Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/Aw3s5RRSSxLBwPlxzh5l-QccMYA.roa
File:                     Aw3s5RRSSxLBwPlxzh5l-QccMYA.roa (raw, json)
Hash identifier:          pdNSYl/gUULLDX1ALozDPrtRoBvqkBpDmL+pLNJZqsU=
Subject key identifier:   03:0D:EC:E5:14:52:4B:12:C1:C0:F9:71:CE:1E:65:F9:07:1C:31:80
Certificate issuer:       /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial:       0DB34244
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/Aw3s5RRSSxLBwPlxzh5l-QccMYA.roa
Signing time:             Sat 01 Jan 2022 04:58:40 +0000
ROA not before:           Sat 01 Jan 2022 04:58:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206976
IP address blocks:        185.222.16.0/22 maxlen: 24
                          2a0c:f000:1000::/48 maxlen: 48
                          2a0c:f000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229851716 (0xdb34244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
        Validity
            Not Before: Jan  1 04:58:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=030dece514524b12c1c0f971ce1e65f9071c3180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:20:97:96:ed:fe:8e:6d:5d:0c:c1:90:93:
                    6f:e7:4f:0a:18:1d:8f:b7:9b:58:50:f8:1d:61:d2:
                    d4:72:21:d3:15:1c:b6:d6:21:fc:71:53:c6:3c:e2:
                    ce:b3:d0:86:40:61:82:a2:23:2e:c6:42:7f:8d:22:
                    22:32:7f:77:01:98:e4:01:4e:03:ee:5a:22:c3:33:
                    a1:b0:89:4f:bd:a9:8f:29:79:47:3a:3d:bc:35:41:
                    64:71:e4:d9:55:37:da:0f:f7:27:cb:47:77:a0:bc:
                    4e:45:a2:9b:ea:ec:b3:49:8c:85:47:47:3a:ef:6e:
                    93:9e:7b:83:83:ae:fa:b3:92:90:82:43:fd:4b:e6:
                    25:9a:56:58:41:e5:93:e9:b2:7a:8a:f8:76:ab:aa:
                    d4:32:98:66:ba:b1:3b:f5:32:7d:ff:c7:55:46:14:
                    45:11:5d:3a:aa:e6:cc:1d:e9:11:df:da:4c:3c:a3:
                    02:4e:f6:f6:4e:4a:7d:c5:a8:de:eb:f0:e0:8e:e1:
                    36:bc:85:3b:d3:58:5e:91:92:b5:54:c9:38:8b:14:
                    89:b0:4c:11:84:54:e6:c3:48:91:ff:cc:a7:a5:20:
                    2f:9e:cb:da:5f:66:77:6c:f9:51:d8:2f:42:96:50:
                    41:be:8d:f1:52:71:ac:d0:52:c1:e0:5f:bf:96:33:
                    f6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0D:EC:E5:14:52:4B:12:C1:C0:F9:71:CE:1E:65:F9:07:1C:31:80
            X509v3 Authority Key Identifier:
                keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/Aw3s5RRSSxLBwPlxzh5l-QccMYA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.222.16.0/22
                IPv6:
                  2a0c:f000::/48
                  2a0c:f000:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:5c:48:d4:12:77:f7:e1:a2:3e:6e:b7:7f:58:84:05:60:4e:
         16:3c:69:0c:34:cc:24:0c:60:b4:13:c0:73:ed:e1:82:f8:19:
         91:7b:05:eb:fe:4e:c5:13:17:c0:c0:e2:5e:77:8a:01:88:1d:
         75:67:65:b9:5d:8e:1e:a0:02:38:9d:74:bc:1d:e1:30:58:90:
         0c:0e:9e:ea:b6:bd:e2:8f:ce:b4:9b:d1:a4:80:c2:9c:44:a7:
         24:96:1d:77:e8:e0:21:7c:66:b2:5c:bd:d5:c9:19:72:67:53:
         7d:4a:e9:f1:2a:75:9d:0c:c1:54:a3:d5:6a:9f:57:82:dc:9f:
         eb:9f:d8:92:7e:63:95:bb:06:3a:ef:93:3e:93:25:15:7d:53:
         e5:60:6c:73:a0:16:46:83:11:8d:ba:cb:7e:cc:80:93:e9:b3:
         0a:1a:92:29:10:85:07:71:b3:ad:cc:83:1b:56:eb:16:67:c9:
         ea:a5:2f:8a:ba:a0:12:19:c0:2c:86:39:2e:93:53:fa:9a:5e:
         70:20:aa:53:8f:53:56:53:6e:47:45:50:53:aa:e9:c5:29:97:
         d5:aa:b7:30:cb:2c:aa:8b:a7:77:d3:c7:08:d1:77:7c:69:d5:
         01:ff:c5:c2:36:44:14:5a:5d:57:b3:32:b3:2f:3f:5a:79:7e:
         ef:3f:ee:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----