Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NwL0-4zMmH7zOsQ9Yib2y3kyeFY.roa
File:                     NwL0-4zMmH7zOsQ9Yib2y3kyeFY.roa (raw, json)
Hash identifier:          6DEKeBuHv0fiiuJ7CsmSV63PFJzafnPm8yU8c0GDiuM=
Subject key identifier:   37:02:F4:FB:8C:CC:98:7E:F3:3A:C4:3D:62:26:F6:CB:79:32:78:56
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       01837A093AFF3ED8D6853361ADFCB5904B8B
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NwL0-4zMmH7zOsQ9Yib2y3kyeFY.roa
Signing time:             Mon 26 Sep 2022 13:42:48 +0000
ROA not before:           Mon 26 Sep 2022 13:42:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202469
IP address blocks:        5.180.4.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7a:09:3a:ff:3e:d8:d6:85:33:61:ad:fc:b5:90:4b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Sep 26 13:42:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3702f4fb8ccc987ef33ac43d6226f6cb79327856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:e5:a9:e7:4b:1a:66:95:04:84:5d:f0:85:
                    ef:b9:95:ee:23:5b:4e:65:b4:48:fe:5e:d5:0e:1a:
                    ec:5e:92:a4:d4:1a:cd:bc:93:4e:79:9b:3c:98:cd:
                    c9:3e:8e:36:31:1f:91:bf:47:82:b1:eb:6c:8d:5c:
                    40:41:76:dd:e1:0f:4e:96:0a:37:41:09:2f:ee:6f:
                    3e:be:db:16:86:06:0f:0e:8a:6a:24:17:38:b1:1b:
                    1a:9e:d6:45:ba:aa:12:47:b1:8e:23:a2:ad:63:9a:
                    83:0b:5e:a2:50:d2:88:80:db:e5:f8:3b:f4:46:2f:
                    51:cb:0f:9a:30:60:0e:1a:ce:a9:85:99:0f:da:60:
                    6c:ad:c9:d2:1a:37:27:d6:a9:f8:cf:4b:a1:ab:b7:
                    82:c8:25:40:38:3b:53:f2:cb:e6:36:66:1a:9f:6f:
                    de:54:7c:a1:64:45:d5:75:93:c0:7a:c4:f5:42:c5:
                    37:b8:cd:43:e0:fc:05:2c:74:d5:15:a9:e1:d3:84:
                    cf:23:d6:c5:b4:0f:91:28:2e:05:5b:8d:d4:12:c8:
                    70:8e:ee:48:f1:4b:4d:20:79:7a:4d:ad:37:51:5f:
                    11:42:89:63:96:d3:8b:3b:9e:b0:37:9a:2b:6a:ec:
                    5b:43:43:30:33:dc:cb:36:81:01:a6:d4:73:ac:65:
                    5d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:02:F4:FB:8C:CC:98:7E:F3:3A:C4:3D:62:26:F6:CB:79:32:78:56
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/NwL0-4zMmH7zOsQ9Yib2y3kyeFY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:b9:8a:c0:fa:63:5b:b9:dd:6c:a8:c5:02:21:5e:99:62:ed:
         87:2b:67:0d:60:e9:61:8d:74:f5:37:33:2f:13:53:b7:72:67:
         50:e0:98:85:b6:e2:d7:75:59:3d:e4:94:f8:b2:1e:d6:87:b6:
         cd:21:9a:83:b0:89:0a:cf:3d:7e:da:09:17:c3:ee:6b:48:74:
         3b:ea:09:fc:c0:4d:1b:a6:98:08:dc:28:04:b0:84:4d:b8:7e:
         4e:8b:5a:c8:59:f6:7b:44:ba:44:c3:da:2c:c3:b3:1a:6d:70:
         c6:39:a6:b3:c6:50:f1:e9:c1:91:48:26:13:87:39:75:e4:38:
         08:a9:e3:95:93:10:02:00:fb:90:dd:ea:56:26:a5:d0:11:7a:
         67:19:76:79:73:bd:01:84:fd:4c:92:f5:ac:2c:f6:1b:43:1d:
         69:f7:fa:74:03:0b:5c:40:cf:ff:b3:73:8e:3c:e8:13:42:54:
         f0:7c:0f:d6:b7:60:ad:4e:08:fe:88:bb:8f:82:db:b8:58:b3:
         1e:a2:f0:92:0d:f8:7f:2f:a3:ad:1a:0a:9e:ef:45:bf:6f:7b:
         f9:24:3c:76:46:b5:d1:a0:c8:cf:68:70:1d:29:a1:f4:cb:fb:
         3f:f2:88:a7:67:5c:33:0c:93:e0:39:2d:c0:2d:de:b3:e9:4a:
         2b:64:66:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----