Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/R0J6T5eJ3ajgn53ATlluey3OHMU.roa
File:                     R0J6T5eJ3ajgn53ATlluey3OHMU.roa (raw, json)
Hash identifier:          79Du/reIjaDPWSolTkEutyZQ9Qbr+nLzvUZu+eUjGsY=
Subject key identifier:   47:42:7A:4F:97:89:DD:A8:E0:9F:9D:C0:4E:59:6E:7B:2D:CE:1C:C5
Certificate issuer:       /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial:       0956B5
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/R0J6T5eJ3ajgn53ATlluey3OHMU.roa
Signing time:             Mon 20 Jun 2022 14:06:44 +0000
ROA not before:           Mon 20 Jun 2022 14:06:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204615
IP address blocks:        185.225.114.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612021 (0x956b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
        Validity
            Not Before: Jun 20 14:06:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=47427a4f9789dda8e09f9dc04e596e7b2dce1cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e6:05:07:d8:d7:96:3e:74:2e:84:0e:ef:80:
                    b0:2a:34:db:af:1d:7c:9f:fe:58:d4:fa:91:03:08:
                    db:20:16:e1:5c:e7:eb:19:a1:83:9c:91:c1:2d:98:
                    88:7e:ad:67:0a:92:9a:00:fe:da:e5:85:c4:16:f9:
                    16:2e:e7:0c:01:88:a4:b6:e5:b5:27:83:54:b2:62:
                    61:40:9e:87:ca:dc:80:38:4c:20:2a:e8:12:6e:4a:
                    b5:90:da:bb:b2:1d:e1:7a:09:bf:8a:b9:99:d8:c9:
                    78:1b:d5:e0:66:1b:02:43:0b:88:6e:e5:7d:e7:29:
                    fe:41:87:c8:aa:80:45:d2:79:92:f5:f1:b4:d3:a6:
                    4e:07:a5:7c:fc:d8:71:88:17:c2:fe:9e:97:ac:47:
                    c9:c3:92:82:30:65:3c:5e:71:63:03:6c:44:aa:aa:
                    df:61:81:5b:65:ea:f9:97:c7:45:cd:bf:36:f3:8d:
                    54:af:57:a6:9f:bf:48:dc:85:65:2c:aa:b3:ab:d4:
                    c3:b4:c7:f6:65:3a:09:d6:ea:79:7f:5b:1f:7b:e6:
                    f6:48:a7:84:26:a4:ea:6f:d4:2f:78:09:00:a3:63:
                    ac:f3:6a:71:20:1b:d8:0b:4d:80:27:67:1a:59:f5:
                    b7:1d:1c:ec:e8:94:c7:ea:02:44:8c:17:52:d7:4f:
                    fe:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:42:7A:4F:97:89:DD:A8:E0:9F:9D:C0:4E:59:6E:7B:2D:CE:1C:C5
            X509v3 Authority Key Identifier:
                keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/R0J6T5eJ3ajgn53ATlluey3OHMU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.225.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:b4:98:a5:90:9c:b9:3a:45:33:70:99:3e:45:b9:07:12:56:
         2a:72:54:ef:8c:87:8a:2d:34:a9:4f:d2:cd:71:f2:87:05:80:
         ba:2c:04:d5:32:28:b9:2d:e9:ae:9f:a2:a0:13:8c:b9:ba:03:
         3c:fb:bf:c5:fa:3e:ba:33:be:25:78:c7:c4:68:35:77:c0:3a:
         91:6c:6c:26:60:1c:42:90:ff:17:68:e6:12:1d:0c:b4:b2:3c:
         5b:78:ea:b6:f8:cb:4f:74:b0:fc:c5:3a:ab:52:0b:0c:4a:75:
         1e:de:a3:15:68:8a:3f:ce:81:94:6b:4e:02:cc:0b:c0:c5:89:
         f6:4f:31:60:f8:f3:01:cd:cf:c3:77:50:14:5c:52:24:45:e2:
         4c:cd:94:10:22:2e:fe:b6:9b:99:d8:24:2c:3d:45:d1:23:d6:
         05:95:5a:1e:5f:ee:94:37:15:1d:0d:0b:4a:4c:6b:83:f3:ca:
         77:c7:c2:a5:67:bf:3a:c2:74:2e:9e:a0:b9:6a:bf:ac:2c:df:
         74:b2:36:a9:dc:70:13:bf:f3:b4:4d:21:7c:e0:b3:cf:13:33:
         a9:42:c3:de:34:9e:a9:ac:df:51:36:ce:b5:2a:a0:7e:d6:0c:
         04:65:9a:b4:04:c0:e5:94:dd:b5:6b:02:0a:7a:5c:34:e9:87:
         3e:20:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----