Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/DoglhGLkcmyYklW8d8TBDCwUR1s.roa
File:                     DoglhGLkcmyYklW8d8TBDCwUR1s.roa (raw, json)
Hash identifier:          HyUhtG9xbq0z2RvYyNt68KZSARO3IS5DxyXcjC78UOI=
Subject key identifier:   0E:88:25:84:62:E4:72:6C:98:92:55:BC:77:C4:C1:0C:2C:14:47:5B
Certificate issuer:       /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial:       178A2593
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/DoglhGLkcmyYklW8d8TBDCwUR1s.roa
Signing time:             Sat 01 Jan 2022 15:04:59 +0000
ROA not before:           Sat 01 Jan 2022 15:04:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59742
IP address blocks:        185.73.236.0/22 maxlen: 22
                          2a03:46a0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394929555 (0x178a2593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
        Validity
            Not Before: Jan  1 15:04:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0e88258462e4726c989255bc77c4c10c2c14475b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:04:1f:42:9d:b3:2c:25:8f:dd:2d:b2:d5:27:
                    a1:ca:3f:e4:c0:15:43:0c:7d:17:d9:c1:97:b5:b3:
                    c8:a9:ae:da:43:32:1d:94:60:bf:6a:4e:c5:11:c0:
                    89:d1:32:04:c6:e9:e1:30:fd:ac:0d:dd:48:4a:95:
                    af:8a:35:c3:d0:7d:7f:1e:9a:69:d3:a9:d5:73:f8:
                    79:81:aa:5a:b5:7c:3a:a5:4b:1a:17:c0:44:62:81:
                    34:9a:fe:e9:35:6a:9f:ba:ee:63:e0:aa:c3:9d:3c:
                    03:77:79:f3:15:4a:f7:af:5e:72:0e:ae:ad:10:9c:
                    da:58:51:1e:07:1f:b8:8f:a4:66:bd:4a:c1:cb:59:
                    ef:fd:b1:9d:46:e7:58:8a:33:13:f8:a5:9a:f3:f6:
                    46:8d:34:97:97:70:44:b2:9d:08:f0:9f:f3:b7:0f:
                    7b:0c:a0:8a:70:fd:cd:b6:3c:14:47:89:7d:2e:68:
                    cf:25:27:c4:95:e4:bf:08:5b:37:47:0f:ab:fd:e3:
                    7f:76:2e:9b:45:71:dc:23:55:c8:db:29:ad:e2:33:
                    13:f3:ab:58:81:be:cf:62:46:6b:c3:4d:5a:b9:0d:
                    82:ed:ac:0b:d2:be:97:94:72:6b:df:94:8e:d3:1d:
                    d0:9f:27:2b:0b:82:04:66:67:ee:fe:c6:82:81:d7:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:88:25:84:62:E4:72:6C:98:92:55:BC:77:C4:C1:0C:2C:14:47:5B
            X509v3 Authority Key Identifier:
                keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/DoglhGLkcmyYklW8d8TBDCwUR1s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.73.236.0/22
                IPv6:
                  2a03:46a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         e3:9b:cf:79:43:86:44:d9:0f:d4:09:91:49:8c:d6:b8:62:95:
         97:cc:86:db:fe:bf:fd:df:52:31:3a:31:1a:a5:70:6f:b0:a4:
         25:cd:8b:ae:ea:87:f4:c4:9d:a8:d8:6c:05:71:ce:da:d0:80:
         7a:ca:0e:e8:ff:23:11:d8:37:11:9f:22:4b:2b:3f:1b:3c:f4:
         2a:9b:b9:fd:34:a4:00:0b:1e:e7:76:5a:f0:14:95:23:17:1a:
         a4:ef:8c:e3:c8:7f:5c:81:8a:a5:d0:89:77:16:3f:a7:60:9c:
         ef:5d:5d:6a:bc:3f:d7:af:f0:cd:9a:ef:72:f7:45:a2:07:10:
         c0:c7:37:33:9b:30:2f:2c:2e:85:d8:38:4f:9b:b1:ac:32:1c:
         fa:26:a6:33:0e:ed:3b:dc:80:ce:22:3c:ca:02:a3:c7:26:4b:
         e1:e3:0c:df:95:4a:9c:1b:9d:a4:22:ae:f8:c0:ee:dd:e0:b9:
         17:bd:62:31:f7:7f:10:23:84:89:74:8b:2c:30:c0:4d:eb:26:
         c1:2a:52:37:99:8f:09:f5:28:92:51:ba:19:00:e5:65:78:3f:
         3c:45:29:59:26:52:f8:3d:76:80:37:61:08:14:a9:d1:96:66:
         e6:b2:54:a4:e7:26:4e:e0:48:74:67:49:d6:5c:fb:3d:58:7a:
         c1:19:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----