Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/45d7d9-3927-4b27-8fac-180fe61d18e4/1/f91ggNgCYGfjUjnc0D8whc6O5No.roa
File:                     f91ggNgCYGfjUjnc0D8whc6O5No.roa (raw, json)
Hash identifier:          7qcA2Sdht2sKHuqabu8r130r9RSs5wsf29G8OVJ9JQ4=
Subject key identifier:   7F:DD:60:80:D8:02:60:67:E3:52:39:DC:D0:3F:30:85:CE:8E:E4:DA
Certificate issuer:       /CN=1314ce416c5ca85313c90eb4eb629663394fe866
Certificate serial:       01CDEB6E
Authority key identifier: 13:14:CE:41:6C:5C:A8:53:13:C9:0E:B4:EB:62:96:63:39:4F:E8:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExTOQWxcqFMTyQ6062KWYzlP6GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/45d7d9-3927-4b27-8fac-180fe61d18e4/1/f91ggNgCYGfjUjnc0D8whc6O5No.roa
Signing time:             Sat 28 May 2022 14:05:16 +0000
ROA not before:           Sat 28 May 2022 14:05:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203020
IP address blocks:        46.254.105.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30272366 (0x1cdeb6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1314ce416c5ca85313c90eb4eb629663394fe866
        Validity
            Not Before: May 28 14:05:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7fdd6080d8026067e35239dcd03f3085ce8ee4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:87:5b:c1:28:d7:06:37:55:a8:8a:da:91:
                    89:23:1c:b1:4d:f2:0c:b3:db:78:6a:01:07:b2:68:
                    b9:ac:39:b7:64:92:34:0b:88:6a:16:f3:e1:6c:73:
                    26:34:51:59:b1:69:2a:a5:0c:61:70:af:1b:ab:15:
                    1f:ab:cb:c8:a2:56:0e:2a:d3:b4:ca:3d:8d:58:aa:
                    5e:ca:19:74:46:dc:a8:12:dd:f5:0c:23:25:44:8d:
                    7a:14:05:45:3d:46:6c:04:da:81:ea:ea:b5:51:35:
                    b9:e7:2b:e9:09:a5:36:3d:ec:ca:5a:3e:a0:7e:16:
                    e3:a3:45:7a:af:9a:b6:da:3b:eb:2b:a2:2b:5d:8d:
                    95:ad:fe:d3:15:20:c3:e0:e1:f4:50:9d:86:ed:7d:
                    c6:74:c2:3b:a2:c1:a1:3f:4a:45:eb:1e:d1:c5:33:
                    d0:c2:75:38:8b:ad:de:e6:34:50:07:a5:96:b7:17:
                    b7:ab:fe:0e:74:f7:5e:62:bd:f2:29:40:4b:75:92:
                    47:d6:4d:c3:00:a6:35:62:e7:22:85:08:f0:ac:f8:
                    74:52:50:b5:10:f7:51:8a:5e:d7:9b:4d:ce:16:a7:
                    60:38:ae:ce:c4:49:89:f7:4f:73:60:55:ca:b0:46:
                    0a:54:32:63:78:6d:9d:db:ef:b6:bb:57:93:c7:b1:
                    53:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DD:60:80:D8:02:60:67:E3:52:39:DC:D0:3F:30:85:CE:8E:E4:DA
            X509v3 Authority Key Identifier:
                keyid:13:14:CE:41:6C:5C:A8:53:13:C9:0E:B4:EB:62:96:63:39:4F:E8:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExTOQWxcqFMTyQ6062KWYzlP6GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/45d7d9-3927-4b27-8fac-180fe61d18e4/1/f91ggNgCYGfjUjnc0D8whc6O5No.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/45d7d9-3927-4b27-8fac-180fe61d18e4/1/ExTOQWxcqFMTyQ6062KWYzlP6GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.254.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:08:4a:28:32:49:fd:6d:b6:d9:1e:71:e9:75:b1:db:a2:88:
         20:72:7c:3e:3d:a9:7a:9a:81:05:12:70:92:47:67:07:a8:a1:
         84:2f:a3:15:a3:55:a4:13:32:47:45:b7:05:5e:91:52:e4:c3:
         ee:e1:10:e5:84:64:a3:52:8f:9d:a0:df:8b:db:31:22:5f:bf:
         32:5d:6d:e4:46:8f:ff:e3:86:13:a1:29:5a:8d:49:5b:c1:95:
         01:50:58:ab:06:32:21:8e:63:43:ea:86:70:b7:d4:8f:13:97:
         9d:27:ca:a9:b1:0e:13:ac:c0:0e:00:d7:6c:1f:cc:87:7d:54:
         09:c6:de:d0:88:40:be:b4:9d:97:18:92:78:cf:dd:01:e0:87:
         8e:83:69:17:ff:6c:ab:bd:bd:bd:84:6b:d0:37:96:5c:f3:12:
         74:af:a9:27:21:55:68:53:8c:bb:d2:d8:be:b5:7b:f8:e7:59:
         f5:2b:b9:f9:ea:10:3a:99:37:d6:0e:07:d6:f3:a0:8c:0e:5c:
         00:87:c7:04:76:8b:6b:e7:2f:f2:a8:f0:0f:7b:19:88:09:f3:
         5b:96:b1:e0:5f:23:3b:78:5d:10:a6:0b:87:09:de:17:8c:5a:
         47:87:1b:f6:97:6c:c9:72:37:cd:e9:10:f4:df:93:04:87:a6:
         80:d6:a5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----