Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/kPpKv_dFnxHEjhAUzGEUSCvKqK4.roa
File:                     kPpKv_dFnxHEjhAUzGEUSCvKqK4.roa (raw, json)
Hash identifier:          TRV26a2kkBgx6jZ3AY372u7peqRB3ugk5fi6m+L37vA=
Subject key identifier:   90:FA:4A:BF:F7:45:9F:11:C4:8E:10:14:CC:61:14:48:2B:CA:A8:AE
Certificate issuer:       /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial:       0184115E6E1710B54F2DC3CE38EED4820257
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/kPpKv_dFnxHEjhAUzGEUSCvKqK4.roa
Signing time:             Tue 25 Oct 2022 22:58:32 +0000
ROA not before:           Tue 25 Oct 2022 22:58:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        185.204.184.0/24 maxlen: 24
                          2a0e:c940::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:11:5e:6e:17:10:b5:4f:2d:c3:ce:38:ee:d4:82:02:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
        Validity
            Not Before: Oct 25 22:58:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=90fa4abff7459f11c48e1014cc6114482bcaa8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:82:fd:1c:1d:aa:9e:8a:f1:c2:eb:6b:f9:d6:
                    c9:57:96:34:ef:50:0a:e4:c6:dc:50:24:e1:cf:32:
                    3a:57:65:80:2c:95:a7:4e:f5:27:82:c7:96:38:94:
                    61:3e:95:b9:25:e6:40:88:e3:a4:44:fd:0e:22:fa:
                    fa:c5:0c:25:45:2b:14:4e:ea:6e:db:88:0c:ab:63:
                    11:dc:44:5c:17:84:df:26:38:af:47:70:e5:b0:d5:
                    ed:80:27:18:65:b4:00:19:a5:2e:9d:9c:8c:3d:c0:
                    eb:b0:f7:a6:0d:7b:f6:db:85:2c:75:c5:2e:83:10:
                    0c:6d:83:58:0a:a3:75:ed:d7:76:22:cd:34:50:73:
                    b3:d7:fb:8d:4e:e3:f1:64:14:ac:6f:dd:2b:76:e3:
                    82:bc:3b:27:80:a5:44:53:06:7f:5b:66:fa:29:09:
                    f5:bb:ef:4c:25:7d:48:4b:e9:12:64:f9:a8:88:28:
                    eb:f0:1f:e7:0f:6f:42:a7:8c:d2:be:85:c7:86:e8:
                    2c:22:18:e5:4e:4c:3c:04:be:2a:b4:5a:d1:79:e0:
                    a7:08:2d:ac:7e:89:8c:64:e0:14:65:e5:51:21:bd:
                    71:3b:44:27:95:12:ff:fb:c5:be:d5:b5:9c:ce:82:
                    9b:98:3d:8b:58:07:fd:cb:d1:08:33:79:65:ed:ef:
                    74:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FA:4A:BF:F7:45:9F:11:C4:8E:10:14:CC:61:14:48:2B:CA:A8:AE
            X509v3 Authority Key Identifier:
                keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/kPpKv_dFnxHEjhAUzGEUSCvKqK4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.204.184.0/24
                IPv6:
                  2a0e:c940::/29

    Signature Algorithm: sha256WithRSAEncryption
         91:14:1b:01:f2:ef:75:15:c2:ad:49:21:4a:a8:f3:6f:b5:be:
         3a:32:0c:98:12:a8:1d:85:21:85:b4:0e:bf:c7:35:97:b7:db:
         39:63:0a:24:f4:5e:ef:bf:c6:69:2d:68:81:88:21:b9:12:42:
         16:62:ab:97:f6:ae:51:1c:ac:7b:05:b9:60:21:88:9e:59:4b:
         5a:1a:9e:5d:b9:48:96:5a:26:48:c9:05:7d:71:5c:dd:d3:b2:
         46:69:ad:68:a1:57:28:3b:aa:17:39:1b:82:16:5e:7b:03:5f:
         9c:3c:78:2c:21:73:ca:22:ca:c8:ce:d2:dc:eb:70:ae:93:0c:
         68:f0:8b:9b:a2:5a:08:fc:42:51:a3:f7:d9:08:d8:12:f1:4e:
         29:6e:90:c0:dc:6b:0d:33:f3:c3:6f:c7:5b:45:2e:72:1b:28:
         72:46:20:09:21:db:32:47:40:ce:c6:97:17:5e:6b:80:92:d3:
         66:b8:bb:96:3b:bd:0a:0a:5c:d5:ee:6d:df:f4:70:f5:ad:af:
         7e:fa:69:9d:73:69:4d:22:62:13:68:9f:e4:59:31:74:10:ec:
         9c:0c:50:89:e6:46:10:01:a6:4a:20:ac:38:82:53:fc:2c:05:
         4a:68:b5:dd:8d:64:3b:25:b3:07:21:5a:a4:7a:46:87:29:9f:
         ff:15:50:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----