Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/tIwUoULGLQ5Z8h9ATh_gSh7BlkM.roa
File:                     tIwUoULGLQ5Z8h9ATh_gSh7BlkM.roa (raw, json)
Hash identifier:          l6pBXWHPGJBiqm/+iJOg1eqZ5KzumhGGzDk8la8YuMg=
Subject key identifier:   B4:8C:14:A1:42:C6:2D:0E:59:F2:1F:40:4E:1F:E0:4A:1E:C1:96:43
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       09B0B61C
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/tIwUoULGLQ5Z8h9ATh_gSh7BlkM.roa
Signing time:             Sat 05 Feb 2022 17:15:34 +0000
ROA not before:           Sat 05 Feb 2022 17:15:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57199
IP address blocks:        45.137.200.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162575900 (0x9b0b61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Feb  5 17:15:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b48c14a142c62d0e59f21f404e1fe04a1ec19643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:34:a9:1a:44:9f:e5:d9:91:dd:ba:a3:44:46:
                    aa:66:2e:18:2e:43:05:23:f8:d6:e6:e0:9b:64:af:
                    32:70:9e:c9:76:59:80:1c:03:27:4f:26:72:90:74:
                    c9:70:5f:ee:07:72:e3:32:07:30:a7:0c:52:ae:78:
                    23:70:24:c5:7c:cf:f7:34:99:17:e8:ae:11:d2:7c:
                    67:ac:ba:ee:65:fc:3c:b2:1f:df:23:4f:d8:79:53:
                    f4:ed:f5:11:7e:6f:60:eb:3f:b0:95:4d:78:95:d0:
                    fa:bd:0b:1f:c9:61:f4:ce:2d:fa:46:d6:57:5c:80:
                    fb:42:28:55:b3:ba:29:1a:a0:46:21:10:38:c4:9b:
                    6e:cf:4f:d1:e4:f0:c1:ba:cb:af:9d:40:2b:a2:5a:
                    0f:de:ff:f8:9a:f1:80:44:c5:62:b6:a8:c6:d2:be:
                    89:56:6a:82:67:c3:7e:96:9c:c1:2d:51:76:44:35:
                    52:62:14:e1:26:43:94:bf:07:37:95:83:4f:3a:4e:
                    e8:cf:a1:03:ed:af:7f:af:d0:0e:e8:e1:89:fa:4c:
                    f0:f5:82:81:e8:d6:ed:a0:50:fe:7b:12:34:c3:06:
                    62:ec:c9:3e:94:1a:73:8f:75:29:c0:4f:0d:65:2a:
                    64:ab:34:6a:29:d3:d4:ed:70:b0:5b:e3:8c:4e:5f:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8C:14:A1:42:C6:2D:0E:59:F2:1F:40:4E:1F:E0:4A:1E:C1:96:43
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/tIwUoULGLQ5Z8h9ATh_gSh7BlkM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:f4:8a:45:4c:76:95:ac:a9:b5:69:3a:04:f6:96:a9:f3:d5:
         02:07:bf:96:74:01:e3:0b:0f:c6:3c:72:63:fc:0f:7c:a9:cc:
         cc:6c:b8:a9:53:53:52:00:d5:45:8e:bd:db:5a:4f:34:fd:8f:
         25:ca:03:1e:82:1e:75:19:aa:c5:9c:2c:f7:05:c9:24:98:62:
         e3:40:e0:e7:93:12:e2:d5:d8:41:b1:ca:3a:7c:50:20:a4:cc:
         aa:01:4b:83:47:2a:a7:ad:8d:f6:c2:19:c7:93:72:a8:52:a8:
         1a:6b:26:81:32:94:a6:a8:ef:af:9c:fa:47:47:42:a5:50:cd:
         29:33:cc:6d:27:41:af:59:71:42:95:e6:c3:90:f9:f2:f5:86:
         be:57:6d:55:4f:50:c3:ee:72:58:9a:1d:e2:49:40:69:d0:54:
         fa:bb:ce:ca:81:cd:16:f9:4a:07:eb:ec:99:03:9c:6f:ac:40:
         30:74:0b:60:33:05:76:23:14:4d:6f:bf:06:15:16:3e:c2:2c:
         21:49:8a:bd:6b:42:cf:2c:ad:6e:73:5c:cd:1b:0d:40:ad:67:
         44:59:51:1a:83:cf:07:62:28:59:dc:11:1e:c5:b1:b1:2b:f2:
         c3:e6:52:12:f5:43:3f:5a:27:2a:27:e1:dc:13:97:06:67:12:
         3f:b1:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----