Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/5kK6CMxH7MIttKKR_t0xiyuINDY.roa
File:                     5kK6CMxH7MIttKKR_t0xiyuINDY.roa (raw, json)
Hash identifier:          5o2mQ6qGDczm473meS7lwYp6jCVIFvJKgSbYofWY3RQ=
Subject key identifier:   E6:42:BA:08:CC:47:EC:C2:2D:B4:A2:91:FE:DD:31:8B:2B:88:34:36
Certificate issuer:       /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial:       0488A97F
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/5kK6CMxH7MIttKKR_t0xiyuINDY.roa
Signing time:             Sat 01 Jan 2022 12:06:37 +0000
ROA not before:           Sat 01 Jan 2022 12:06:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206112
IP address blocks:        80.92.237.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76065151 (0x488a97f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
        Validity
            Not Before: Jan  1 12:06:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e642ba08cc47ecc22db4a291fedd318b2b883436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b8:c4:17:33:e4:e3:64:be:a9:04:e8:0c:46:
                    55:b5:fa:ed:8a:4d:a8:59:b0:66:98:82:f0:2c:d5:
                    85:af:c6:13:92:89:7a:a3:ff:11:e2:05:e0:ae:6c:
                    b6:04:bc:4f:9d:ad:4a:5b:6f:7f:d0:65:c6:a3:6b:
                    99:53:42:e0:4a:59:ed:62:bf:e7:93:a8:73:ca:36:
                    c0:6d:66:d1:94:31:4e:c9:bb:4c:b3:28:27:d6:e9:
                    1a:44:ed:f0:aa:ef:36:19:1c:77:1b:81:e7:95:cb:
                    8e:9e:9c:38:f1:04:7e:0d:ab:71:49:90:ca:a5:3d:
                    c5:c9:42:1a:f2:14:cf:42:1f:42:85:e3:6a:8f:c5:
                    97:cd:82:dd:b6:f9:82:b6:37:f6:ba:b4:d5:38:d3:
                    2f:58:71:7e:c1:f8:1a:46:1e:31:a9:b0:55:a4:a6:
                    9d:17:e8:7d:35:a3:13:99:97:48:b2:20:45:fe:f7:
                    ce:8a:b9:0b:43:93:4f:74:6c:20:da:40:d8:a9:94:
                    39:26:21:86:ec:ad:9f:f4:22:c3:60:66:59:40:7d:
                    95:2e:99:1b:db:f9:b0:cb:94:8a:7a:65:4d:0d:10:
                    a3:a9:bb:b6:7e:10:af:a6:e7:db:16:03:6e:22:a2:
                    1e:cc:b4:81:2d:c4:4e:fa:7d:63:14:97:71:1e:90:
                    5f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:42:BA:08:CC:47:EC:C2:2D:B4:A2:91:FE:DD:31:8B:2B:88:34:36
            X509v3 Authority Key Identifier:
                keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/5kK6CMxH7MIttKKR_t0xiyuINDY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.92.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:f1:22:98:b0:fa:4b:57:ca:1b:d3:a7:f0:b5:6c:55:ae:80:
         a5:ce:03:fe:73:0c:e6:21:09:0c:c7:4d:07:72:a7:ee:ba:61:
         5b:2d:8e:92:97:85:e1:7f:67:df:f6:fe:c5:36:17:2a:ad:d6:
         8c:f9:5f:4d:51:59:d3:cc:c3:d4:f1:91:1f:a4:e4:4f:cc:7a:
         f0:c5:1a:90:8f:6c:ca:d7:77:21:9d:95:14:f2:a1:49:ed:ac:
         ee:3a:e9:0c:9d:b9:21:63:d5:82:30:c7:c4:6d:f8:71:92:c9:
         e7:c6:83:ee:62:13:fc:07:f7:c4:7f:f4:2b:bb:2d:05:a1:22:
         72:ae:61:93:29:c2:92:8b:76:85:79:ea:31:4a:8f:22:ab:44:
         13:fa:f2:f8:4f:b2:52:0e:d1:03:44:e7:7d:c9:4c:cc:2d:30:
         a9:8a:d6:c2:7a:0a:90:9b:c6:ff:03:f2:d1:15:a8:c0:df:6c:
         aa:97:ee:76:a3:35:48:87:fa:2e:b7:bc:75:d0:dc:d1:c5:6b:
         5d:d8:02:0a:37:27:88:d7:3d:78:27:32:66:f8:8c:ba:bf:1d:
         64:91:8c:66:38:dc:84:79:51:37:b9:6a:92:fb:2a:15:31:91:
         10:72:c9:b3:5d:7a:d6:17:60:9d:aa:75:d8:bf:90:78:e1:90:
         cd:65:30:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----