Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/hxGtAx25ObHNr5XEmi76gKSFTfE.roa
File:                     hxGtAx25ObHNr5XEmi76gKSFTfE.roa (raw, json)
Hash identifier:          p81/vejCZpJbEv8tAh9ckFKjCPdNTjyrWDknMyOWVbw=
Subject key identifier:   87:11:AD:03:1D:B9:39:B1:CD:AF:95:C4:9A:2E:FA:80:A4:85:4D:F1
Certificate issuer:       /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial:       17EE31A8
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/hxGtAx25ObHNr5XEmi76gKSFTfE.roa
Signing time:             Wed 01 Jun 2022 13:58:21 +0000
ROA not before:           Wed 01 Jun 2022 13:58:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        45.84.242.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401486248 (0x17ee31a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Jun  1 13:58:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8711ad031db939b1cdaf95c49a2efa80a4854df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:09:d7:5e:72:82:42:01:e9:92:77:3d:81:88:
                    fe:71:99:35:3b:6d:2f:86:59:da:f2:23:0b:10:c7:
                    99:63:3f:40:c0:ee:c0:22:78:41:57:2f:45:e3:51:
                    e2:05:4d:40:cc:cf:b7:7b:05:32:c6:c2:8f:ad:6d:
                    8b:27:38:87:f8:12:c7:f5:de:b3:9e:2e:a2:49:42:
                    82:16:cc:be:cf:6c:c8:85:f3:d3:3e:7e:5a:be:af:
                    2e:24:e7:c5:b8:69:da:ec:ce:24:16:67:65:b4:c7:
                    fe:44:09:b3:b4:fe:f1:ab:72:0f:d2:01:9a:72:1a:
                    c5:4b:7c:b2:7d:36:55:93:8c:d6:57:3b:98:e9:4f:
                    16:e7:de:d5:c3:aa:c0:0d:1a:d8:14:9c:b9:34:d0:
                    a6:3d:dd:b5:9e:b9:31:4d:7a:b9:dd:95:3d:3e:5e:
                    70:95:ec:3d:4f:cc:4f:cb:f4:45:9b:78:ce:4b:58:
                    cc:69:0a:b7:bf:28:85:9d:81:c6:f4:04:be:7f:6d:
                    48:eb:04:46:9d:88:c4:5e:71:05:a0:22:97:9b:c1:
                    c7:7b:a5:64:cb:f0:78:4c:8c:bd:e0:4b:42:a9:bf:
                    f0:92:71:c2:ce:5a:b1:cb:8b:50:56:45:2f:93:db:
                    5e:7e:58:7d:c2:7c:71:37:5a:b1:2f:25:cd:94:d9:
                    ff:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:11:AD:03:1D:B9:39:B1:CD:AF:95:C4:9A:2E:FA:80:A4:85:4D:F1
            X509v3 Authority Key Identifier:
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/hxGtAx25ObHNr5XEmi76gKSFTfE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:27:5e:89:20:a9:43:21:b0:01:df:fa:43:40:62:74:65:a9:
         ef:8e:10:44:38:b8:d9:13:df:57:fe:2e:96:17:6e:62:72:fb:
         45:0e:fb:e5:f5:8e:f9:eb:c0:d7:26:6a:07:87:bc:91:fc:f2:
         73:1b:80:63:fe:3f:f0:77:e0:6a:71:c8:0c:d6:84:07:65:43:
         da:92:80:f2:bc:4b:7c:36:c5:9a:50:7c:8f:27:9f:e5:87:3c:
         59:9f:8b:a7:c9:40:c6:9c:18:5d:49:49:dd:d2:cb:70:d4:e2:
         f0:88:c0:68:e2:3b:c0:1c:48:62:f9:42:1e:59:2d:21:e8:24:
         a9:58:7f:3c:28:e9:cf:de:3d:84:2f:e5:ef:a4:81:37:46:aa:
         83:7e:37:a7:ac:4b:31:be:12:3b:5b:81:cf:3e:d2:1b:f1:10:
         39:73:b5:8a:1f:5e:01:dd:35:d4:5e:02:69:61:ed:f2:9a:a9:
         b0:37:81:bd:14:45:f0:b9:ab:69:33:da:8e:a2:df:87:09:ae:
         51:86:13:2a:af:5f:c1:61:76:e9:08:8a:5b:e2:fc:86:6f:00:
         9e:d1:33:35:4e:ab:50:dc:eb:d0:75:a0:04:ca:0e:45:12:fa:
         fc:5a:d8:74:7e:e6:40:da:ae:b0:a2:e4:00:a7:b3:3f:20:c9:
         e7:c3:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----