Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/YJ41wymHLWD09AYQCNgbXCNV5lY.roa
File:                     YJ41wymHLWD09AYQCNgbXCNV5lY.roa (raw, json)
Hash identifier:          UQ1hfdMScUM+Ns/N8G8+4ZrURQ07XHpqfwGo0gnYQH0=
Subject key identifier:   60:9E:35:C3:29:87:2D:60:F4:F4:06:10:08:D8:1B:5C:23:55:E6:56
Certificate issuer:       /CN=0bdaba873ee18be547bd935943c0798ddcf70935
Certificate serial:       801A54
Authority key identifier: 0B:DA:BA:87:3E:E1:8B:E5:47:BD:93:59:43:C0:79:8D:DC:F7:09:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/YJ41wymHLWD09AYQCNgbXCNV5lY.roa
Signing time:             Tue 25 Jan 2022 16:19:45 +0000
ROA not before:           Tue 25 Jan 2022 16:19:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210398
IP address blocks:        185.81.70.0/24 maxlen: 24
                          2a12:e680::/29 maxlen: 29
                          2a12:e681::/32 maxlen: 32
                          2a12:e680::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8395348 (0x801a54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bdaba873ee18be547bd935943c0798ddcf70935
        Validity
            Not Before: Jan 25 16:19:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=609e35c329872d60f4f4061008d81b5c2355e656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:3a:46:d0:b9:2d:0a:a4:96:7f:88:fd:ec:
                    25:b4:1f:ed:6e:e9:95:68:1e:da:ef:30:44:15:f5:
                    82:d2:cd:86:2c:de:14:63:b1:e4:b9:cf:9b:86:67:
                    f9:7d:d0:3c:7d:c1:85:a8:8c:cf:50:df:3d:b6:ac:
                    8f:24:36:46:8c:30:85:89:25:c1:03:95:85:a1:77:
                    ac:a9:05:f2:07:8d:99:d3:67:a5:93:e3:3e:79:00:
                    4c:60:96:25:18:1e:07:63:16:e0:9e:10:c7:30:e9:
                    c8:ae:f3:45:24:31:18:67:d0:f1:5e:35:80:6d:78:
                    0c:44:8e:1f:74:c2:31:69:86:da:1e:68:17:72:52:
                    6a:23:bc:fa:08:9e:ad:af:90:37:01:e8:c7:3d:b5:
                    ce:6e:d7:15:54:01:47:ac:d2:93:5c:b2:55:d7:7f:
                    56:70:8e:f5:97:70:48:68:f2:58:53:ca:ab:60:ed:
                    c8:88:00:f2:c8:e5:b9:87:82:96:d6:1a:48:14:98:
                    f7:b1:c5:8a:46:28:de:ab:34:97:52:d8:ad:f2:87:
                    2e:19:0b:95:6c:b6:62:e2:88:a8:7b:8e:cb:9a:fd:
                    f4:f3:ae:30:87:70:f8:6a:61:14:2b:e0:ba:2a:34:
                    16:e4:26:50:fe:82:9f:56:8d:49:e2:29:c3:56:a1:
                    00:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9E:35:C3:29:87:2D:60:F4:F4:06:10:08:D8:1B:5C:23:55:E6:56
            X509v3 Authority Key Identifier:
                keyid:0B:DA:BA:87:3E:E1:8B:E5:47:BD:93:59:43:C0:79:8D:DC:F7:09:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/YJ41wymHLWD09AYQCNgbXCNV5lY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.70.0/24
                IPv6:
                  2a12:e680::/29

    Signature Algorithm: sha256WithRSAEncryption
         36:64:c9:cb:58:e0:cc:38:40:dd:2b:b8:da:d1:d5:e3:76:30:
         33:fa:02:79:cd:99:4b:c1:10:27:3d:91:42:1d:14:fa:01:94:
         a8:0b:4c:e6:47:ea:c3:2c:bc:60:59:86:75:31:75:07:16:10:
         84:69:d0:06:f0:57:35:fe:d9:6e:4f:de:a5:3b:d9:08:7c:4f:
         7a:77:c5:f3:a2:8f:85:51:d5:94:53:77:96:65:05:88:a6:bc:
         90:91:3a:fe:6e:87:13:60:a9:11:0a:9f:0a:a6:f9:c5:da:72:
         a7:0b:c6:f1:4e:8c:23:58:f9:ae:a3:d4:d1:71:a2:f1:57:cc:
         7f:8c:d3:8f:f8:f0:1b:92:a1:b6:86:c3:eb:8f:b0:5d:98:ac:
         2c:d6:c6:17:a0:f6:8b:b6:21:d5:5b:cb:94:02:28:f0:01:a9:
         7a:ad:3f:19:e4:00:f2:c2:b8:cb:99:8a:05:8f:bc:9d:e7:b8:
         ee:2f:aa:89:b6:2f:6e:23:e1:49:19:af:9b:1a:5f:53:ad:8c:
         c3:a7:a8:02:dd:50:19:c7:34:60:86:ed:7a:5f:79:4c:f7:e3:
         b6:5f:3c:b2:1c:9c:20:79:d8:94:2a:cb:9b:99:e5:a5:71:13:
         69:31:a4:66:b4:88:86:bd:67:59:8b:d0:aa:e4:2f:49:3a:fc:
         91:a9:40:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----