Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/6-5sNUoH3xru619ZLKOMuDxQ9yQ.roa
File:                     6-5sNUoH3xru619ZLKOMuDxQ9yQ.roa (raw, json)
Hash identifier:          WAUptqjzIsyoccgACIXAJ6f/9mlShbYQfYo5+cfqghI=
Subject key identifier:   EB:EE:6C:35:4A:07:DF:1A:EE:EB:5F:59:2C:A3:8C:B8:3C:50:F7:24
Certificate issuer:       /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial:       0182D5DAB23E51FCC30F193EF0B0572A6FF3
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/6-5sNUoH3xru619ZLKOMuDxQ9yQ.roa
Signing time:             Thu 25 Aug 2022 16:34:15 +0000
ROA not before:           Thu 25 Aug 2022 16:34:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206924
IP address blocks:        185.230.223.0/24 maxlen: 24
                          2a0c:2f07:d::/48 maxlen: 48
                          2a0c:2f07:f::/48 maxlen: 48
                          2a0c:2f07:384::/48 maxlen: 48
                          2a0c:2f07:29::/48 maxlen: 48
                          2a0c:2f07:9459::/48 maxlen: 48
                          2a0c:2f07:ac1::/48 maxlen: 48
                          2a0c:2f07:4896::/48 maxlen: 48
                          2a0c:2f07:4663::/48 maxlen: 48
                          2a0c:2f07::/64 maxlen: 64
                          2a0c:2f07::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:d5:da:b2:3e:51:fc:c3:0f:19:3e:f0:b0:57:2a:6f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
        Validity
            Not Before: Aug 25 16:34:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ebee6c354a07df1aeeeb5f592ca38cb83c50f724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:be:d4:2c:3c:88:3a:57:43:49:2e:57:2d:
                    b1:4c:1b:83:ef:1d:d6:f7:e3:ff:b0:0f:77:62:f7:
                    97:52:24:96:2c:60:a1:4f:dd:3b:1c:c3:ed:b0:36:
                    b2:76:ec:72:a7:73:f1:fc:17:b3:79:d8:21:da:ad:
                    2a:b4:60:da:dd:d2:2b:ea:ab:8c:91:27:cd:22:56:
                    65:a0:d4:48:9b:68:f3:41:2b:58:60:e9:bf:00:b3:
                    f2:60:b6:02:36:d6:68:7e:e7:06:77:dd:60:88:3e:
                    d9:25:99:e1:a7:ac:92:27:66:24:fa:af:d9:5a:07:
                    8e:c4:41:0c:7c:85:7b:cb:84:4d:4d:99:12:c7:77:
                    e0:1e:7a:87:e5:9c:61:6f:35:96:45:13:b6:62:e6:
                    ab:96:cc:fc:5d:25:11:aa:7a:1d:ef:fc:e7:df:1c:
                    81:a1:d2:bf:59:93:1d:53:98:b8:62:34:fc:e8:f5:
                    73:c5:81:38:09:5e:69:6b:b9:4a:c3:fd:3d:f2:85:
                    ed:77:33:f1:61:88:fc:46:d5:e4:45:e2:a4:f1:14:
                    fe:6d:c1:77:45:4b:50:33:83:70:61:00:f9:15:ca:
                    58:6a:7a:d1:e1:87:ea:7c:39:ab:0a:1f:d9:05:2d:
                    1d:3b:1d:5e:26:b6:43:0c:df:48:8e:12:52:fb:45:
                    8e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EE:6C:35:4A:07:DF:1A:EE:EB:5F:59:2C:A3:8C:B8:3C:50:F7:24
            X509v3 Authority Key Identifier:
                keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/6-5sNUoH3xru619ZLKOMuDxQ9yQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.223.0/24
                IPv6:
                  2a0c:2f07::/48
                  2a0c:2f07:d::/48
                  2a0c:2f07:f::/48
                  2a0c:2f07:29::/48
                  2a0c:2f07:384::/48
                  2a0c:2f07:ac1::/48
                  2a0c:2f07:4663::/48
                  2a0c:2f07:4896::/48
                  2a0c:2f07:9459::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:8d:dd:2e:9e:2d:71:0e:c1:aa:e9:d3:2c:30:0c:02:e5:fb:
         2a:55:ed:7c:15:29:de:3c:1e:d4:df:2f:3c:82:f9:a2:f0:b5:
         22:a0:11:fd:72:df:32:0c:20:58:07:2f:7f:97:1d:32:42:a8:
         f7:14:f6:6c:24:dc:91:f1:0c:3d:a1:92:cb:30:15:b5:f7:76:
         e3:8f:d4:9d:d3:2e:82:69:b2:eb:b2:20:96:74:09:fc:80:c7:
         68:71:d1:00:80:01:16:2d:48:db:6a:12:97:db:56:bb:0f:2c:
         96:36:f8:0b:0d:24:9e:df:44:3e:a4:5a:47:02:c6:41:36:17:
         70:05:a1:8e:f1:b4:cf:2b:0c:dd:e6:27:37:2a:ba:71:9a:2d:
         66:1f:05:0a:a5:8e:fb:6a:29:76:35:79:16:f3:5b:c0:63:74:
         e1:7b:c9:1a:69:eb:be:fc:20:36:03:23:21:c7:5d:46:40:b7:
         f8:41:50:e3:5e:b9:31:78:20:5e:b6:56:5e:61:ac:4a:fe:c4:
         6a:af:68:89:8e:90:dc:b2:4e:32:73:96:97:dd:a5:32:47:38:
         ae:54:9f:80:20:f1:87:08:ff:8d:1e:51:59:42:d6:70:7d:7f:
         37:bc:4c:c7:ac:2a:83:0f:f7:3b:b8:d6:f4:ae:e9:e3:8b:e9:
         0d:6c:8a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----