Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BvOYxIBkkP4KB_ajso8sCbaf5kY.roa
File:                     BvOYxIBkkP4KB_ajso8sCbaf5kY.roa (raw, json)
Hash identifier:          DEgOnDt7ooqmsUVJZL8861B6qD9BADuSB0OL23wlOqg=
Subject key identifier:   06:F3:98:C4:80:64:90:FE:0A:07:F6:A3:B2:8F:2C:09:B6:9F:E6:46
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0995438B
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BvOYxIBkkP4KB_ajso8sCbaf5kY.roa
Signing time:             Tue 25 Jan 2022 13:45:45 +0000
ROA not before:           Tue 25 Jan 2022 13:45:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213143
IP address blocks:        45.84.196.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160777099 (0x995438b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan 25 13:45:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=06f398c4806490fe0a07f6a3b28f2c09b69fe646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:e3:dd:9d:7e:af:58:70:e0:24:51:ae:ca:
                    c8:80:8f:e8:5c:1f:3d:0f:c3:36:73:71:6a:b4:bc:
                    2f:8f:05:e8:69:92:66:32:99:3f:fb:80:44:0c:c5:
                    e0:0e:2a:ce:eb:9f:95:dc:99:36:fd:8c:2f:8a:2b:
                    de:43:8a:32:e5:c3:53:a8:17:5e:0e:bc:6b:08:01:
                    7f:0e:88:3c:d8:b3:7a:7f:f1:85:30:b4:72:76:3a:
                    63:f0:e1:c4:f3:71:c6:18:0b:25:7e:50:aa:d5:49:
                    46:b3:18:1b:00:8a:97:33:85:c7:ae:26:be:e6:9a:
                    45:9b:e7:37:9d:1f:b8:b7:79:ad:f0:39:40:e1:2d:
                    49:db:6b:36:fb:cd:81:2c:f0:ef:64:fa:36:04:0d:
                    0d:d0:b1:9c:31:0c:39:c3:68:96:f2:33:c1:86:d5:
                    eb:b0:8c:b3:a8:17:a5:bd:ee:39:02:95:92:9d:60:
                    ad:43:e4:c2:4b:a6:8e:e7:82:62:87:ca:56:6a:bd:
                    71:34:ec:46:47:05:4e:b3:61:a9:af:4a:e0:9d:05:
                    65:52:7b:75:24:0b:9b:df:76:3f:22:e3:cf:7d:8a:
                    e0:8d:01:c0:a4:00:3b:5d:1b:09:27:d8:c8:9f:5f:
                    52:ea:f0:62:6f:42:55:85:6d:3d:17:5f:50:26:da:
                    4a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F3:98:C4:80:64:90:FE:0A:07:F6:A3:B2:8F:2C:09:B6:9F:E6:46
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/BvOYxIBkkP4KB_ajso8sCbaf5kY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:42:f0:df:10:a6:db:1e:39:8d:d0:f6:4c:a9:dd:7f:0c:10:
         ef:0f:82:dd:e3:41:f1:f3:31:55:97:3a:91:62:a0:37:8d:a9:
         69:e5:e2:58:79:e5:35:ed:c8:d2:a0:d9:a4:8b:6b:d1:78:09:
         b2:25:5c:7b:ed:ae:18:16:00:bf:f0:0a:a3:ef:f0:af:3b:af:
         7e:37:65:7e:fc:cd:bf:18:70:2b:f0:33:61:3e:19:c0:31:65:
         14:d6:5c:52:42:2a:85:81:74:92:70:42:ea:a4:e5:92:a3:dc:
         f2:68:5d:31:39:ea:4c:1c:05:be:db:e4:b1:91:c9:2d:60:a0:
         33:bf:11:67:ca:c1:c4:3c:1b:22:68:09:cc:78:bf:f9:74:94:
         15:a5:96:78:27:73:0d:78:3f:de:08:c9:b6:a9:a7:2c:29:06:
         33:e6:a7:d2:7f:61:e9:b1:ec:ff:10:36:02:5c:31:80:32:87:
         1f:26:d1:1d:e7:97:bd:6e:7c:28:84:6b:13:ca:9c:16:bf:97:
         bd:1a:fd:50:83:4a:35:79:81:bd:5f:38:2b:ff:cf:57:e6:4f:
         ec:f8:06:00:f4:b5:4f:2c:c3:f3:f1:5d:b2:cc:f8:98:98:fa:
         f3:72:73:d8:aa:f1:3b:e6:d8:86:51:36:9c:61:8e:a4:23:b8:
         25:d5:a8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----