Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mk9AHkKZK6DaCn0NI5avSs4SsY0.roa
File:                     mk9AHkKZK6DaCn0NI5avSs4SsY0.roa (raw, json)
Hash identifier:          YjO/mSgmWeUr9UWhio0BGhmFcclxB2aNvXFR82cXCDY=
Subject key identifier:   9A:4F:40:1E:42:99:2B:A0:DA:0A:7D:0D:23:96:AF:4A:CE:12:B1:8D
Certificate issuer:       /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial:       141568E1
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mk9AHkKZK6DaCn0NI5avSs4SsY0.roa
Signing time:             Tue 22 Feb 2022 18:38:17 +0000
ROA not before:           Tue 22 Feb 2022 18:38:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206847
IP address blocks:        45.143.252.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336947425 (0x141568e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
        Validity
            Not Before: Feb 22 18:38:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9a4f401e42992ba0da0a7d0d2396af4ace12b18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7f:b7:f9:2e:7a:42:55:05:55:24:82:0f:a0:
                    b2:51:5d:52:25:74:98:ca:48:8e:ef:02:b9:70:e5:
                    37:20:e2:49:08:2a:27:f2:2c:d6:c6:83:35:af:ab:
                    1d:96:5c:38:41:9c:59:0b:72:74:76:c0:23:10:09:
                    c8:9d:c4:53:37:c8:ac:48:fc:7e:bf:0a:52:40:ef:
                    da:8a:8f:45:3d:3c:dc:c7:27:16:bd:63:8c:eb:34:
                    59:09:16:b3:05:b4:d1:d5:cb:a6:f0:22:e5:4f:45:
                    4b:f0:8b:53:3a:8e:7a:ba:76:ab:de:33:7c:96:79:
                    c8:2a:5a:93:e7:2a:9c:54:f0:ed:b5:7b:81:d6:5e:
                    94:a0:90:72:20:77:36:a0:b6:4b:e9:7b:81:db:b8:
                    01:92:e6:0c:8f:c9:6e:fb:6a:40:5c:5f:67:bd:7a:
                    c2:ba:52:92:32:6a:54:b7:98:4f:e2:bd:0d:eb:f7:
                    50:76:8a:f6:cc:1c:1c:19:02:18:e3:d4:60:b7:66:
                    63:fa:ee:9b:c5:d0:2a:63:0d:d0:7d:ff:be:f9:f3:
                    1f:b9:78:9d:01:ba:30:7d:af:26:06:03:e7:77:25:
                    fc:0c:3b:ba:32:77:81:f0:38:e7:8b:51:4d:1b:e6:
                    a1:e5:d6:21:dd:b2:85:52:4b:69:16:d8:51:ac:ff:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4F:40:1E:42:99:2B:A0:DA:0A:7D:0D:23:96:AF:4A:CE:12:B1:8D
            X509v3 Authority Key Identifier:
                keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/mk9AHkKZK6DaCn0NI5avSs4SsY0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:48:b1:56:ce:d1:95:13:b1:e6:a8:20:03:3e:dd:13:82:a8:
         8a:0f:f1:e5:ce:37:1f:46:ce:5e:59:3f:f8:7c:d0:b0:8a:50:
         0e:db:15:d1:93:fe:ff:f6:7d:22:68:d8:62:e0:15:3a:4a:ae:
         f7:f9:1b:e5:60:bb:e8:5d:3c:f1:1c:f5:be:2d:5c:ab:5b:29:
         34:a1:6c:7c:7a:c2:85:94:fd:9d:1d:30:33:da:24:ae:3c:c8:
         44:b3:9b:1e:8b:c7:1a:d8:4f:0b:95:73:92:cd:07:7b:5e:7a:
         01:5b:1f:e8:3e:53:68:b4:96:00:03:a5:21:89:78:7c:96:83:
         29:4b:4b:9d:64:4c:f0:1d:1e:ac:4f:1c:6d:56:ed:cf:4b:a9:
         3e:bc:b3:b8:71:92:a3:cd:e2:3a:06:a6:d8:25:6e:e7:7f:c8:
         7a:96:6c:04:ce:2b:cb:16:b2:05:b7:47:e3:76:69:52:b4:69:
         dc:19:54:fe:9c:db:41:1b:be:ae:cb:55:ac:a1:dc:05:8c:8f:
         9e:30:45:51:dc:96:27:e4:09:9f:bb:e8:18:58:d1:f3:86:e6:
         da:ee:08:0a:70:0d:23:ae:d8:ea:46:73:97:39:01:30:53:fe:
         6c:bb:9a:19:ea:05:8b:34:7c:32:ca:1d:bf:5a:87:e3:43:7d:
         4e:78:01:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----