Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ILkpOT4xQM2HbpExRZTARuew8JU.roa
File:                     ILkpOT4xQM2HbpExRZTARuew8JU.roa (raw, json)
Hash identifier:          9pqluvqES4nNbbWLaQiEYg+vQtGyUyD7fovEo2Z/nYU=
Subject key identifier:   20:B9:29:39:3E:31:40:CD:87:6E:91:31:45:94:C0:46:E7:B0:F0:95
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       093F5C18
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ILkpOT4xQM2HbpExRZTARuew8JU.roa
Signing time:             Sat 01 Jan 2022 06:00:32 +0000
ROA not before:           Sat 01 Jan 2022 06:00:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49981
IP address blocks:        45.141.116.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155147288 (0x93f5c18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 06:00:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=20b929393e3140cd876e91314594c046e7b0f095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:3c:fc:6f:e2:55:04:3a:8e:60:a9:d4:c8:
                    1d:40:25:a5:8b:6f:d7:35:de:86:63:13:40:e6:db:
                    59:6b:d9:de:3a:fb:3c:cc:2b:c7:77:6e:c7:cd:19:
                    1c:de:63:f5:58:e9:d3:1d:d8:01:a6:86:02:45:78:
                    5f:8a:fd:d3:a3:a1:a4:ae:ff:85:17:62:e7:2b:af:
                    50:f0:0c:e3:19:da:78:08:01:86:98:5b:32:01:eb:
                    4d:f1:b7:61:75:d9:55:c8:3b:63:f8:6f:6b:74:16:
                    8f:07:f2:91:25:30:cb:f1:6b:37:60:05:09:b1:b9:
                    21:a5:28:51:23:85:2d:4d:61:c0:58:7d:53:58:8e:
                    c8:ab:58:79:46:6a:91:cc:6b:ae:be:3d:a2:2e:ce:
                    98:f0:3f:b1:0d:08:0d:de:af:98:6e:92:b1:a7:04:
                    18:87:a3:04:92:63:6a:67:c8:f7:bb:4d:d0:fb:89:
                    74:1a:e8:cb:1c:9a:6b:23:ba:79:45:20:74:ca:2d:
                    48:95:49:10:b5:56:8e:84:30:b0:96:97:97:8a:7a:
                    fe:a1:74:42:ad:e6:0e:53:1e:d5:1d:a5:a4:e0:d4:
                    2a:a6:54:72:db:f3:ea:06:5c:e3:84:27:24:cc:59:
                    39:5e:1f:4d:35:69:86:37:84:d5:2d:9c:82:07:4e:
                    2e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B9:29:39:3E:31:40:CD:87:6E:91:31:45:94:C0:46:E7:B0:F0:95
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ILkpOT4xQM2HbpExRZTARuew8JU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:12:56:c4:a5:ee:b1:4c:57:69:dd:e5:26:66:a2:54:1a:b8:
         7e:15:cb:31:9e:d7:0f:8c:db:14:db:4e:e8:95:6e:3a:d0:b5:
         cc:12:5e:c2:03:ca:22:4b:73:7e:48:14:48:d3:c9:8e:1f:04:
         ee:6d:12:73:a7:1d:fa:81:81:84:43:79:00:ec:82:74:d2:56:
         38:8c:b1:7e:7d:60:3e:30:46:46:07:98:60:31:a7:4a:6b:7c:
         7d:e3:39:55:40:5c:46:2e:f6:9f:6c:35:0b:13:a9:b0:7c:28:
         fc:af:1b:db:ee:8f:e4:ee:59:5d:e1:11:8e:7f:23:76:4d:bb:
         b8:1b:1e:23:c1:f1:1a:39:05:1a:02:e1:c3:9f:0a:84:72:87:
         86:a4:51:43:e7:d3:09:81:c1:5b:80:84:1c:7e:e2:d6:41:4b:
         49:2b:b1:24:1d:05:6b:92:8b:19:44:5b:98:e6:11:85:48:02:
         8f:2e:0c:d3:b9:63:81:71:99:c4:6b:27:c8:67:a8:7a:b8:9b:
         b6:1e:9e:ac:fe:cd:30:1e:9f:c7:c7:4c:a5:49:9d:a8:16:a8:
         ef:a2:6b:ff:18:2f:9d:64:59:3d:62:43:9f:74:4d:8e:1e:22:
         71:bb:a1:fa:73:79:9d:af:9c:4d:be:e5:6b:13:7d:cb:12:2b:
         bd:c3:a3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----