Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/n4KycLLM2EaAUkH4PAmVfyFOCXA.roa
File:                     n4KycLLM2EaAUkH4PAmVfyFOCXA.roa (raw, json)
Hash identifier:          pWx0ihEe9GtxdM8c83mKVWKpHSyUGvxue40OeQ3zJRw=
Subject key identifier:   9F:82:B2:70:B2:CC:D8:46:80:52:41:F8:3C:09:95:7F:21:4E:09:70
Certificate issuer:       /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial:       1B4A95A4
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/n4KycLLM2EaAUkH4PAmVfyFOCXA.roa
Signing time:             Sat 01 Jan 2022 10:01:28 +0000
ROA not before:           Sat 01 Jan 2022 10:01:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57951
IP address blocks:        37.188.88.0/21 maxlen: 21
                          2a00:c340::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457872804 (0x1b4a95a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
        Validity
            Not Before: Jan  1 10:01:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9f82b270b2ccd846805241f83c09957f214e0970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:b9:47:1c:1a:93:81:41:b0:4b:17:64:08:
                    9b:cf:72:42:15:32:e1:dd:d2:9b:5e:8b:4a:ed:32:
                    3f:c0:d4:a1:08:ce:84:c0:44:dd:fa:bd:81:36:78:
                    38:8d:5b:74:fb:85:42:38:c4:70:ba:53:d3:f5:ea:
                    bd:18:37:db:de:86:53:fd:a7:87:2b:d5:0a:1a:68:
                    44:05:15:12:6c:54:fd:87:ce:40:cb:6a:0b:50:75:
                    63:a8:07:f8:2b:9b:49:be:c7:68:e2:70:f7:79:2a:
                    01:30:f6:24:e8:9d:3f:2c:98:a0:87:14:51:d8:f4:
                    0a:a6:25:40:7f:e3:01:2d:1a:88:0f:5a:dd:03:2b:
                    fa:e5:78:ce:8b:33:57:8b:db:fb:4d:7e:8e:21:a7:
                    96:88:1a:e3:1b:9f:34:d5:26:ae:da:a4:da:0d:05:
                    92:4a:f7:c4:ab:8b:83:25:4e:ca:35:ef:bd:c3:9a:
                    cf:fa:cc:85:ba:4d:62:3d:b3:57:20:d6:bd:23:8d:
                    a2:1f:f4:a3:ec:64:d9:6a:5f:0b:74:d3:6e:3a:b9:
                    d8:b2:4d:e1:7b:ba:2c:28:e1:37:37:2c:7f:9a:74:
                    7c:19:c0:b8:4a:dc:ea:23:2b:49:26:34:24:29:00:
                    c8:f6:5d:89:e4:97:7f:82:83:04:04:ac:31:95:98:
                    50:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:82:B2:70:B2:CC:D8:46:80:52:41:F8:3C:09:95:7F:21:4E:09:70
            X509v3 Authority Key Identifier:
                keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/n4KycLLM2EaAUkH4PAmVfyFOCXA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.188.88.0/21
                IPv6:
                  2a00:c340::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:f8:6f:de:1a:58:3a:9c:9f:aa:df:03:05:3d:d5:df:bb:4f:
         65:d1:9d:58:cb:c0:f6:8e:d1:f0:69:9f:fc:ce:62:0a:22:1d:
         6d:75:b8:36:0a:fa:3d:4d:94:54:bd:7a:2e:54:61:45:75:70:
         fe:1b:c9:e4:8f:cc:e3:ee:a9:20:a4:4c:5b:0a:ee:18:3c:74:
         1f:76:26:5c:e9:0e:33:f3:b0:95:3a:be:cb:b0:e8:d7:67:49:
         5b:2f:8f:85:a4:71:cf:29:74:94:06:7d:0b:57:78:b9:f6:a3:
         87:2b:9b:53:24:39:3e:cd:dd:84:05:7a:4f:42:09:d8:8d:79:
         a3:33:3c:d4:56:fc:dc:14:ff:0b:53:da:1f:cf:dd:6d:5d:fa:
         20:97:77:c7:68:14:36:88:f8:4e:83:93:28:03:7c:f5:b6:2f:
         84:17:cb:69:fe:c2:17:05:55:b6:8a:89:27:4e:c8:06:a4:fa:
         41:0e:4a:c4:47:e7:f8:c1:a6:72:41:fe:09:92:f4:ac:84:9e:
         e1:8a:49:0f:f8:ea:55:29:a7:34:01:78:26:a5:5d:c4:5d:cd:
         c7:c4:b2:69:bd:b6:67:e1:38:ee:11:8d:31:18:20:b8:fa:f9:
         ef:7f:20:4e:59:13:aa:ba:cb:9b:2b:a2:af:1b:1b:44:36:37:
         aa:29:e6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----