Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nla2bip6/r2nQIKNyzpu6LJsLYJgnLGEZxYs.roa
File:                     r2nQIKNyzpu6LJsLYJgnLGEZxYs.roa (raw, json)
Hash identifier:          sHsZnbYU7++KWioutIgINL9HF1JVQof7qmC5kiN2P+s=
Subject key identifier:   AF:69:D0:20:A3:72:CE:9B:BA:2C:9B:0B:60:98:27:2C:61:19:C5:8B
Certificate issuer:       /CN=1794a7dfba28592d921de3c7902f6af662b7a2b9
Certificate serial:       04
Authority key identifier: 17:94:A7:DF:BA:28:59:2D:92:1D:E3:C7:90:2F:6A:F6:62:B7:A2:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5Sn37ooWS2SHePHkC9q9mK3ork.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/r2nQIKNyzpu6LJsLYJgnLGEZxYs.roa
Signing time:             Sun 18 Dec 2022 16:07:08 +0000
ROA not before:           Sun 18 Dec 2022 16:07:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51088
IP address blocks:        62.3.55.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1794a7dfba28592d921de3c7902f6af662b7a2b9
        Validity
            Not Before: Dec 18 16:07:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=AF69D020A372CE9BBA2C9B0B6098272C6119C58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:f8:21:dd:1d:e1:7d:b8:4c:2e:01:83:28:
                    d5:c1:36:e3:1e:dc:11:a3:78:81:35:7f:b4:76:ed:
                    17:67:b9:6d:ef:5c:ab:a4:0c:c5:ba:49:65:c0:d4:
                    ad:3b:da:33:a7:59:ea:40:a0:40:7a:e3:e5:39:4d:
                    fe:9e:11:1d:69:02:7c:16:1e:54:52:87:27:af:fe:
                    1e:77:e8:bb:e2:ba:cd:81:2f:5d:95:e2:d2:9a:7d:
                    d1:40:d2:24:94:c4:83:c4:b8:9c:c9:c6:fd:b1:b8:
                    5e:34:9d:88:5a:c5:93:86:30:4c:bd:fb:2e:b0:ee:
                    d3:83:4e:48:d4:9a:02:03:9d:02:48:b9:00:73:76:
                    ba:f7:37:fe:10:5f:1f:fd:56:db:9c:32:e2:30:8d:
                    4a:2a:01:80:28:0f:4b:68:70:18:89:3f:ca:86:73:
                    15:e0:e9:26:1b:e5:8b:4b:24:6b:85:4d:03:7b:23:
                    74:3c:53:43:70:e1:ae:38:e7:8a:4e:b3:55:f7:80:
                    55:a6:8e:f6:ba:c6:4f:13:de:6c:b9:c9:d2:5b:ae:
                    d2:a6:bf:4b:58:0d:51:c2:57:8b:e4:ce:f6:3c:3b:
                    ef:a0:66:f9:f4:e3:a5:ca:9f:09:49:66:50:3b:c4:
                    fd:78:a5:fb:52:01:00:42:8c:3b:ba:4f:fc:1d:7b:
                    c0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:69:D0:20:A3:72:CE:9B:BA:2C:9B:0B:60:98:27:2C:61:19:C5:8B
            X509v3 Authority Key Identifier:
                keyid:17:94:A7:DF:BA:28:59:2D:92:1D:E3:C7:90:2F:6A:F6:62:B7:A2:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/F5Sn37ooWS2SHePHkC9q9mK3ork.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5Sn37ooWS2SHePHkC9q9mK3ork.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/r2nQIKNyzpu6LJsLYJgnLGEZxYs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:a6:2b:ba:df:4d:d1:0b:fb:c5:a1:5f:54:4e:f1:8a:33:00:
         2b:5c:ee:83:6f:46:93:8e:ec:0b:b5:20:41:fd:33:25:f4:3b:
         b8:a9:ca:d1:20:7e:94:67:16:89:39:fd:ec:96:e1:61:08:ab:
         95:7c:47:7a:a7:78:9c:36:8e:f4:78:56:b9:91:34:d9:88:62:
         7e:8b:e3:70:6c:de:8d:c7:06:44:a7:ba:20:20:33:3c:18:11:
         d6:8d:48:a2:6f:93:0f:56:b9:bd:d6:12:45:a7:98:21:f4:77:
         f3:b9:23:22:33:5e:96:a7:4e:a4:98:6e:c4:21:cb:94:73:db:
         b6:b6:3e:e6:6f:83:b4:14:a7:3e:3c:86:ba:10:4e:8f:a1:93:
         34:e2:4c:4d:51:9c:3e:79:62:0c:7e:39:33:c8:79:2c:3a:bf:
         2f:96:d5:1b:9e:a8:d0:14:97:a7:28:41:f6:6c:fc:ed:01:d6:
         50:03:22:ac:55:95:ba:cc:61:2d:2a:6e:ab:66:3f:12:8a:95:
         75:fb:7b:98:04:63:d1:96:49:9b:21:fb:68:08:78:f8:ea:17:
         98:68:c2:05:f3:47:3b:e2:51:9d:36:f6:01:18:46:c7:56:a2:
         a4:79:21:d0:a8:d3:c1:fa:5a:be:d8:e0:b7:e8:e6:84:db:e7:
         75:bc:aa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----