Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/1DSMX9RAX2Fjqm2OViYV_Mu6MtQ.roa
File:                     1DSMX9RAX2Fjqm2OViYV_Mu6MtQ.roa (raw, json)
Hash identifier:          XHl7Xpok1By46vnPPf9dWQQ8uJy5bypf6UUeq7UHKx4=
Subject key identifier:   D4:34:8C:5F:D4:40:5F:61:63:AA:6D:8E:56:26:15:FC:CB:BA:32:D4
Certificate issuer:       /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial:       01838441CD05939E1A9C7C06A4F58F6E069C
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/1DSMX9RAX2Fjqm2OViYV_Mu6MtQ.roa
Signing time:             Wed 28 Sep 2022 13:20:48 +0000
ROA not before:           Wed 28 Sep 2022 13:20:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51679
IP address blocks:        212.46.50.0/24 maxlen: 24
                          2a12:c40::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:84:41:cd:05:93:9e:1a:9c:7c:06:a4:f5:8f:6e:06:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
        Validity
            Not Before: Sep 28 13:20:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d4348c5fd4405f6163aa6d8e562615fccbba32d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:26:78:53:a1:6e:5e:4e:62:e0:33:87:53:6e:
                    89:67:2b:76:99:dd:2f:40:76:ef:f8:42:57:b4:69:
                    96:8b:ec:99:aa:2d:c1:dc:01:d7:7c:e5:df:46:66:
                    f5:21:75:3d:a3:ac:ca:1f:7d:37:23:e9:ef:a0:3d:
                    b0:0a:25:3b:c8:33:1e:20:4e:96:48:54:ed:e6:b5:
                    e8:4a:3c:22:67:fd:33:6d:39:a4:b1:06:5e:21:fb:
                    fc:72:13:ae:5e:ab:ea:0e:d4:87:2b:8f:bf:c3:b8:
                    e3:57:b5:e8:77:d0:7e:d9:0e:d8:96:42:cb:ad:97:
                    5d:46:06:54:4e:51:d2:53:05:d4:6a:34:d3:49:bc:
                    92:12:d5:f9:16:a7:25:73:35:76:14:de:a2:49:11:
                    b2:f0:5f:ab:d8:56:7c:56:a9:28:71:d3:2f:db:89:
                    1d:51:2c:1b:58:9f:5d:4b:04:39:cf:a7:42:6d:37:
                    28:a1:bd:f8:50:52:2a:ce:91:a5:78:3d:52:aa:7e:
                    48:17:69:7d:e0:78:38:45:7a:64:8e:ee:70:d7:eb:
                    5b:3c:31:67:8d:8e:ec:90:98:de:42:de:16:df:15:
                    52:f1:a6:f5:b0:df:b3:25:e1:d0:d5:83:0b:ef:7f:
                    a7:58:98:78:a1:ad:e1:88:16:9f:20:ed:06:7b:4b:
                    5b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:34:8C:5F:D4:40:5F:61:63:AA:6D:8E:56:26:15:FC:CB:BA:32:D4
            X509v3 Authority Key Identifier:
                keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/1DSMX9RAX2Fjqm2OViYV_Mu6MtQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.50.0/24
                IPv6:
                  2a12:c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         1b:94:ee:0f:22:47:c7:87:5e:0d:57:82:16:f0:07:72:91:db:
         b8:47:9d:e1:86:6c:b8:bf:c9:25:62:13:c7:42:13:e6:9b:1f:
         b4:84:02:48:39:6d:db:54:da:d5:45:f7:36:c5:23:d3:57:6a:
         73:09:39:53:59:7d:8d:b4:4a:6e:4d:99:b5:64:bc:5a:12:9c:
         69:4b:a1:5f:a2:f6:2d:69:0e:ec:90:51:39:d1:3b:26:80:2d:
         ef:7e:0e:ef:66:b5:b3:43:75:15:4b:ce:87:41:b6:5f:64:b8:
         d3:82:15:e0:f9:23:2c:a7:cc:78:9b:8e:79:d7:b3:b3:8d:10:
         40:cc:a6:f4:45:eb:0e:95:b8:cb:7e:77:bf:be:14:66:c7:4b:
         b9:a2:15:2c:db:ea:3d:64:6f:43:66:07:da:2b:60:90:d7:ad:
         14:90:fd:6e:b9:73:94:e7:77:11:69:a4:c2:ed:01:30:57:a3:
         7d:57:1c:9f:5b:26:60:a4:81:02:58:1e:40:eb:05:19:c1:58:
         22:2d:68:d9:08:9a:fb:03:e2:e3:33:70:80:01:4b:7d:3e:76:
         e8:99:4c:d2:06:8f:04:0e:6b:83:96:a6:4f:26:51:0c:6c:57:
         e2:f5:38:4c:09:41:54:27:5b:be:98:d5:5a:8f:f6:0d:51:0f:
         81:89:99:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----