Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/RMOXROhDrgAe5MAWwvr0Ljwh2lM.roa
File:                     RMOXROhDrgAe5MAWwvr0Ljwh2lM.roa (raw, json)
Hash identifier:          9pnGOlNXQsh+rfwEm+hH4Cu03EBbu1kKLFcU5F3j2HY=
Subject key identifier:   44:C3:97:44:E8:43:AE:00:1E:E4:C0:16:C2:FA:F4:2E:3C:21:DA:53
Certificate issuer:       /CN=d2ba2618ab4b6042ee25c4679e0775e4306d71c6
Certificate serial:       0115E54A
Authority key identifier: D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0romGKtLYELuJcRnngd15DBtccY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/RMOXROhDrgAe5MAWwvr0Ljwh2lM.roa
Signing time:             Sat 01 Jan 2022 06:56:21 +0000
ROA not before:           Sat 01 Jan 2022 06:56:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        45.145.176.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18212170 (0x115e54a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ba2618ab4b6042ee25c4679e0775e4306d71c6
        Validity
            Not Before: Jan  1 06:56:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=44c39744e843ae001ee4c016c2faf42e3c21da53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:59:75:a0:23:d1:8a:24:2d:5c:35:3d:47:
                    c2:96:71:99:0a:ab:89:ca:09:ef:25:29:0d:51:27:
                    13:4b:17:86:4c:86:3e:6d:1c:9b:36:29:b5:1f:9f:
                    d9:a0:d9:ec:f0:8b:51:3f:8d:1c:25:58:86:2f:d2:
                    b7:8a:7c:b4:39:86:3f:e7:d3:53:d2:b1:73:59:97:
                    1e:bd:f5:d4:3a:fa:27:30:42:d4:9b:96:44:4b:fe:
                    e5:10:45:a8:04:cb:3f:cc:a1:f3:70:54:d2:3f:8f:
                    57:1f:9c:ac:44:fe:6c:63:cc:cf:f1:72:b5:bd:ca:
                    01:c1:30:93:09:fe:05:16:7e:cc:59:6f:c1:a4:1e:
                    95:17:d2:6e:c5:98:af:eb:ba:7e:9b:c0:cf:91:0b:
                    6e:56:d9:5f:cd:d3:1b:6d:16:22:7f:bf:a0:d4:37:
                    e8:a5:b5:90:94:e0:5c:6b:75:c1:0b:57:7a:b7:ab:
                    f8:18:76:fe:6b:8a:a1:67:ea:a9:27:96:e3:85:4e:
                    e5:5a:34:ad:ce:3a:70:6d:58:2f:5e:1b:49:e4:8f:
                    e2:40:3b:5b:62:76:ca:5d:39:e2:4d:bd:db:de:8b:
                    63:48:30:21:ba:5d:4e:d7:7f:00:56:4c:d6:ed:3a:
                    c7:44:df:a9:b3:92:58:f1:48:1f:da:ea:a5:0b:4a:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C3:97:44:E8:43:AE:00:1E:E4:C0:16:C2:FA:F4:2E:3C:21:DA:53
            X509v3 Authority Key Identifier:
                keyid:D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0romGKtLYELuJcRnngd15DBtccY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/RMOXROhDrgAe5MAWwvr0Ljwh2lM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/0romGKtLYELuJcRnngd15DBtccY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:80:d8:56:41:d2:38:29:6b:34:20:9b:71:fe:12:52:6c:a4:
