Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/OLtfLyqZrW-mKdkCABlsrps7tjM.roa
File:                     OLtfLyqZrW-mKdkCABlsrps7tjM.roa (raw, json)
Hash identifier:          948N6BAf+NJcFAuRvn7TjYcYd2I4y0ACGLF1pZ4/XCk=
Subject key identifier:   38:BB:5F:2F:2A:99:AD:6F:A6:29:D9:02:00:19:6C:AE:9B:3B:B6:33
Certificate issuer:       /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial:       1AB09C50
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/OLtfLyqZrW-mKdkCABlsrps7tjM.roa
Signing time:             Sat 01 Jan 2022 12:02:43 +0000
ROA not before:           Sat 01 Jan 2022 12:02:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60721
IP address blocks:        155.254.38.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447781968 (0x1ab09c50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
        Validity
            Not Before: Jan  1 12:02:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=38bb5f2f2a99ad6fa629d90200196cae9b3bb633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:16:6e:63:0c:c9:44:c9:b6:3e:bd:1b:e8:
                    b7:fa:6b:e8:3d:17:b2:16:26:c6:c4:d6:65:46:30:
                    1d:8e:7a:6b:4e:7f:82:13:e5:a4:d9:c9:ca:11:18:
                    09:ba:ee:99:68:2e:48:97:2a:bd:c7:7d:d4:9e:fc:
                    01:3c:b0:60:93:1b:90:34:eb:5a:fd:d8:19:18:6f:
                    24:f0:2a:e4:e0:16:af:cb:2c:7f:a0:a2:0b:29:ed:
                    1f:c7:ac:27:b9:14:6d:71:c9:c4:40:fc:0c:f4:44:
                    a6:4e:a9:b5:fa:64:84:e8:41:14:8d:e5:3d:96:84:
                    5a:8f:70:3c:47:f7:80:e5:0b:1f:6a:45:87:e1:d1:
                    54:c0:bb:7e:fa:e3:95:e8:63:26:64:2e:7c:ed:d9:
                    01:a2:93:b0:f7:9a:59:e5:de:0a:f4:68:d6:31:91:
                    2a:92:8f:92:52:b1:44:b9:48:6b:50:03:02:9e:38:
                    51:f6:41:a6:9a:49:01:aa:27:a3:d5:72:53:8a:cd:
                    35:89:c7:c5:d6:28:41:c5:71:9b:8a:37:f7:eb:fb:
                    d0:f8:08:6e:68:38:79:06:91:83:c6:d0:0a:97:bb:
                    bb:48:dc:da:37:fb:96:82:e0:e9:5d:cf:3a:7c:3a:
                    c0:4b:4c:97:a2:b2:0e:55:eb:ac:c7:0c:8f:65:70:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BB:5F:2F:2A:99:AD:6F:A6:29:D9:02:00:19:6C:AE:9B:3B:B6:33
            X509v3 Authority Key Identifier:
                keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/OLtfLyqZrW-mKdkCABlsrps7tjM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:71:de:55:5c:6d:f9:43:0e:43:87:cd:30:e9:39:fc:4e:64:
         90:40:1c:83:d0:13:8f:65:d8:42:12:17:fe:87:da:50:95:79:
         96:d5:75:5a:aa:26:d1:22:fb:dd:e9:02:46:e0:11:e5:24:2c:
         fa:6b:57:df:aa:0c:70:a7:97:a5:4f:68:d7:70:57:a2:f6:41:
         19:fb:2c:58:2c:fe:c6:01:4b:b3:25:78:55:49:ac:e6:76:e8:
         e6:4e:1e:5f:e2:5d:26:9f:87:e1:35:6c:93:3c:e0:1e:18:ad:
         7b:b3:6e:09:b5:1b:fd:2d:c5:da:46:1b:5c:2b:b1:13:45:5f:
         f6:d4:45:97:1b:9c:11:45:97:ae:4f:f4:e1:18:12:cd:ac:23:
         71:36:10:97:7b:2f:f5:da:ae:bd:5e:84:0a:6b:9f:c2:c8:b5:
         a3:52:73:35:da:9a:3e:e0:ba:14:60:2d:7f:d6:85:73:f0:71:
         b2:92:47:f1:a7:8d:68:06:de:d0:6f:51:31:75:97:25:47:ca:
         99:50:2d:7b:7a:4e:68:a7:e7:a6:a5:97:43:5b:e0:36:2e:b5:
         3c:32:ae:e6:d4:1b:69:e9:50:53:b3:e7:25:ba:97:28:8d:cb:
         00:69:22:e1:bd:3c:71:83:4d:d4:5d:de:1b:77:10:28:59:ac:
         1a:dd:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----