Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/abrLxH6N2MUrgF_JuL6XNcp5JWc.roa
File:                     abrLxH6N2MUrgF_JuL6XNcp5JWc.roa (raw, json)
Hash identifier:          Ebvo0KWa8oR5Zu+s0bwUsw9eO/2FeriIkIixOJXI/dc=
Subject key identifier:   69:BA:CB:C4:7E:8D:D8:C5:2B:80:5F:C9:B8:BE:97:35:CA:79:25:67
Certificate issuer:       /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial:       086B5264
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/abrLxH6N2MUrgF_JuL6XNcp5JWc.roa
Signing time:             Sat 01 Jan 2022 06:05:20 +0000
ROA not before:           Sat 01 Jan 2022 06:05:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15600
IP address blocks:        185.167.8.0/22 maxlen: 22
                          2a0b:2e00::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141251172 (0x86b5264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
        Validity
            Not Before: Jan  1 06:05:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=69bacbc47e8dd8c52b805fc9b8be9735ca792567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:d8:73:06:76:3e:43:d0:e5:2c:44:a3:a0:
                    ee:d8:f4:61:68:be:17:27:23:05:f4:e6:78:0f:0a:
                    f7:75:de:b5:67:69:4f:50:a1:e1:03:a0:6a:91:05:
                    a0:c8:8c:e0:73:be:31:f5:35:c3:74:d0:e1:be:b9:
                    7e:d3:7f:18:5c:8e:32:63:22:88:6a:c1:34:e9:5a:
                    d3:35:98:57:e6:09:f0:8d:a4:0c:7f:ee:0a:53:4a:
                    fa:15:72:52:72:fa:a6:fe:59:70:34:33:da:b9:21:
                    18:0c:ec:45:b8:9b:a8:30:78:75:eb:07:d9:12:29:
                    f6:12:bb:76:e7:62:63:0c:f3:57:45:ee:53:1d:04:
                    9a:46:d3:11:c3:dd:b4:3f:83:00:bc:e6:b4:f2:a1:
                    dc:20:c7:e7:79:05:76:4a:6e:54:a7:14:11:3f:0c:
                    95:f0:d3:a7:6f:0d:be:f3:09:92:ae:63:7e:5a:82:
                    01:68:82:55:5b:fc:f2:13:eb:c5:ae:4d:6a:3e:8a:
                    92:f5:71:c6:eb:96:42:01:c0:b5:81:38:5a:7c:0a:
                    c0:46:1f:00:f8:71:1b:4c:1c:a8:46:8c:eb:35:13:
                    76:df:f6:f7:9f:d1:f3:c7:dd:b2:d4:39:39:a6:12:
                    54:31:5e:de:31:23:4e:39:c4:fa:52:3d:30:41:1f:
                    f6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BA:CB:C4:7E:8D:D8:C5:2B:80:5F:C9:B8:BE:97:35:CA:79:25:67
            X509v3 Authority Key Identifier:
                keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/abrLxH6N2MUrgF_JuL6XNcp5JWc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.8.0/22
                IPv6:
                  2a0b:2e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         79:f6:9e:de:09:d2:39:33:36:7a:f8:ba:ed:f0:20:9c:33:31:
         a1:d0:f6:af:36:3d:47:6e:01:e5:89:17:de:a0:53:86:78:d6:
         38:12:36:27:93:14:09:20:1b:a6:22:7f:d9:eb:d4:f7:73:98:
         71:21:a4:fa:93:a6:99:9f:72:4c:56:86:e7:78:6b:78:8a:b8:
         ec:cd:3a:6b:e4:a5:54:fb:5e:f4:9a:1c:d3:f8:65:dd:33:b4:
         d4:10:fb:80:db:d6:18:73:0c:bb:f3:90:1b:81:f7:78:c4:d9:
         22:46:e0:57:18:f4:a5:cf:8c:7f:3a:ff:87:39:bc:78:de:a0:
         bd:14:68:3c:d3:71:1b:8e:21:25:65:ed:48:60:2f:3e:9a:61:
         a7:58:5b:98:ff:eb:02:c1:67:af:3f:74:72:a3:44:8d:8b:39:
         4f:b9:4e:97:ef:6e:90:18:5d:4a:0c:89:62:0b:4f:86:bd:1b:
         11:f7:c8:29:46:a1:83:79:e4:da:15:6c:7c:04:cb:bf:af:f9:
         6e:5b:4f:9f:70:ba:f3:99:c4:91:6b:c3:a2:e3:02:9d:9d:61:
         eb:27:3c:3b:32:0f:56:4f:dc:06:2b:8e:37:ce:58:1d:3e:30:
         5d:44:40:7c:59:b3:16:9e:c3:c6:96:8f:9f:79:3a:82:ad:01:
         26:1b:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----