Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/TEc8dN2BKTbujinQq068u0jWj3s.roa
File:                     TEc8dN2BKTbujinQq068u0jWj3s.roa (raw, json)
Hash identifier:          RzkQ1Ih4nnh/gbi5FGmq+LDf+aDhETY1HDlkOQLdw34=
Subject key identifier:   4C:47:3C:74:DD:81:29:36:EE:8E:29:D0:AB:4E:BC:BB:48:D6:8F:7B
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0183C16D124410183A62E42788B1EEF9585B
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/TEc8dN2BKTbujinQq068u0jWj3s.roa
Signing time:             Mon 10 Oct 2022 10:24:54 +0000
ROA not before:           Mon 10 Oct 2022 10:24:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49697
IP address blocks:        45.11.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c1:6d:12:44:10:18:3a:62:e4:27:88:b1:ee:f9:58:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Oct 10 10:24:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4c473c74dd812936ee8e29d0ab4ebcbb48d68f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6e:50:db:ed:6d:47:25:01:a3:bb:d7:2c:f5:
                    5b:54:ad:0d:46:0f:54:e9:7f:95:c8:2a:88:4b:e3:
                    16:c1:76:33:36:d1:39:3f:f0:6d:d2:b4:b0:ab:fa:
                    57:4c:04:4e:a1:db:ed:67:b2:8e:1f:42:68:5c:7c:
                    54:e0:b7:88:da:f6:60:39:72:dd:bb:cc:01:26:16:
                    7f:d4:fd:b7:36:75:60:1f:b7:de:7f:36:a4:84:68:
                    04:4c:16:fa:34:76:77:e9:07:a9:71:67:28:83:b4:
                    da:c0:e3:55:09:89:2e:2d:95:4d:fe:a6:14:81:0a:
                    e4:f2:73:ce:0f:75:85:c3:1e:c4:d9:8e:7e:80:4c:
                    01:d8:8b:14:de:5f:95:98:63:95:35:af:af:f2:d5:
                    d4:c3:b8:19:ac:10:68:d2:22:31:48:45:a8:9b:88:
                    f1:b0:04:13:19:d0:d6:28:48:f2:c5:72:d3:d7:31:
                    b4:e5:27:7a:16:eb:fc:18:4a:29:bc:ff:af:37:01:
                    17:20:4f:44:da:1a:6a:24:4a:d4:61:d7:5e:8e:50:
                    34:5b:24:55:3c:66:29:36:65:ee:4c:d6:fc:92:1a:
                    c4:11:e6:bf:a2:40:62:37:90:5c:4e:32:c0:29:96:
                    72:ee:bc:dd:98:c2:ae:5d:6a:9e:20:71:d5:55:98:
                    44:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:47:3C:74:DD:81:29:36:EE:8E:29:D0:AB:4E:BC:BB:48:D6:8F:7B
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/TEc8dN2BKTbujinQq068u0jWj3s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:ab:1f:78:9f:0a:be:cc:3f:f0:4e:ca:00:7d:30:71:a6:3c:
         b9:34:2e:21:dd:de:a9:1a:35:13:19:d4:38:94:b9:98:22:7e:
         62:84:bc:e7:3e:f8:be:5d:21:e3:42:ea:07:b3:3a:10:18:ea:
         a8:39:0c:9a:7a:12:2e:d8:f6:4b:4f:53:12:a6:9a:b3:19:75:
         dc:b9:e4:ac:cb:bc:87:36:f5:58:05:a9:98:34:69:4f:41:36:
         ec:71:08:e7:4d:7d:66:19:db:95:ad:81:7a:51:52:29:1c:36:
         6f:f5:41:67:54:b2:db:1c:80:cc:8f:37:c3:99:b3:12:42:48:
         6f:37:64:2b:93:98:7c:4a:5d:38:80:97:84:f8:61:45:0f:9f:
         31:16:b7:c6:f1:77:7f:d5:80:ab:23:02:f2:85:51:61:42:06:
         f6:30:29:c0:90:41:e3:b2:9d:5d:cd:24:f6:cc:21:00:45:9c:
         a8:45:f4:45:19:3d:15:5b:4f:b4:0d:64:0b:c3:9e:18:fe:e6:
         14:b1:d0:12:78:ec:4c:4b:4c:24:8e:bd:27:72:b6:dd:c2:3f:
         12:8c:06:6d:f5:d4:fb:95:d3:b5:5c:84:1b:ef:ae:9f:36:2c:
         e5:ec:29:d7:4b:26:f3:35:ee:db:37:72:bc:83:fd:82:f0:ea:
         2e:b4:24:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----