Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/il65qYMA94vn0S8_y5F8hbPomyw.roa
File:                     il65qYMA94vn0S8_y5F8hbPomyw.roa (raw, json)
Hash identifier:          HA4t577yTdFyWl9oogP4eZIQUCOaSF9a2q5oGvLJnOY=
Subject key identifier:   8A:5E:B9:A9:83:00:F7:8B:E7:D1:2F:3F:CB:91:7C:85:B3:E8:9B:2C
Certificate issuer:       /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial:       35B2C4A7
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/il65qYMA94vn0S8_y5F8hbPomyw.roa
Signing time:             Sat 01 Jan 2022 06:58:47 +0000
ROA not before:           Sat 01 Jan 2022 06:58:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20679
IP address blocks:        185.75.31.0/24 maxlen: 24
                          2001:678:418::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900908199 (0x35b2c4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
        Validity
            Not Before: Jan  1 06:58:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8a5eb9a98300f78be7d12f3fcb917c85b3e89b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:07:f5:2b:d2:9d:c7:90:88:62:57:9a:d9:
                    e0:e2:37:cf:87:30:fa:3d:81:22:a5:9b:6a:09:59:
                    bf:25:cd:20:ef:0a:a6:a7:5b:3d:93:54:97:38:a2:
                    9e:78:b0:43:89:f4:d5:4e:ee:88:b0:8b:94:9c:e8:
                    ed:c2:73:38:0f:6f:ef:01:79:df:68:a6:fe:2a:cd:
                    0d:8f:35:9e:10:9e:af:10:e9:74:bf:dd:cb:90:0c:
                    06:ff:d4:2a:b0:47:05:66:ab:fb:96:c2:e0:10:c5:
                    37:54:7a:cf:91:9b:67:4b:38:26:11:00:0c:71:cd:
                    f7:1d:74:05:05:b2:8f:11:b6:c4:2c:26:07:41:b9:
                    3a:97:73:bf:ad:87:72:9b:65:45:5e:05:c9:d3:a1:
                    3f:a2:1b:6f:95:9e:09:32:7e:6f:32:71:5f:8b:ed:
                    9a:c8:c8:0b:98:1f:50:6e:56:08:e0:cb:dc:d8:8e:
                    49:8a:6f:75:78:8a:6f:ca:32:b8:6c:bd:e3:73:07:
                    ba:f7:83:ad:27:d7:3f:55:80:6d:f5:92:18:9c:05:
                    dd:fa:ef:ee:96:16:42:a2:33:59:84:b0:ea:4f:db:
                    34:db:50:08:3e:49:38:be:ae:23:c1:23:c3:19:0a:
                    f9:f5:a2:38:4f:7b:04:c8:1a:b9:c2:32:91:9f:9d:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5E:B9:A9:83:00:F7:8B:E7:D1:2F:3F:CB:91:7C:85:B3:E8:9B:2C
            X509v3 Authority Key Identifier:
                keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/il65qYMA94vn0S8_y5F8hbPomyw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.75.31.0/24
                IPv6:
                  2001:678:418::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:0f:62:49:e9:84:52:45:51:89:1e:99:12:cd:0a:b5:58:06:
         5e:73:14:d2:40:b4:42:b8:b0:9a:1c:11:cc:fe:8f:36:95:34:
         69:b1:df:0d:43:e6:49:2a:07:f7:c0:ef:6e:5d:fa:22:58:b8:
         9f:c6:39:04:bb:0d:7c:ff:54:97:cc:5b:61:50:3d:00:20:a7:
         e4:90:fa:b1:82:02:57:e5:39:40:bc:62:f2:3e:c1:db:17:12:
         f3:37:fa:77:1c:10:ad:c8:ac:3e:c4:4c:67:12:12:f6:5b:8f:
         16:b8:0b:25:be:fd:1a:00:77:1f:38:8e:5c:22:d2:a5:94:0d:
         cc:98:78:ae:94:4b:fc:3d:fc:61:3f:67:d0:57:c7:1a:65:30:
         11:b1:a9:4a:04:9d:5d:7c:a0:7b:9c:8d:bc:62:20:a6:e2:ea:
         22:6b:a3:15:ac:e6:00:21:05:7a:b7:b4:2e:3c:70:d5:18:26:
         f2:8a:03:85:38:f6:d5:1c:3e:38:6d:40:ae:41:63:35:fd:20:
         c0:bd:27:6a:92:17:12:69:71:1a:0a:82:f8:15:61:7b:f9:1f:
         b0:3b:d4:65:01:21:7d:cd:7f:4e:c2:58:45:a9:90:bc:bc:fd:
         85:a0:f6:fc:76:b3:ae:d9:80:88:d9:76:1d:bd:31:77:aa:f4:
         96:12:d2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----