Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/VlrPdjbY4y0e_TWMMrPgrUAXGNc.roa
File:                     VlrPdjbY4y0e_TWMMrPgrUAXGNc.roa (raw, json)
Hash identifier:          PaTklu1pw7tHjC+zIwhPD6i8vYMQjQ0CXMpDB6ABQRM=
Subject key identifier:   56:5A:CF:76:36:D8:E3:2D:1E:FD:35:8C:32:B3:E0:AD:40:17:18:D7
Certificate issuer:       /CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
Certificate serial:       023A1171
Authority key identifier: 66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/VlrPdjbY4y0e_TWMMrPgrUAXGNc.roa
Signing time:             Sat 01 Jan 2022 15:06:44 +0000
ROA not before:           Sat 01 Jan 2022 15:06:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207045
IP address blocks:        185.123.113.0/24 maxlen: 24
                          2a0c:6400::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37359985 (0x23a1171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66118b4e1c9e5543d1ea70c3b73f8e3fee02dea2
        Validity
            Not Before: Jan  1 15:06:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=565acf7636d8e32d1efd358c32b3e0ad401718d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:77:e0:c5:26:4a:87:94:a9:d9:f2:a8:bf:
                    c1:cb:44:fc:d6:47:50:69:eb:39:37:c8:70:7e:b2:
                    8b:1b:ca:5e:8a:e9:81:f9:26:a1:df:04:e7:15:c4:
                    b2:39:8b:18:30:2e:3e:05:34:e8:2a:21:d5:e9:f2:
                    b9:67:cc:e5:ac:d5:ac:e2:91:be:fe:76:c6:88:aa:
                    2d:9d:f2:6b:10:28:6e:18:82:c1:5e:d8:01:7d:93:
                    84:b0:cb:06:38:22:1d:95:8b:a0:df:6e:4f:2f:89:
                    54:4b:66:d4:62:b2:fc:99:59:bb:7a:53:00:fb:2a:
                    91:95:fb:d4:73:41:6d:5a:a9:1b:ee:e8:17:0e:58:
                    32:18:1c:dd:41:8d:77:6f:d3:0d:e8:05:29:46:84:
                    20:b2:ab:59:ff:ce:8e:6a:9f:d1:e0:f7:a7:23:47:
                    56:f6:fe:99:d8:2c:88:60:d7:6c:e6:4e:ce:81:c9:
                    3a:1e:62:4b:57:09:d8:d7:71:99:b9:8b:0e:97:e5:
                    55:75:16:56:67:ba:fb:5d:ed:07:b5:d0:cb:8b:5d:
                    18:86:8f:08:b3:23:c9:77:6e:3c:1a:d1:b5:d6:0d:
                    36:6c:48:70:33:b6:c9:0a:7f:35:79:e0:1d:d7:53:
                    a6:8e:c0:06:c2:b8:fd:ed:78:cb:85:be:18:1b:f5:
                    25:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5A:CF:76:36:D8:E3:2D:1E:FD:35:8C:32:B3:E0:AD:40:17:18:D7
            X509v3 Authority Key Identifier:
                keyid:66:11:8B:4E:1C:9E:55:43:D1:EA:70:C3:B7:3F:8E:3F:EE:02:DE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGLThyeVUPR6nDDtz-OP-4C3qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/VlrPdjbY4y0e_TWMMrPgrUAXGNc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/7d43ea-1ef7-4bdd-8d4d-f277745cf5a3/1/ZhGLThyeVUPR6nDDtz-OP-4C3qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.123.113.0/24
                IPv6:
                  2a0c:6400::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:9b:51:6b:3b:ec:16:f6:85:4a:01:c7:f4:79:e1:78:5a:5f:
         08:d7:bf:25:80:64:3c:7b:cc:0e:7e:8b:39:2e:a9:6f:c4:c2:
         ee:cf:82:2a:4b:9c:b2:fa:fd:f9:ac:4c:a6:59:ed:bc:cf:26:
         38:68:19:58:65:f1:71:a0:de:7b:96:41:13:17:ca:be:c0:0a:
         ff:5d:f9:7b:bf:2a:9c:45:5b:a8:84:d9:df:db:86:6a:2e:f2:
         4c:a0:f6:38:fc:30:7d:78:cd:45:99:f1:50:03:20:b3:ce:b2:
         3a:2d:2a:c5:11:a9:64:18:9a:0f:b0:87:7f:c7:55:8c:17:02:
         59:ab:73:4e:f1:1c:4b:f8:7b:7d:bf:d3:59:8c:ad:e4:d1:f2:
         0a:dd:25:ec:46:36:92:52:04:14:0e:99:86:2f:53:da:9b:4b:
         e8:8f:d4:f4:fc:8d:e0:a4:be:f6:63:b6:a1:5a:d8:af:e5:8a:
         44:e1:56:5e:4c:75:48:64:50:9b:d1:70:a4:92:21:59:32:bb:
         ea:ed:bd:4f:d0:d8:6c:ea:5a:e0:2a:44:25:db:e8:18:f2:60:
         f3:62:88:98:86:a3:8a:ff:dc:86:e7:fb:57:4b:0b:8a:11:0b:
         03:bf:2b:e8:52:a8:51:78:2c:46:91:8f:57:14:a0:fe:05:3b:
         26:f8:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----