Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/wsAcjehVqqMulH2WGB7beUQgDoM.roa
File:                     wsAcjehVqqMulH2WGB7beUQgDoM.roa (raw, json)
Hash identifier:          0rW22c+HtBwkxJ8Tqn8zyb8FhBSAcK2PsmQJaZVOR/s=
Subject key identifier:   C2:C0:1C:8D:E8:55:AA:A3:2E:94:7D:96:18:1E:DB:79:44:20:0E:83
Certificate issuer:       /CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Certificate serial:       01847ACBC0E1152A324E5F3FF06B4D0E9E7E
Authority key identifier: A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/wsAcjehVqqMulH2WGB7beUQgDoM.roa
Signing time:             Tue 15 Nov 2022 10:18:04 +0000
ROA not before:           Tue 15 Nov 2022 10:18:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25540
IP address blocks:        185.232.200.0/22 maxlen: 22
                          2a0d:9bc0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:7a:cb:c0:e1:15:2a:32:4e:5f:3f:f0:6b:4d:0e:9e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
        Validity
            Not Before: Nov 15 10:18:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2c01c8de855aaa32e947d96181edb7944200e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:63:5b:e7:3f:7b:9d:62:c3:4a:2d:10:ee:e7:
                    23:ff:24:24:9e:95:08:8b:f6:29:e0:4a:ad:6b:e9:
                    e0:3f:61:18:6c:e1:3b:d0:f1:70:c6:90:bc:b7:87:
                    c8:3b:7a:77:f9:10:c5:d3:91:13:1e:35:b0:11:67:
                    57:03:95:ed:9a:0a:0f:76:22:d4:85:3c:77:c8:f0:
                    4f:4b:2d:30:b6:ee:eb:d8:5b:2a:34:be:4a:7e:f2:
                    12:8d:3e:61:7e:f0:11:1e:b8:05:d1:24:aa:4e:cf:
                    09:4d:46:59:ed:52:69:f3:1e:0b:ba:dd:35:f1:51:
                    7d:ef:ae:17:64:dd:2d:6e:05:8e:38:d7:c8:90:a1:
                    08:ed:d6:f3:22:14:1b:94:91:a7:5b:a4:7d:df:ba:
                    32:cd:ef:0d:db:f1:f2:11:f1:cf:d7:a2:98:2d:64:
                    11:0b:56:3f:42:b6:aa:93:a3:be:5a:28:36:2c:1b:
                    6c:e8:50:12:de:b7:27:77:28:a9:63:e1:b1:41:de:
                    71:69:90:d7:86:82:03:12:91:ef:53:24:e5:59:7c:
                    dc:67:a0:ec:a7:4a:c5:88:46:ec:0c:28:e6:a3:57:
                    f6:7a:18:0e:b6:3e:b2:19:34:a4:36:b9:00:5c:8c:
                    90:b6:59:2a:d7:b6:53:0a:01:7f:15:1b:d4:a0:e6:
                    27:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C0:1C:8D:E8:55:AA:A3:2E:94:7D:96:18:1E:DB:79:44:20:0E:83
            X509v3 Authority Key Identifier:
                keyid:A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/wsAcjehVqqMulH2WGB7beUQgDoM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.232.200.0/22
                IPv6:
                  2a0d:9bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:4a:12:f2:d4:b1:a1:03:dd:33:55:d7:6e:36:7a:92:ab:39:
         70:d7:5e:22:80:48:d2:8a:65:d6:5c:27:0d:32:cd:39:17:23:
         05:87:6b:8a:21:2f:74:9d:24:a3:8e:c5:b3:6c:51:4a:42:75:
         90:cb:17:c2:e8:c3:d7:5a:24:c4:d8:f2:e8:7a:6a:35:98:24:
         f1:50:42:4c:f2:ec:e1:d4:ff:31:28:9d:c9:87:e0:5c:4b:ae:
         5d:23:b3:14:6e:ff:ef:47:6a:ab:4a:fa:6d:aa:11:46:5a:2d:
         db:37:d1:93:42:9e:b2:33:8f:7f:ae:2c:95:11:05:b0:0e:0e:
         7f:30:0c:7a:60:66:36:a6:e9:89:42:e0:e7:c4:71:3d:88:6d:
         87:f8:ca:93:a6:9c:00:48:cc:83:52:50:c6:fa:2b:5e:b0:e5:
         c0:b7:c3:8b:a2:67:f4:1d:f6:f1:ce:12:da:14:fb:e0:92:4a:
         6d:38:f7:84:04:dd:bf:68:69:f1:d1:56:31:80:62:f8:6d:f3:
         12:bf:36:1a:ca:aa:5e:34:0f:be:d4:50:34:05:55:02:9f:eb:
         88:d2:e5:d2:e7:d6:5b:8b:52:1a:7b:4c:70:7d:f6:11:94:d3:
         35:44:13:c9:2e:f3:23:bd:2e:fb:b2:09:0b:32:8b:ef:35:6b:
         51:9b:87:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----