         7a:36:85:fc:ab:3b:3c:3f:eb:91:df:c9:d5:93:c8:b6:a6:04:
         b5:9a:94:a0:d1:c2:cb:66:26:e8:9f:0c:48:5f:46:26:98:a3:
         d1:74:be:fc:7a:6f:84:84:6d:ea:30:f0:9b:da:df:84:b4:f1:
         31:23:cb:de:4d:b6:81:b8:e6:84:05:fc:3c:cc:e1:a2:88:46:
         50:94:fd:5c:e4:d7:4b:2e:92:2d:64:02:5e:6a:c5:18:17:ad:
         09:18:a1:d6:5b:2c:f2:c7:cb:6b:ec:29:a6:35:ed:c9:65:04:
         96:8d:bc:d0:d9:f2:58:b4:e2:f0:6a:b1:72:5b:7a:45:dd:3a:
         5f:7f:2e:a1:a5:6d:f6:89:63:89:ec:34:9d:f5:a3:a5:e4:d5:
         d7:f4:a1:e3:a4:54:50:3c:ca:76:9f:13:3c:3b:b3:64:24:b8:
         cf:2f:c4:d5:b8:7a:9d:94:ee:26:be:24:cb:c7:df:46:c0:43:
         e2:35:b2:9f:a5:71:65:a9:17:c7:d8:a3:64:6d:0b:52:bb:b6:
         9d:57:17:50:5d:67:7b:f0:b8:38:76:d1:e2:88:6b:c9:2e:0b:
         c0:6a:d6:9c:1c:f8:f6:32:7c:19:ef:57:ca:76:ba:b6:73:d1:
         57:b3:07:33
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEARXlSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MmJhMjYxOGFiNGI2MDQyZWUyNWM0Njc5ZTA3NzVlNDMwNmQ3MWM2MB4XDTIyMDEw
MTA2NTYyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDRjMzk3NDRlODQz
YWUwMDFlZTRjMDE2YzJmYWY0MmUzYzIxZGE1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKG3WXWgI9GKJC1cNT1HwpZxmQqricoJ7yUpDVEnE0sXhkyG
Pm0cmzYptR+f2aDZ7PCLUT+NHCVYhi/St4p8tDmGP+fTU9Kxc1mXHr311Dr6JzBC
1JuWREv+5RBFqATLP8yh83BU0j+PVx+crET+bGPMz/Fytb3KAcEwkwn+BRZ+zFlv
waQelRfSbsWYr+u6fpvAz5ELblbZX83TG20WIn+/oNQ36KW1kJTgXGt1wQtXerer
+Bh2/muKoWfqqSeW44VO5Vo0rc46cG1YL14bSeSP4kA7W2J2yl054k29296LY0gw
IbpdTtd/AFZM1u06x0TfqbOSWPFIH9rqpQtKKdECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBREw5dE6EOuAB7kwBbC+vQuPCHaUzAfBgNVHSMEGDAWgBTSuiYYq0tgQu4l
xGeeB3XkMG1xxjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzByb21HS3RMWUVMdUpjUm5uZ2QxNURCdGNjWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjkvYTY3OTk2LTU0ZjEtNGYxZS1hNzYwLThlMGQ1MjkzYWFjOC8x
L1JNT1hST2hEcmdBZTVNQVd3dnIwTGp3aDJsTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjkv
YTY3OTk2LTU0ZjEtNGYxZS1hNzYwLThlMGQ1MjkzYWFjOC8xLzByb21HS3RMWUVM
dUpjUm5uZ2QxNURCdGNjWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2RsDANBgkqhkiG9w0BAQsFAAOC
AQEAoIDYVkHSOClrNCCbcf4SUmykejaF/Ks7PD/rkd/J1ZPItqYEtZqUoNHCy2Ym
6J8MSF9GJpij0XS+/HpvhIRt6jDwm9rfhLTxMSPL3k22gbjmhAX8PMzhoohGUJT9
XOTXSy6SLWQCXmrFGBetCRih1lss8sfLa+wppjXtyWUElo280NnyWLTi8Gqxclt6
Rd06X38uoaVt9oljiew0nfWjpeTV1/Sh46RUUDzKdp8TPDuzZCS4zy/E1bh6nZTu
Jr4ky8ffRsBD4jWyn6VxZakXx9ijZG0LUru2nVcXUF1ne/C4OHbR4ohryS4LwGrW
nBz49jJ8Ge9Xyna6tnPRV7MHMw==
-----END CERTIFICATE-----