Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/eDHaMy-UilZ-tWOgMwdtP2a7cgs.roa
File:                     eDHaMy-UilZ-tWOgMwdtP2a7cgs.roa (raw, json)
Hash identifier:          KAWHxKuEOYpRXCmsju3iXae+gPxndM3TonlRuOUCWXs=
Subject key identifier:   78:31:DA:33:2F:94:8A:56:7E:B5:63:A0:33:07:6D:3F:66:BB:72:0B
Certificate issuer:       /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial:       11EFAA43
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/eDHaMy-UilZ-tWOgMwdtP2a7cgs.roa
Signing time:             Thu 13 Jan 2022 17:48:32 +0000
ROA not before:           Thu 13 Jan 2022 17:48:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     174
IP address blocks:        209.127.202.0/24 maxlen: 24
                          2a01:4ce0:50::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300919363 (0x11efaa43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
        Validity
            Not Before: Jan 13 17:48:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7831da332f948a567eb563a033076d3f66bb720b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:90:d0:c8:c8:55:10:cf:d2:d1:b9:df:12:
                    54:1a:0a:4a:58:28:59:9b:6f:d8:ba:91:a1:4b:d8:
                    6f:01:f1:83:4e:90:3e:ae:a9:36:e6:a1:3a:5c:fd:
                    5f:07:81:e1:d0:1d:89:25:65:d3:5b:f8:be:63:28:
                    4b:99:82:ad:a7:a3:18:9c:24:ea:67:69:35:59:4f:
                    5d:b3:bd:fa:e4:c0:82:2d:b8:50:9e:75:89:d6:80:
                    12:e1:e7:bc:bf:d1:b9:c5:61:80:e4:46:7d:76:6e:
                    44:a3:1c:c6:eb:0f:a4:6e:79:0c:0a:ce:6a:33:c9:
                    5c:fa:61:94:e6:41:92:de:65:97:8a:ae:2b:59:25:
                    2f:0d:9f:b6:72:1a:ec:59:70:df:a4:64:39:26:c0:
                    19:07:a4:16:a1:a1:92:cd:d8:f9:98:1f:a8:58:41:
                    96:93:86:3d:cc:21:ca:5b:0b:0d:bd:b8:35:35:fc:
                    9c:4a:4b:45:83:17:8c:26:44:31:90:3e:7c:fb:ab:
                    80:07:e6:6a:47:d2:85:02:04:7b:9c:92:c5:da:6f:
                    04:9a:5b:80:1b:77:08:c3:f4:e5:73:44:92:4a:75:
                    94:bf:81:40:52:e0:96:a5:a8:52:5c:73:c7:ea:3b:
                    eb:84:ce:1e:80:0d:64:34:2c:3e:98:f2:d4:64:8b:
                    75:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:31:DA:33:2F:94:8A:56:7E:B5:63:A0:33:07:6D:3F:66:BB:72:0B
            X509v3 Authority Key Identifier:
                keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/eDHaMy-UilZ-tWOgMwdtP2a7cgs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.202.0/24
                IPv6:
                  2a01:4ce0:50::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:6c:71:d1:c4:c6:8b:df:33:f3:d8:90:32:c4:5e:99:06:3b:
         23:46:8b:9b:7d:71:bf:fd:52:de:ad:c9:15:27:ea:7c:5a:cd:
         8f:19:ea:a2:e3:d7:4e:25:30:c0:7c:3b:14:f7:71:10:34:e3:
         29:02:2d:19:13:ad:db:27:3f:b0:31:14:3d:c0:33:89:d9:45:
         b9:05:f0:24:f3:16:6f:1d:a1:5b:18:d0:5a:5e:6a:fd:05:60:
         ab:fa:f7:2f:63:98:0f:63:0e:92:a5:d4:36:bc:fc:c7:5f:19:
         e8:da:a6:26:5d:36:8d:ba:4e:3f:f5:5f:74:15:23:e5:0a:39:
         87:42:5c:f1:be:3b:4f:79:77:df:e9:0a:b3:e8:c8:4b:5e:b2:
         fa:64:86:a3:1d:8f:b1:13:46:97:43:79:ff:fa:5f:49:d7:8d:
         9f:60:52:78:e4:50:d3:8b:3e:8b:f0:2b:93:ed:7b:4e:0a:9e:
         9e:0d:08:c2:d0:bf:44:52:1c:cd:e6:02:93:1e:de:d0:c8:ba:
         77:ea:9e:27:ed:85:1d:99:e9:f3:83:1b:8b:c1:6d:65:b5:53:
         a9:4f:bd:22:24:66:c8:cb:de:be:37:c4:58:33:13:f1:c4:fb:
         84:0a:43:57:ca:94:97:ad:e6:17:f1:75:6a:f2:18:bb:9b:53:
         59:eb:d7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----