Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/E1M0XVig0hQo4ELR33r-y22epV0.roa
File:                     E1M0XVig0hQo4ELR33r-y22epV0.roa (raw, json)
Hash identifier:          0z2WELuvP3yJjW9mjilvoWLj3yrZSU7zArpDnHFA7CA=
Subject key identifier:   13:53:34:5D:58:A0:D2:14:28:E0:42:D1:DF:7A:FE:CB:6D:9E:A5:5D
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       075B7422
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/E1M0XVig0hQo4ELR33r-y22epV0.roa
Signing time:             Sat 01 Jan 2022 16:07:00 +0000
ROA not before:           Sat 01 Jan 2022 16:07:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212635
IP address blocks:        45.159.140.0/22 maxlen: 24
                          2a10:6e40::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123434018 (0x75b7422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: Jan  1 16:07:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1353345d58a0d21428e042d1df7afecb6d9ea55d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:0b:ea:2a:f7:25:c7:e5:88:ba:ff:8f:99:
                    0c:8b:26:72:dd:e0:53:e1:10:f9:fb:83:d6:63:2b:
                    a7:ae:46:40:9f:cb:b4:1d:ca:9f:21:bc:48:78:3e:
                    dc:ff:8a:1b:8b:3a:e9:13:b1:04:cd:63:f5:9b:f6:
                    92:bd:58:0a:35:61:e4:a7:be:68:8f:8a:ea:ef:aa:
                    2c:8f:82:3f:21:32:41:f9:8e:45:bd:e5:41:48:cd:
                    e7:8e:c8:97:a7:78:8a:ab:36:e7:e9:2b:00:bc:77:
                    00:79:7c:ef:16:2a:9f:3a:3e:98:2e:4d:0a:91:2f:
                    13:b8:59:f0:b0:92:f7:26:24:3f:a3:68:0f:2e:ed:
                    76:64:be:62:15:ad:b6:0d:f1:4b:f1:01:b5:f6:5b:
                    f9:bb:2a:7e:b8:6c:f6:ba:11:af:cf:82:24:16:5e:
                    32:08:5b:92:48:ea:4c:06:4b:cf:da:d1:4c:bb:19:
                    24:7d:03:b8:32:b3:a9:84:53:fd:f4:7d:37:a0:33:
                    4f:28:68:95:db:85:0d:8f:b6:8c:f8:57:30:ec:22:
                    33:b1:42:8f:3a:48:dd:35:ea:e7:91:8e:30:2e:e4:
                    dc:8c:fd:fb:67:12:7e:b3:e4:e3:4e:7c:0f:ef:39:
                    37:05:ad:07:87:40:01:22:77:f7:4f:e2:2a:6d:db:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:53:34:5D:58:A0:D2:14:28:E0:42:D1:DF:7A:FE:CB:6D:9E:A5:5D
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/E1M0XVig0hQo4ELR33r-y22epV0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.140.0/22
                IPv6:
                  2a10:6e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:f8:cb:7b:cf:a3:ec:6f:9b:4e:d7:5c:7b:07:79:09:23:1f:
         57:d5:f6:40:8f:3b:1d:77:a8:3d:9c:26:fc:dd:42:2b:83:67:
         51:20:b6:e2:bc:81:be:ad:7b:a6:07:7c:85:ff:97:15:5b:57:
         96:6e:b9:44:7d:37:63:3c:10:51:2b:de:39:cf:04:4f:6d:91:
         31:d7:a9:ab:cc:ae:ec:26:30:91:6c:55:e5:d2:87:d8:b7:ec:
         cb:bf:e6:81:f4:22:84:94:ed:90:4d:8c:56:69:d0:be:6a:8c:
         bd:ba:6b:7c:4d:43:f2:8a:c7:36:7e:33:e2:8c:63:2e:3e:d8:
         a5:ba:f2:e8:94:f5:11:24:eb:23:3c:96:9d:08:3c:2e:34:3a:
         0f:58:e9:a1:82:d9:78:46:db:ff:2a:b7:8d:e8:b9:0e:82:ad:
         87:13:ab:cc:d9:b4:bb:69:f6:8f:21:22:c3:54:1a:71:9c:8c:
         9c:fb:42:d5:bc:00:b8:da:92:94:9f:16:12:85:0c:35:4a:56:
         bb:ee:16:c8:e1:69:ac:61:ee:36:c0:51:c8:48:c9:28:27:18:
         5d:ba:77:3d:db:71:a1:d1:ee:a2:58:5c:f7:08:bf:cf:51:6f:
         9a:e7:53:17:dd:a3:51:70:89:af:70:02:3c:3c:7f:cf:62:a7:
         e6:f7:2a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----