Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/BdzHa2tgEtqS5GhMxAPNDx47vWk.roa
File:                     BdzHa2tgEtqS5GhMxAPNDx47vWk.roa (raw, json)
Hash identifier:          wdUiGMYMb3Gw/29sAUqA5lo43Xh/1DRYxaM5LfgJsQo=
Subject key identifier:   05:DC:C7:6B:6B:60:12:DA:92:E4:68:4C:C4:03:CD:0F:1E:3B:BD:69
Certificate issuer:       /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial:       054C6856
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/BdzHa2tgEtqS5GhMxAPNDx47vWk.roa
Signing time:             Sat 01 Jan 2022 15:58:40 +0000
ROA not before:           Sat 01 Jan 2022 15:58:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9063
IP address blocks:        194.180.160.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88893526 (0x54c6856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
        Validity
            Not Before: Jan  1 15:58:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05dcc76b6b6012da92e4684cc403cd0f1e3bbd69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:1c:5c:16:81:8a:e5:ea:fe:b1:f3:5b:9a:
                    41:fd:3a:1b:08:6f:1d:43:03:59:ae:c8:85:17:4b:
                    92:c1:3b:df:b7:47:50:b0:69:fe:db:fc:0c:48:6d:
                    0d:ce:a1:e4:e9:0e:a1:57:f6:6c:06:0f:9b:a7:45:
                    24:a8:c1:ef:4a:10:bf:10:d5:52:10:f3:0d:a1:bb:
                    3d:41:10:d6:c0:02:10:4a:b1:1a:5f:c2:3b:24:7b:
                    09:2a:be:9a:b4:92:2b:78:c8:d3:31:f3:0c:99:0e:
                    9b:9d:92:6f:8c:ad:b2:20:c6:97:f6:a4:bc:6e:08:
                    10:ac:e2:11:4f:74:3b:b9:f8:02:f6:08:fc:8e:ae:
                    cf:ac:08:a9:20:fc:5a:fb:a5:18:41:fa:bc:81:af:
                    51:66:68:b8:e1:d4:ad:7e:f6:26:56:7c:e8:34:80:
                    7d:8f:c1:2e:c7:57:7b:e6:be:98:22:2f:90:e0:0c:
                    e8:b9:63:3c:d5:2f:d3:93:c2:71:5a:dd:8d:49:b3:
                    ae:38:54:f7:fd:7b:f7:fc:ab:e0:c6:cd:32:25:c1:
                    66:bd:48:e6:d1:30:88:a7:57:3f:85:21:93:bd:6f:
                    14:db:6f:f6:e2:3a:cd:03:b2:06:91:af:aa:6b:af:
                    bc:f6:f7:f6:b4:09:c2:e9:d7:07:6c:84:70:6f:da:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DC:C7:6B:6B:60:12:DA:92:E4:68:4C:C4:03:CD:0F:1E:3B:BD:69
            X509v3 Authority Key Identifier:
                keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/BdzHa2tgEtqS5GhMxAPNDx47vWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:ff:75:8f:c3:19:d7:7b:ae:ef:07:9a:58:55:ff:67:1d:6c:
         44:16:f7:6e:b6:4d:8c:d0:f3:91:36:b0:13:84:63:f9:a9:e7:
         b1:a3:c4:55:74:16:4a:2b:20:56:71:20:81:e8:2a:4c:df:aa:
         1b:7c:52:a1:8a:4f:b6:b6:c1:3c:c8:94:fb:cf:cb:85:91:1d:
         3b:83:a3:35:cb:ea:0d:e9:ea:51:5e:d9:a5:2f:82:3d:3f:42:
         28:50:fe:cb:c8:f2:ba:ee:06:bd:b6:f3:3c:58:5a:62:95:a3:
         6e:63:6f:fd:8c:7f:64:b3:1f:2e:3f:e2:8b:fb:7c:95:02:1d:
         25:21:ee:45:ce:08:51:f2:95:0e:8a:02:d2:7a:83:7d:df:51:
         35:09:dd:e6:91:8e:32:c2:07:e0:e1:2e:62:ea:b2:20:1e:7e:
         89:3a:e8:46:25:9d:13:b0:bc:6c:6a:b1:45:93:7e:f2:49:04:
         2f:ab:1d:a5:1c:79:6e:a5:df:0e:ca:dd:73:f5:9b:06:4f:44:
         77:b5:29:5f:42:55:37:77:5c:4c:0e:61:aa:2b:04:f0:19:ce:
         55:70:12:cd:b4:1a:ae:5d:07:f8:e8:ec:06:4e:01:14:f2:55:
         33:94:7b:2a:ed:cb:37:ca:5f:53:c5:74:82:f0:c3:47:36:ce:
         a4:13:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----