:10:20:ea:6c:1a:e6:c5:c9:7e:
                    bd:9d:75:87:6b:9b:ad:f1:dd:d9:24:e8:f0:c4:5f:
                    d7:f4:17:31:f5:9b:ad:bf:c5:25:97:96:c3:af:c9:
                    1a:a3:d5:03:be:8b:e6:a1:36:94:9a:1e:27:e0:fe:
                    12:6e:5b:19:a0:4d:ac:54:b4:cf:58:8a:70:57:b4:
                    61:19:b8:db:9a:0c:74:73:cb:56:e2:5b:90:86:11:
                    45:61:dc:f9:45:5f:df:42:ad:3d:24:b0:e3:ec:71:
                    d5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2D:67:CA:14:EC:49:95:AF:38:75:68:4E:82:BB:F7:D7:FC:0A:3F
            X509v3 Authority Key Identifier:
                keyid:34:1F:BE:07:51:E2:11:88:93:74:D1:5D:63:12:C2:24:F6:95:FA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NB--B1HiEYiTdNFdYxLCJPaV-qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/Hy1nyhTsSZWvOHVoToK799f8Cj8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/014a63-ca18-41df-91e9-c28ee869faa0/1/NB--B1HiEYiTdNFdYxLCJPaV-qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.248.56.0/21
                  185.22.236.0/22
                IPv6:
                  2a03:ab00::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:b0:8e:27:0a:86:c0:0d:fd:ac:b9:14:88:c6:3b:21:0c:b8:
         ad:a5:67:0b:2f:8d:a1:d7:ff:76:90:5b:e8:af:cc:c6:80:df:
         48:5a:9c:24:48:75:8f:f3:fd:5b:df:06:81:c2:72:f0:26:42:
         5c:7e:cd:f6:44:71:00:0c:44:02:d4:50:13:97:9f:4f:87:02:
         c5:ee:b7:6d:71:17:e2:b4:08:2d:05:04:8c:47:d2:22:54:07:
         b8:66:e9:6b:d2:10:a4:46:9e:8f:80:d7:60:91:df:aa:fa:63:
         3e:5d:af:b4:c5:cd:c1:37:36:1f:df:21:ca:11:fc:1e:d8:70:
         34:9a:70:6f:8c:20:27:93:a5:8d:dd:a2:e9:88:11:54:03:57:
         3c:01:d2:9c:a8:ba:f4:f6:ce:7d:fb:3f:5a:94:d1:9b:38:f3:
         61:45:10:aa:26:be:cb:4b:ba:b8:ce:73:8a:86:4d:e0:08:7f:
         09:33:77:df:1f:9f:60:f8:57:bf:4c:9c:42:a5:8c:77:e5:02:
         77:db:08:ae:80:44:31:29:b0:73:87:04:6c:b1:56:07:39:7e:
         24:33:11:fc:3a:31:b0:36:f3:15:e1:b9:eb:ce:a7:b6:ec:85:
         b0:b1:1b:d9:c2:e1:c5:63:3a:2d:1a:1b:d2:f5:35:89:87:43:
         9e:94:58:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----