Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/HREmUtDa4gbAdph9jjzLpkGYGYA.roa
File:                     HREmUtDa4gbAdph9jjzLpkGYGYA.roa (raw, json)
Hash identifier:          dPRZd7XlT9l/ac1yMcNDqsi19eb+odLM++sIWz2a5dg=
Subject key identifier:   1D:11:26:52:D0:DA:E2:06:C0:76:98:7D:8E:3C:CB:A6:41:98:19:80
Certificate issuer:       /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial:       033CF85B
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/HREmUtDa4gbAdph9jjzLpkGYGYA.roa
Signing time:             Sat 01 Jan 2022 00:57:56 +0000
ROA not before:           Sat 01 Jan 2022 00:57:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47720
IP address blocks:        45.140.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54327387 (0x33cf85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
        Validity
            Not Before: Jan  1 00:57:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1d112652d0dae206c076987d8e3ccba641981980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:0e:b8:41:36:04:2b:f8:4f:c4:8a:96:5f:
                    a1:12:14:1e:82:c3:d0:93:a7:1d:d4:49:35:64:98:
                    4d:88:2b:18:98:56:b6:61:30:64:d8:ab:8c:de:a1:
                    4f:d2:53:ea:76:0d:9d:89:e7:9d:11:2d:87:bb:b4:
                    df:71:72:06:a3:36:f5:b6:64:49:2c:ee:dd:c2:83:
                    c1:15:b3:d9:39:4c:39:3e:69:d9:8a:42:0c:d3:21:
                    ad:95:f2:8a:58:1f:0e:73:74:5a:7c:00:81:4a:4d:
                    c6:c0:60:5c:39:9f:e2:68:77:9d:e3:4b:d4:4e:d5:
                    df:0f:6e:cd:c4:66:8c:bd:96:bd:0f:ad:92:2b:c8:
                    27:0c:0e:d0:8b:59:8d:77:5f:f6:0f:68:d1:ef:f5:
                    80:f4:89:cd:23:f8:79:5d:24:6f:07:42:92:c4:08:
                    89:38:1a:19:78:bc:43:43:46:1b:81:e5:43:83:65:
                    bd:ff:23:cd:9e:4c:b9:1a:61:ff:8c:fa:2a:90:ba:
                    c0:1e:96:85:ea:64:3d:7c:7b:7a:08:59:65:38:de:
                    58:3d:eb:10:30:ae:b0:bf:b9:a1:27:7c:69:8f:b1:
                    4a:23:c6:c8:8d:7d:0f:2e:6b:e1:cf:73:22:d2:3d:
                    59:de:9f:8c:79:f4:7e:57:f5:b0:d9:a7:f4:3e:ed:
                    f3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:11:26:52:D0:DA:E2:06:C0:76:98:7D:8E:3C:CB:A6:41:98:19:80
            X509v3 Authority Key Identifier:
                keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/HREmUtDa4gbAdph9jjzLpkGYGYA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:f4:c9:3b:7d:9f:8c:93:73:13:30:8b:f6:ba:72:1a:9b:08:
         f5:95:a8:b1:0d:14:0f:22:cc:75:fa:98:8d:de:57:b7:cc:17:
         ec:11:e2:8e:14:f6:13:ad:4d:8a:14:41:19:ee:18:32:c8:62:
         7a:2b:b3:a6:83:e5:1c:5e:2f:b8:61:1f:3c:b9:3d:cb:ce:f2:
         4e:49:bd:e0:76:fe:df:0a:0b:f0:97:f6:3e:ef:31:b7:2a:90:
         57:74:f8:67:93:a1:ba:ee:53:90:4d:ac:7b:b4:1d:df:cf:e8:
         f8:5c:b2:56:08:9a:0c:b7:3c:52:5b:b7:18:25:fc:e5:40:58:
         a4:88:e1:bf:28:04:fc:d7:9f:45:cd:fa:93:1b:0b:38:f7:e7:
         4e:cc:08:ff:00:03:88:9e:71:5b:bb:8e:77:43:6f:46:6f:76:
         cf:e9:17:9f:95:f0:70:a7:42:27:77:17:37:cb:f5:4a:fc:9e:
         a8:e0:84:86:bb:8c:39:67:5f:bf:97:15:ce:cd:66:0c:bf:43:
         8e:1d:9c:59:3d:bd:a0:fb:46:12:bd:ad:45:b2:e9:9f:d3:33:
         fd:fc:48:ec:64:d5:17:db:ba:54:44:4d:2a:f9:83:e5:58:34:
         4f:5b:04:38:ec:bd:34:11:78:b6:d8:6e:1c:a7:3d:c4:5d:02:
         31:e4:a4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----