Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/RQUrpH06M7kYIWhDVHUKUf2L2Ps.roa
File:                     RQUrpH06M7kYIWhDVHUKUf2L2Ps.roa (raw, json)
Hash identifier:          5iiBdsfFLEZ0BpLuXws9Cxp8Q4eCMOsSwKO6IZoA+Xw=
Subject key identifier:   45:05:2B:A4:7D:3A:33:B9:18:21:68:43:54:75:0A:51:FD:8B:D8:FB
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       146E93B1
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/RQUrpH06M7kYIWhDVHUKUf2L2Ps.roa
Signing time:             Thu 24 Mar 2022 19:33:05 +0000
ROA not before:           Thu 24 Mar 2022 19:33:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204868
IP address blocks:        185.145.80.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342791089 (0x146e93b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Mar 24 19:33:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=45052ba47d3a33b91821684354750a51fd8bd8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:01:b8:8e:05:ab:94:cf:2a:73:80:a4:eb:09:
                    2b:d5:28:f3:ef:eb:bc:b5:63:91:f3:ef:46:53:eb:
                    0f:92:9d:44:f1:57:1c:99:1f:6b:5e:b5:06:3a:76:
                    55:bf:98:79:2b:46:6c:f5:66:63:8d:29:31:3a:cb:
                    a7:8e:e5:da:89:0b:b9:6c:00:23:37:f8:d5:e7:1c:
                    e2:b5:c2:42:70:7a:de:25:25:c3:72:86:7c:fd:f9:
                    ab:ea:65:7f:bf:d3:0d:51:4f:7b:f4:fb:41:72:17:
                    37:62:b0:3f:e0:cb:5a:8f:d4:4e:83:36:3b:d6:0a:
                    9e:9e:a0:74:d6:da:06:f9:01:c9:45:c4:92:c7:a0:
                    e3:a9:22:8e:95:a4:1a:34:73:11:4e:89:98:52:09:
                    fc:08:69:be:5b:d2:b1:06:7b:41:f2:b2:be:16:72:
                    ca:af:df:3d:24:b7:b6:76:33:db:af:bd:eb:66:45:
                    06:45:d2:cd:53:fa:0a:64:6a:1a:78:e3:e6:b9:d6:
                    f7:b5:73:80:14:37:e2:87:c0:2e:3a:43:cc:66:e3:
                    29:a1:91:f5:54:2f:c4:92:56:7d:9f:66:26:d6:3c:
                    3e:e4:5f:e9:7b:0b:58:16:99:8d:54:6f:9d:c6:7c:
                    87:7f:c3:41:a4:23:9e:72:96:24:e9:f1:e2:31:ab:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:05:2B:A4:7D:3A:33:B9:18:21:68:43:54:75:0A:51:FD:8B:D8:FB
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/RQUrpH06M7kYIWhDVHUKUf2L2Ps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.145.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:f1:0c:13:41:fb:bb:cf:e2:41:51:70:81:1c:c9:0a:af:68:
         28:fa:75:d1:7c:6e:46:bf:43:0b:7f:82:e7:ce:38:91:09:54:
         6c:b7:d7:85:9d:59:44:8e:bf:a2:9c:fb:a5:89:b1:b6:f2:13:
         eb:33:a5:9a:8e:ed:1a:c1:a0:77:ac:ea:37:54:e8:c2:10:d1:
         6d:d5:da:e4:87:fb:aa:ae:8e:35:92:ce:63:c0:1f:da:19:71:
         45:48:2b:a9:87:95:f8:f0:9e:8a:12:b6:16:8e:7b:b7:63:e0:
         48:bc:ac:99:d7:a1:a2:00:2b:fb:d0:6b:bd:ac:18:74:f0:d2:
         3d:81:5e:64:d9:00:e0:64:1f:bd:e3:46:67:46:66:8b:ca:47:
         71:ef:c7:39:0b:e2:5f:f0:e8:0e:6c:01:42:e4:da:10:6d:63:
         7c:fe:d2:56:2a:9a:22:d3:88:78:c2:eb:94:06:e5:e8:b6:0b:
         6e:64:9c:2a:9d:b6:c4:20:6b:49:59:f8:ce:6d:b7:f8:08:b6:
         a2:d3:a8:d0:b4:25:80:ea:51:a6:85:0b:89:fc:39:cf:2e:78:
         ec:1e:ff:1b:25:2e:13:06:52:8b:5d:20:89:d7:6f:83:b7:fe:
         a2:dd:13:a5:91:75:ea:1b:f6:a5:98:1a:f7:43:60:ca:81:8d:
         8e:5a:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----