Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Z8mBsdEAmAFL7W0J2sTyG-K6CPw.roa
File:                     Z8mBsdEAmAFL7W0J2sTyG-K6CPw.roa (raw, json)
Hash identifier:          3vhOTUPkF5ZYBLlIq1+6zEYECeuu9UlqIbzBXWOR88o=
Subject key identifier:   67:C9:81:B1:D1:00:98:01:4B:ED:6D:09:DA:C4:F2:1B:E2:BA:08:FC
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       0352DEAB
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Z8mBsdEAmAFL7W0J2sTyG-K6CPw.roa
Signing time:             Thu 23 Jun 2022 05:03:32 +0000
ROA not before:           Thu 23 Jun 2022 05:03:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        45.157.72.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55762603 (0x352deab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: Jun 23 05:03:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=67c981b1d10098014bed6d09dac4f21be2ba08fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:cf:43:5c:44:e0:c5:20:82:c1:82:e5:db:
                    48:b2:00:72:5d:86:70:01:34:80:5f:a9:80:8a:37:
                    46:f1:f1:fd:6d:16:db:b6:78:6f:9f:43:6a:ca:d9:
                    d4:ef:7c:3b:c1:1f:b9:50:97:e6:c5:bb:53:9a:c0:
                    74:e2:42:05:dd:f6:e0:70:79:c9:37:9f:ed:70:7f:
                    6b:50:a3:0a:1e:e3:e8:49:d8:1f:5f:43:dc:1f:62:
                    6c:b8:40:2e:28:ee:ea:07:9b:bc:2e:f2:8d:f9:2f:
                    2e:6a:fb:75:bd:d0:24:6e:18:28:7f:e7:0a:da:1e:
                    6b:18:1e:c4:70:52:59:6a:cd:a9:b3:1a:2a:26:6a:
                    1d:77:e6:04:08:66:5c:bc:e1:db:89:ff:36:ba:79:
                    e5:1e:e1:89:39:be:00:94:9a:34:53:2d:6b:7c:9f:
                    80:c0:36:93:26:1c:84:c2:13:da:a5:07:5c:df:11:
                    1d:63:74:fe:68:7f:99:2d:e8:cb:d7:61:56:6c:f0:
                    3c:7c:31:1f:c4:83:60:dd:67:b4:77:c6:39:0e:27:
                    79:d0:54:66:df:42:b1:36:d4:e6:cb:17:80:9a:17:
                    57:67:65:0c:dd:23:ad:ea:b6:7c:1e:9b:48:be:c9:
                    aa:2e:14:66:f0:3b:e9:b6:eb:86:8b:b5:ef:75:d3:
                    8e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C9:81:B1:D1:00:98:01:4B:ED:6D:09:DA:C4:F2:1B:E2:BA:08:FC
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/Z8mBsdEAmAFL7W0J2sTyG-K6CPw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:cb:80:b6:c1:b2:e7:d9:75:47:c1:a4:e5:51:61:23:6b:0a:
         77:d1:37:d8:a8:0b:bb:6a:e5:28:b7:86:78:fe:55:01:80:37:
         49:30:42:15:0a:37:e6:fe:f4:a8:fb:ce:7b:2e:8d:c1:c8:21:
         e1:8b:24:bb:f9:4c:03:48:30:b0:9e:84:45:96:00:9a:fc:b3:
         7b:a6:78:2e:db:b6:37:81:a4:a7:18:5b:ec:02:05:c7:17:ac:
         33:72:40:18:3c:7a:e3:8d:be:1a:1f:81:24:b8:79:a1:77:c4:
         c6:bb:05:e4:d8:d1:5b:a9:43:50:81:c9:ca:0a:89:91:ef:2f:
         ad:fa:ba:d7:c6:b6:7f:a2:95:64:3a:e2:f9:0a:29:99:4c:20:
         1b:92:a3:75:da:a7:c7:18:dc:45:aa:bc:3a:45:6d:cc:03:8a:
         61:08:85:3d:19:6d:4f:6d:d4:0e:af:1e:5f:c2:63:84:73:a4:
         0c:46:40:71:70:83:61:9e:67:7a:5a:9c:9b:c4:6f:39:13:47:
         84:51:44:52:86:58:27:6c:5f:f8:05:53:4d:e9:9d:3c:28:61:
         66:26:82:38:c8:73:9a:18:95:d4:e6:da:f1:0f:b2:68:3d:b6:
         cb:89:64:59:95:42:ce:e7:af:8a:27:4a:d9:e9:64:2b:06:5a:
         d5:80:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----