Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/mjxn4QVkQiEFT185wo5_SqHuZeg.roa
File:                     mjxn4QVkQiEFT185wo5_SqHuZeg.roa (raw, json)
Hash identifier:          oyE/4Q9V8JowgYmUDFVk6aD+E5hhXnp+GLJnbCtxd+g=
Subject key identifier:   9A:3C:67:E1:05:64:42:21:05:4F:5F:39:C2:8E:7F:4A:A1:EE:65:E8
Certificate issuer:       /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial:       0CEEAFD5
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/mjxn4QVkQiEFT185wo5_SqHuZeg.roa
Signing time:             Tue 26 Apr 2022 11:42:01 +0000
ROA not before:           Tue 26 Apr 2022 11:42:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205585
IP address blocks:        185.143.232.0/22 maxlen: 24
                          2a0c:a7c0::/46 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216969173 (0xceeafd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
        Validity
            Not Before: Apr 26 11:42:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9a3c67e105644221054f5f39c28e7f4aa1ee65e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:48:0f:f3:fe:7e:66:04:53:ee:fc:22:f2:d6:
                    b3:a3:6e:fa:1c:80:cd:21:58:e0:da:86:a8:19:7e:
                    80:4e:1c:d8:d1:70:fb:1d:ac:da:95:4e:52:a8:e6:
                    aa:fb:b2:84:0a:4a:ed:f9:b8:b1:e9:d0:3b:67:a3:
                    a6:b0:06:67:aa:54:91:34:c0:c0:f0:c9:e5:5f:9d:
                    d1:27:54:a8:ca:29:2d:62:87:f5:29:0e:8f:dd:06:
                    70:82:39:85:13:80:a7:9a:ea:06:12:14:04:7e:a6:
                    d9:ce:0e:b8:fb:5d:0b:3f:dd:68:a4:1f:5c:29:eb:
                    e2:45:a2:27:24:a7:5e:80:88:d9:11:25:a0:a5:99:
                    cd:cc:1d:43:8b:ac:d7:3c:2e:7b:69:58:b1:f6:86:
                    b6:58:90:21:66:17:6c:65:a0:32:a7:46:1c:45:19:
                    dd:28:75:13:87:1e:f7:a8:1a:0a:4f:38:ad:f1:da:
                    87:c8:f8:67:c7:b6:e3:69:e1:7d:95:9d:47:8f:2b:
                    76:b5:47:2d:88:ef:94:3a:aa:13:7f:e3:8a:c5:03:
                    6a:26:24:3c:e3:ed:46:ef:4f:00:b6:c0:d5:5a:42:
                    cb:a9:0a:67:ad:b8:9d:fa:58:ce:95:3f:27:38:4e:
                    50:10:8a:eb:b5:81:38:87:cd:5e:5c:2e:e3:f6:e4:
                    70:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3C:67:E1:05:64:42:21:05:4F:5F:39:C2:8E:7F:4A:A1:EE:65:E8
            X509v3 Authority Key Identifier:
                keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/mjxn4QVkQiEFT185wo5_SqHuZeg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.143.232.0/22
                IPv6:
                  2a0c:a7c0::/46

    Signature Algorithm: sha256WithRSAEncryption
         51:56:76:22:16:c2:1a:f7:6e:38:5f:e2:f0:46:f7:c6:60:e3:
         7d:2e:8a:0a:ad:46:06:15:92:06:d0:04:ee:54:91:9a:2c:96:
         7a:26:1d:cc:42:bc:59:76:a2:4c:3d:3e:ad:52:0a:8e:77:9f:
         17:d3:5d:85:99:8a:f3:15:e5:98:5c:77:fd:ba:6f:ae:d2:42:
         b4:ef:f2:3b:39:79:d6:5d:e8:20:28:32:e3:61:25:dc:4c:0c:
         5c:f7:56:3b:e2:82:22:24:a3:e2:2d:01:16:be:69:61:57:dc:
         7d:82:cf:81:fb:10:35:c2:f9:e3:a6:ee:7f:d5:59:9a:5c:78:
         60:28:93:0a:5f:ae:59:21:7c:6e:1a:7e:03:e7:79:a4:6c:fb:
         14:1b:ac:c2:d2:6d:91:a2:38:d5:83:c8:db:0b:cd:96:a8:8c:
         ec:db:2a:2f:14:52:3f:59:32:b0:6b:d4:78:ee:a3:92:01:ea:
         c4:34:e2:fd:e8:9c:d0:e7:52:d1:4a:f8:80:5a:73:d2:03:58:
         cc:30:86:44:e9:95:a4:ee:a7:03:88:37:41:b1:f7:16:98:b4:
         98:89:17:0e:05:a5:37:da:72:a4:65:8d:29:4e:6a:53:65:eb:
         5c:d0:d7:28:5f:2b:09:36:b2:50:bd:3c:16:37:21:aa:98:4d:
         2d:73:12:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----