Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cW0aWyXwXvupa1f_lT6KhPsfeyw.roa
File:                     cW0aWyXwXvupa1f_lT6KhPsfeyw.roa (raw, json)
Hash identifier:          BVg8lAbCDhInU5wh4L/rqUC1GlaNfG/wjMKLUKRITuE=
Subject key identifier:   71:6D:1A:5B:25:F0:5E:FB:A9:6B:57:FF:95:3E:8A:84:FB:1F:7B:2C
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0A317731
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cW0aWyXwXvupa1f_lT6KhPsfeyw.roa
Signing time:             Fri 25 Mar 2022 12:03:17 +0000
ROA not before:           Fri 25 Mar 2022 12:03:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        45.142.105.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171013937 (0xa317731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Mar 25 12:03:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=716d1a5b25f05efba96b57ff953e8a84fb1f7b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:f8:5b:cd:49:fb:58:b7:eb:5c:98:0c:da:
                    52:56:44:63:e6:80:2b:29:c6:9c:0c:d3:3b:34:f7:
                    be:36:6e:b5:db:31:a8:da:11:49:02:51:74:b1:8d:
                    15:03:67:dc:65:25:25:fa:d0:97:ac:9e:df:2e:36:
                    b6:41:12:50:a5:f8:8c:f1:42:78:f7:cd:74:c6:36:
                    88:31:e7:b2:ea:42:4a:ba:a4:e0:de:04:a5:6f:e7:
                    ae:94:5c:ec:a1:47:68:20:df:d9:7e:1f:c7:6d:41:
                    a9:c2:ef:5b:f5:b9:c3:c6:78:81:da:7b:ff:dd:c1:
                    91:b7:4b:c0:ca:d9:1e:b7:99:9d:bd:e9:0c:4c:87:
                    61:14:86:db:d0:ca:c2:d8:a5:9f:90:76:f3:a5:1b:
                    7c:98:f9:f6:0e:6b:75:78:8c:de:15:72:a2:e4:53:
                    2e:74:1e:4d:f3:bc:ff:83:fa:89:67:f4:c6:a4:87:
                    8f:db:9b:23:13:c0:6f:66:6a:2d:2d:af:fb:eb:ba:
                    53:16:6b:06:7e:0a:9a:d8:4b:63:bb:b4:9f:45:9d:
                    5a:dc:d3:1f:8a:49:1a:fc:36:1c:a1:24:52:c2:6d:
                    27:e0:8a:96:33:b1:a2:fe:c1:84:40:e6:4e:51:61:
                    78:fa:cc:55:bd:59:bd:d2:ec:00:33:60:79:ba:d2:
                    8d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:6D:1A:5B:25:F0:5E:FB:A9:6B:57:FF:95:3E:8A:84:FB:1F:7B:2C
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cW0aWyXwXvupa1f_lT6KhPsfeyw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:9d:25:9e:be:56:19:3e:d6:05:b5:2c:9b:46:0a:e6:74:1a:
         e2:8c:68:92:70:cc:76:8e:e8:32:05:7c:0b:04:25:43:30:20:
         14:1e:bb:95:c9:9a:cf:45:f2:4f:14:f6:5c:fa:2d:f2:e6:98:
         b3:a2:c1:b2:54:9b:b8:d2:b8:06:dc:ff:14:ac:ea:50:bb:dd:
         dc:b9:b0:a6:38:b8:ad:d8:97:99:da:b2:17:c4:e0:4c:b9:56:
         69:88:1c:8d:69:8e:f4:8d:58:7b:81:3a:16:f2:32:e5:12:0d:
         0f:36:34:d1:a9:6f:64:54:fc:fc:a8:7a:c7:89:36:0e:9c:22:
         2f:96:a6:0f:1a:b5:29:35:f0:f5:6a:c4:0c:85:87:68:5e:82:
         30:db:cd:6b:ce:10:5a:6d:d1:4d:bf:78:d5:95:f5:d5:42:79:
         d3:e7:45:1b:ba:7a:07:7e:85:01:96:94:bd:42:e7:fb:21:e4:
         5b:d7:b5:ee:e7:19:d7:c4:0b:e1:e5:5d:cf:a6:14:f8:61:6a:
         2a:25:c9:22:c4:5c:ec:07:28:b6:18:92:c3:7a:b6:e5:37:32:
         c9:af:4f:92:8b:19:86:18:63:96:4b:d6:14:3d:19:4e:32:0c:
         69:3d:67:f3:83:a3:31:c6:50:a9:49:9f:0b:98:87:65:15:be:
         84:be:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----