Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/0OczDb5jOQ2dQegIHjef1EnXhpo.roa
File:                     0OczDb5jOQ2dQegIHjef1EnXhpo.roa (raw, json)
Hash identifier:          L8M206nXHusuKMNSMVL6LZeJyG734wJtc/19kb3ksmg=
Subject key identifier:   D0:E7:33:0D:BE:63:39:0D:9D:41:E8:08:1E:37:9F:D4:49:D7:86:9A
Certificate issuer:       /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial:       0486EAEB
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/0OczDb5jOQ2dQegIHjef1EnXhpo.roa
Signing time:             Sat 01 Jan 2022 12:06:36 +0000
ROA not before:           Sat 01 Jan 2022 12:06:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44390
IP address blocks:        80.92.239.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75950827 (0x486eaeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
        Validity
            Not Before: Jan  1 12:06:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d0e7330dbe63390d9d41e8081e379fd449d7869a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:81:99:d4:91:39:fa:1d:18:95:a0:a8:ef:
                    f0:c5:5b:76:be:db:3e:71:ac:7e:ba:a5:6b:b4:a3:
                    9e:d0:26:b6:57:17:be:a2:c4:5e:d2:0d:ed:e1:68:
                    45:a4:e6:83:6f:a1:61:00:bc:ba:6b:00:2c:88:de:
                    4f:de:14:c8:05:0e:e7:9b:4a:ab:86:2d:53:23:13:
                    c4:50:87:cd:38:85:99:1b:c0:c4:30:96:80:25:2c:
                    c1:d3:2d:83:eb:8b:93:11:0d:e7:b6:7c:8f:fb:ac:
                    bd:ab:66:ae:7e:ed:7e:3a:e6:ee:d4:23:45:aa:d9:
                    00:82:4e:2f:9c:9c:9a:75:6b:dc:be:02:fd:f1:1b:
                    84:07:a9:f4:10:58:61:17:7b:29:0d:c3:c1:49:59:
                    d2:23:a2:6c:2b:2c:fb:ba:7d:18:d6:ff:18:38:39:
                    5c:78:87:47:80:f0:42:56:73:2e:f8:88:84:ba:87:
                    aa:fd:5b:96:87:19:e0:23:ea:3e:cd:9d:1a:f8:f3:
                    99:33:52:ae:b4:99:d6:f1:ff:ee:b6:25:09:b6:e2:
                    55:f3:05:9d:17:7c:a1:24:08:e3:30:0d:6b:3c:01:
                    02:2b:1f:9e:ff:3d:c9:b3:27:76:a1:71:07:a2:ac:
                    d9:f2:d7:5a:e0:e4:c9:18:99:a9:80:16:f2:46:f7:
                    8e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E7:33:0D:BE:63:39:0D:9D:41:E8:08:1E:37:9F:D4:49:D7:86:9A
            X509v3 Authority Key Identifier:
                keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/0OczDb5jOQ2dQegIHjef1EnXhpo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.92.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:8f:78:5b:d9:e4:41:ca:bd:fd:82:f4:de:51:d8:83:e8:48:
         7d:44:b6:8c:4c:af:a7:c5:57:ba:68:a3:27:97:28:47:7f:93:
         df:a1:72:91:58:b7:2b:2d:68:97:63:c7:b6:e6:f5:45:f5:ed:
         5a:18:64:76:94:63:da:07:97:57:23:a5:e4:ab:05:5d:60:d6:
         ed:16:65:11:5b:4c:9b:bb:2d:13:07:c5:a0:7b:f3:ef:8c:aa:
         19:2c:84:ba:eb:09:4f:aa:47:3e:21:77:26:63:4c:55:71:ac:
         94:92:e9:33:d4:cc:fe:86:45:43:15:37:29:9b:dc:b2:cd:39:
         94:56:dd:a6:38:f2:2b:2e:65:d7:30:78:6a:be:bb:ea:e7:83:
         90:60:1b:5e:eb:72:08:8a:8d:c8:2b:e2:a5:75:98:2e:ba:7b:
         3a:78:74:e0:04:9f:5f:4d:3b:0e:05:e1:c9:b0:76:19:bb:74:
         fe:68:b1:ca:03:f9:ce:3c:50:be:25:43:10:85:16:ec:59:c1:
         f0:e2:db:49:6d:a9:65:96:ed:ed:17:03:4a:14:dd:26:f4:e0:
         27:c5:d0:16:c8:25:f1:76:8f:86:77:4c:f3:8a:a0:d9:1c:75:
         45:a5:d0:44:00:e6:a6:80:04:7b:8d:c4:cc:20:07:83:9e:fb:
         52:64:49:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----