Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/RUbRoeU91mmUZe5ijBiGe0sJ6m0.roa
File:                     RUbRoeU91mmUZe5ijBiGe0sJ6m0.roa (raw, json)
Hash identifier:          f+2DfxBS0N5sBkIvcJmLi3H8gipm8k6ode/rdbdNR5o=
Subject key identifier:   45:46:D1:A1:E5:3D:D6:69:94:65:EE:62:8C:18:86:7B:4B:09:EA:6D
Certificate issuer:       /CN=df62bbf15de344acdb5f7800450f2c82d797d798
Certificate serial:       1FB9DA
Authority key identifier: DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/RUbRoeU91mmUZe5ijBiGe0sJ6m0.roa
Signing time:             Tue 07 Jun 2022 22:32:02 +0000
ROA not before:           Tue 07 Jun 2022 22:32:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60155
IP address blocks:        185.55.200.0/22 maxlen: 22
                          2a04:d640::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2079194 (0x1fb9da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df62bbf15de344acdb5f7800450f2c82d797d798
        Validity
            Not Before: Jun  7 22:32:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4546d1a1e53dd6699465ee628c18867b4b09ea6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b5:07:2a:fb:aa:f0:49:16:f8:8f:fa:cb:ed:
                    8d:3c:be:e6:66:d5:2d:0d:cf:26:05:05:95:27:36:
                    a9:d0:62:fc:e6:08:0c:6a:86:ef:19:59:16:7f:33:
                    b9:56:12:28:cb:cb:7d:b6:88:f7:2e:c5:19:c5:8c:
                    83:f8:a0:30:b5:5c:05:e3:c9:dd:36:34:64:3a:24:
                    05:03:64:fa:8e:3a:11:49:48:26:58:e2:0c:4f:85:
                    24:80:84:8c:13:59:39:1f:49:fa:08:59:76:4b:01:
                    83:dc:49:44:e6:0e:40:a9:b7:5d:dd:77:f1:9e:9b:
                    d4:6a:91:65:e1:1f:5e:b9:1a:14:d6:98:7c:31:73:
                    d8:99:53:01:5b:b5:56:0c:85:fc:59:91:56:5a:5e:
                    2f:71:b0:69:de:89:dc:56:5a:86:21:5f:67:12:22:
                    11:cc:e8:a2:d0:a2:83:d9:50:81:c4:72:22:15:8e:
                    82:8f:df:ab:64:f5:b4:26:8f:ab:d5:00:1e:77:fd:
                    c9:46:91:2b:85:aa:3a:d7:5e:93:61:c1:74:0f:b7:
                    e3:50:1a:3b:e2:3f:c5:2c:c7:8e:2b:be:8e:94:ba:
                    c3:21:23:f2:4b:06:25:c6:e6:8e:23:01:3b:cd:75:
                    14:cc:c8:62:af:46:46:65:15:96:7e:4f:87:57:aa:
                    31:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:46:D1:A1:E5:3D:D6:69:94:65:EE:62:8C:18:86:7B:4B:09:EA:6D
            X509v3 Authority Key Identifier:
                keyid:DF:62:BB:F1:5D:E3:44:AC:DB:5F:78:00:45:0F:2C:82:D7:97:D7:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32K78V3jRKzbX3gARQ8sgteX15g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/RUbRoeU91mmUZe5ijBiGe0sJ6m0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a00c46-8031-411f-8503-a0f2591dd2bd/1/32K78V3jRKzbX3gARQ8sgteX15g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.55.200.0/22
                IPv6:
                  2a04:d640::/29

    Signature Algorithm: sha256WithRSAEncryption
         22:3e:87:4d:22:44:19:52:60:81:71:3b:18:67:43:43:6a:d2:
         94:e9:e1:d2:7b:14:e1:87:0a:ba:1f:91:5a:02:54:63:b6:20:
         28:05:1e:02:c8:aa:aa:de:0a:52:2f:c2:ca:c0:c8:41:65:fc:
         58:b3:75:cf:45:9d:fa:88:20:d2:ac:37:12:69:de:0b:49:28:
         00:2a:79:34:53:f2:48:30:15:aa:3e:28:0a:67:02:7a:1e:c5:
         ca:1c:34:0a:17:28:54:bd:77:fe:d0:dc:71:c1:fd:75:74:49:
         e0:72:fb:0f:80:21:cd:7f:39:d1:f6:2d:ca:d6:1d:21:0a:ab:
         c8:0a:ad:cd:06:e0:78:41:d8:43:e5:a6:59:ba:02:1c:ce:bb:
         be:16:2b:ee:23:fd:24:64:ee:7a:fe:ae:62:59:4a:b0:35:9c:
         6e:41:fa:0f:78:b4:73:00:57:5e:e8:4e:6c:39:79:5c:d8:b0:
         20:65:0d:8e:ef:23:a5:89:70:38:23:0d:d9:39:80:0a:98:3f:
         40:7f:1a:75:a0:89:83:ad:0d:01:fa:cb:b4:e4:f5:2c:aa:8e:
         3e:ae:d7:3b:ba:75:d8:59:10:8a:96:72:d0:05:7e:30:ff:38:
         4a:25:81:8f:e0:62:76:44:7b:9a:85:38:f3:47:45:28:dc:01:
         bc:86:0f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----