Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/kJRxmjsYS2dM_1psdolXeNuzZCU.roa
File:                     kJRxmjsYS2dM_1psdolXeNuzZCU.roa (raw, json)
Hash identifier:          RE3KZEPC+z6kd1X+UvLlYMn8zOsSuSSxI6pVbkMp/28=
Subject key identifier:   90:94:71:9A:3B:18:4B:67:4C:FF:5A:6C:76:89:57:78:DB:B3:64:25
Certificate issuer:       /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial:       062B09EA
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/kJRxmjsYS2dM_1psdolXeNuzZCU.roa
Signing time:             Sat 01 Jan 2022 00:55:21 +0000
ROA not before:           Sat 01 Jan 2022 00:55:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43847
IP address blocks:        45.149.216.0/23 maxlen: 23
                          2a0f:7600::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103483882 (0x62b09ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
        Validity
            Not Before: Jan  1 00:55:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9094719a3b184b674cff5a6c76895778dbb36425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:57:0c:55:c9:a2:1b:57:e8:7c:41:08:94:f0:
                    1c:64:6a:81:17:71:10:74:33:f0:b6:95:87:cf:6b:
                    27:de:73:5a:c4:0c:37:be:74:b4:2b:27:67:3e:a3:
                    1f:36:4c:fd:61:a2:6d:1d:58:52:9c:56:73:9c:a2:
                    31:b2:ad:ee:8f:36:3a:45:22:4f:a4:79:40:fc:d2:
                    b5:a8:fe:a0:b4:cb:7a:04:71:ba:49:63:61:33:76:
                    4f:44:a5:e3:4f:36:09:80:31:f0:78:2d:17:b6:cc:
                    77:02:f8:3f:0c:7d:58:78:4f:22:7e:22:ca:85:79:
                    fa:0a:3b:4d:4c:fd:e7:ad:96:dc:8d:cf:7d:ca:ff:
                    af:54:5a:c1:a4:7b:aa:b6:1c:8e:a5:00:17:62:c7:
                    34:5b:be:ee:41:85:59:09:6c:84:bc:c6:3c:f5:f3:
                    47:c4:32:9f:88:26:f0:c5:f2:a7:4d:a4:6f:54:a6:
                    4a:be:88:7c:9d:cf:3d:f0:f8:61:1e:6b:45:66:94:
                    74:17:09:28:77:cf:fb:d8:c8:5e:a8:ee:ce:d7:12:
                    c7:b8:b3:43:7c:d0:aa:03:3b:cf:23:60:3d:9b:1d:
                    3e:4e:d4:3f:fb:c1:85:56:d1:bb:93:81:6c:a2:d9:
                    cc:0d:9e:dc:a4:d7:74:4c:5a:fc:e2:12:f8:c7:d9:
                    86:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:94:71:9A:3B:18:4B:67:4C:FF:5A:6C:76:89:57:78:DB:B3:64:25
            X509v3 Authority Key Identifier:
                keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/kJRxmjsYS2dM_1psdolXeNuzZCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.216.0/23
                IPv6:
                  2a0f:7600::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:41:7e:cf:e9:87:af:da:80:ff:c8:ce:a3:06:63:47:dc:6c:
         53:30:ec:7a:15:20:db:f5:63:d2:ac:71:cc:51:da:ff:41:19:
         48:20:22:74:46:36:99:cd:bf:30:f5:f4:0d:1c:97:6a:7b:c0:
         69:e1:56:da:ec:36:dd:a0:61:c2:5f:c5:57:9d:00:1b:24:c7:
         f9:7a:17:2a:60:a9:9c:56:69:da:6b:2b:19:c8:1a:65:58:87:
         a5:9f:68:2d:2a:48:ce:8a:ab:74:63:11:79:ac:3d:d9:30:34:
         f3:71:26:03:76:25:68:f6:4d:5a:6d:67:0e:5a:ba:4f:a8:3a:
         4e:72:52:86:05:88:f3:b6:a6:33:24:cf:45:32:b1:d5:1f:9b:
         9d:83:a8:0e:df:d3:02:6e:2d:04:81:7f:9b:e8:6f:94:2a:d2:
         b9:6a:f0:f9:b3:fa:cb:21:38:dc:c0:3e:9d:b5:ae:68:ad:91:
         8f:13:93:7e:00:c7:eb:e4:95:d3:87:c1:91:f7:df:a5:e4:be:
         cc:e1:cb:0c:dd:2e:8c:e4:68:99:91:9e:29:e9:be:86:61:88:
         4c:72:75:da:a8:84:1b:97:17:99:cd:41:99:f0:68:cd:26:d1:
         41:ae:6d:d7:1c:e4:58:1c:7a:ca:c9:c3:2c:e3:d3:ab:9d:8e:
         89:2d:cd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----