Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/dvZldR-YJbF8lsQUCEwljYUqsyM.roa
File:                     dvZldR-YJbF8lsQUCEwljYUqsyM.roa (raw, json)
Hash identifier:          TnYyHhU3DmIt8bZY/xJ3dW2YcCZdpXSbtlZ1CFgUV5c=
Subject key identifier:   76:F6:65:75:1F:98:25:B1:7C:96:C4:14:08:4C:25:8D:85:2A:B3:23
Certificate issuer:       /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial:       3809E3C2
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/dvZldR-YJbF8lsQUCEwljYUqsyM.roa
Signing time:             Wed 19 Jan 2022 09:58:59 +0000
ROA not before:           Wed 19 Jan 2022 09:58:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201948
IP address blocks:        46.229.58.0/24 maxlen: 24
                          2a00:1688:7::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940172226 (0x3809e3c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
        Validity
            Not Before: Jan 19 09:58:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=76f665751f9825b17c96c414084c258d852ab323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:0a:29:52:ac:4f:38:d7:c8:5e:7f:b0:79:
                    df:33:a2:77:74:81:df:9a:67:7a:e2:fd:ab:6d:c9:
                    48:2a:9e:87:99:83:37:18:3b:a3:e8:d9:f6:b8:91:
                    35:b9:51:38:55:6b:c1:73:08:3c:c4:02:3c:3b:fe:
                    27:fe:18:38:da:96:5d:18:4c:8b:d0:1d:d8:5c:10:
                    5d:a1:20:bd:91:70:8f:fe:03:c4:5d:28:7b:d7:ac:
                    42:02:3e:68:75:47:8e:2f:46:0d:87:e6:89:7d:72:
                    87:50:07:ee:e0:7c:ac:48:58:3c:67:e7:81:29:9f:
                    30:c8:7c:68:7c:26:06:6f:72:3b:67:77:a6:80:3c:
                    d7:d3:7c:d7:be:47:cc:d9:4b:46:e2:a2:a5:7a:21:
                    76:67:6d:30:ae:e7:b0:46:f7:fe:13:0e:7a:a1:3a:
                    6c:0b:c6:60:a6:d1:ee:8b:32:b9:1f:1d:94:05:3a:
                    7d:f2:48:40:7f:e7:29:56:07:63:6b:5a:4a:65:27:
                    de:8b:84:e2:55:14:3d:2c:ed:fe:8d:60:e4:61:c1:
                    0d:e8:c7:d6:05:06:6a:f8:b6:9a:12:cd:11:ba:0e:
                    84:b1:1c:ef:c5:08:9f:e1:f7:6e:a8:9f:2d:c1:10:
                    70:d9:b4:8b:c2:d2:91:d5:d8:d9:6b:a9:4d:86:e5:
                    2a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F6:65:75:1F:98:25:B1:7C:96:C4:14:08:4C:25:8D:85:2A:B3:23
            X509v3 Authority Key Identifier:
                keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/dvZldR-YJbF8lsQUCEwljYUqsyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.229.58.0/24
                IPv6:
                  2a00:1688:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:a3:eb:3c:a9:fc:55:bf:fa:32:18:c6:64:9b:bc:fd:ee:65:
         5c:43:33:77:d3:65:3b:e6:28:60:3d:97:62:f1:c5:4b:10:ba:
         d1:6b:b6:7f:49:e4:43:62:aa:cc:a8:d1:fa:52:4b:49:db:72:
         e0:c8:a5:7f:11:91:d9:73:cf:1f:a1:dc:b1:0c:af:95:34:39:
         1a:c0:56:14:79:63:13:fc:40:6a:28:1d:49:79:c9:9f:b2:48:
         57:12:63:3a:a1:1b:25:d4:31:aa:9d:21:f8:69:e5:5d:16:73:
         ce:09:4a:fd:d0:60:a7:8b:59:13:f6:89:0e:0d:3f:87:cf:c0:
         33:fd:63:c8:00:a1:e7:79:79:26:fc:ae:28:91:1d:e1:9e:5c:
         e2:2d:e6:3f:9f:7d:3a:aa:0a:9b:bd:ab:21:92:e7:5f:99:d0:
         b6:3b:28:7b:e6:ab:0e:45:d5:34:ed:54:be:e6:c6:a2:6e:fe:
         7a:9b:e2:02:0e:a7:41:84:b4:db:d8:9b:6e:97:f2:b2:95:a0:
         7c:b0:46:39:87:53:66:07:9f:1b:75:76:3f:95:e8:2f:1c:96:
         6a:bb:a9:ff:a1:82:f8:78:30:1c:69:34:d1:aa:53:1f:d1:33:
         91:28:5c:6b:ab:96:09:93:8d:07:a1:ff:09:b8:74:3a:32:3c:
         a7:e7:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----