Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/SaePwplViGw-4JAuDDOCasII02g.roa
File:                     SaePwplViGw-4JAuDDOCasII02g.roa (raw, json)
Hash identifier:          3OtsmnCEYww5Ijq41wGXX3wSfhGPJMhG42k82QciDJ0=
Subject key identifier:   49:A7:8F:C2:99:55:88:6C:3E:E0:90:2E:0C:33:82:6A:C2:08:D3:68
Certificate issuer:       /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial:       05B991D5
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/SaePwplViGw-4JAuDDOCasII02g.roa
Signing time:             Sat 01 Jan 2022 01:50:33 +0000
ROA not before:           Sat 01 Jan 2022 01:50:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        185.137.156.0/24 maxlen: 24
                          2a10:a100::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96047573 (0x5b991d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
        Validity
            Not Before: Jan  1 01:50:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=49a78fc29955886c3ee0902e0c33826ac208d368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:fc:51:74:0c:da:4a:35:ce:62:53:43:ea:
                    3a:39:d4:c6:02:7e:3a:71:16:c3:6d:b3:56:e5:88:
                    63:c4:29:88:50:56:be:b9:33:57:73:a0:cb:d4:33:
                    cb:e5:07:11:37:42:ec:40:f4:8a:24:d0:9f:30:10:
                    53:ae:30:86:66:9e:a8:51:91:24:20:ad:4d:7f:fd:
                    ed:71:83:a1:6f:c1:41:95:2d:3d:71:3e:a6:21:8f:
                    2f:67:2d:d7:e2:a2:f5:b0:bc:1a:38:f5:bf:fd:19:
                    b0:ba:5b:cb:dd:ea:68:1c:b4:3f:ac:7d:07:95:b3:
                    98:28:5a:99:85:54:c3:98:e0:3d:68:28:fc:ec:33:
                    c5:f7:a2:50:97:f7:8f:6d:c3:8a:78:69:9d:1b:2f:
                    3e:4c:30:e5:cf:ee:c7:d1:e9:7d:d9:6f:b0:8f:fc:
                    b0:9d:57:54:cc:30:3d:25:8a:04:ef:03:78:f5:a0:
                    ce:a1:85:c2:2e:bc:42:14:33:43:b9:1d:03:60:e2:
                    5a:90:e8:22:de:9e:f0:ca:cc:fb:81:83:d7:cf:e6:
                    73:c9:bd:2d:b8:5a:3e:ab:51:7e:48:de:7d:b3:c7:
                    b7:a9:78:86:60:c9:4c:59:57:16:83:ca:0a:0f:2b:
                    76:10:ec:f2:d1:e5:3e:b5:73:94:a0:f2:cf:28:39:
                    bd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A7:8F:C2:99:55:88:6C:3E:E0:90:2E:0C:33:82:6A:C2:08:D3:68
            X509v3 Authority Key Identifier:
                keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/SaePwplViGw-4JAuDDOCasII02g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.156.0/24
                IPv6:
                  2a10:a100::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:55:6e:2c:34:03:b3:c3:43:01:70:e9:ab:b1:3c:55:cd:c1:
         e5:b7:22:20:86:b0:1d:b4:4f:53:6b:ed:90:80:34:24:65:88:
         da:dc:59:af:8c:36:2f:27:70:81:4a:e1:04:be:1e:7f:5d:0e:
         55:b3:16:09:1c:71:05:89:ba:b2:d6:ae:df:0c:e4:77:1f:46:
         36:59:b3:5e:fa:47:dc:13:c6:36:37:bb:50:8a:cc:9b:61:b6:
         95:2d:9f:71:d5:37:1f:51:af:d8:57:22:b7:fd:35:4b:c1:0c:
         ee:88:f7:aa:a2:99:fe:aa:df:df:7f:5e:fd:00:2c:19:81:cc:
         fe:dc:39:e2:82:e5:61:d3:7f:14:6d:9d:a1:3c:d8:ca:1e:78:
         df:0c:e3:ae:fd:5b:db:76:4c:4c:76:35:b9:ea:a8:37:2d:bf:
         bc:6e:e3:ef:01:89:75:46:2b:3a:50:49:f7:d7:2d:58:04:78:
         d7:45:0e:f9:7b:97:06:42:0d:e0:6f:92:62:74:98:1b:4c:eb:
         47:26:51:2e:e9:69:5a:83:11:6c:11:57:eb:0d:b9:78:c2:3f:
         bc:6a:81:00:0c:3d:7e:3e:4f:fd:e4:e6:25:f3:16:6f:df:4e:
         aa:7c:93:d0:02:1d:00:37:66:74:86:47:08:97:44:28:fb:f0:
         6a:eb:43:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----