Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/A8V6FaaGH0_eBRtMEcGfoytGBIQ.roa
File:                     A8V6FaaGH0_eBRtMEcGfoytGBIQ.roa (raw, json)
Hash identifier:          QGbVxyaX82VQnh+eWk30aNsJh8JDPMcIWIgowvuwKKs=
Subject key identifier:   03:C5:7A:15:A6:86:1F:4F:DE:05:1B:4C:11:C1:9F:A3:2B:46:04:84
Certificate issuer:       /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial:       067E6128
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/A8V6FaaGH0_eBRtMEcGfoytGBIQ.roa
Signing time:             Sat 01 Jan 2022 07:00:54 +0000
ROA not before:           Sat 01 Jan 2022 07:00:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211585
IP address blocks:        45.65.112.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108945704 (0x67e6128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
        Validity
            Not Before: Jan  1 07:00:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=03c57a15a6861f4fde051b4c11c19fa32b460484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1a:2a:4f:71:23:17:3a:94:af:2b:6b:51:42:
                    93:1b:10:f5:e0:3e:91:73:63:b3:40:b4:c5:68:c7:
                    da:b5:4a:ec:c4:f2:3d:4d:69:d1:d1:39:de:a6:3d:
                    6f:96:2c:ae:59:68:40:1e:22:c8:15:a4:f7:22:a2:
                    54:cb:52:34:20:33:0a:62:98:78:b3:36:a6:98:69:
                    01:98:6b:3c:53:89:67:fe:25:d9:fd:43:b9:54:21:
                    4e:fa:91:dc:42:1f:f6:f7:18:07:1f:55:73:c1:9b:
                    af:85:51:02:89:78:5c:f1:69:ad:b1:49:0f:a4:11:
                    68:80:c4:e1:58:7f:46:24:66:e5:97:94:fb:7f:7c:
                    2a:d3:fe:1a:7a:92:b4:29:49:c2:85:64:c7:14:15:
                    2d:53:41:e6:8e:e4:18:5a:1f:e7:86:23:7d:e6:18:
                    04:3a:4e:d2:d6:26:5b:36:c4:33:79:0b:87:dc:2c:
                    95:d4:eb:6f:ab:32:0c:70:47:4d:ea:4f:1b:c5:e2:
                    f7:3b:fc:49:0e:5e:c0:e4:e1:58:a6:0f:88:e7:25:
                    53:26:db:51:4b:2c:69:ef:59:b6:be:78:67:d9:61:
                    ee:20:4b:59:06:02:80:5e:b4:9e:dc:29:64:0b:a0:
                    06:7d:a2:c1:0f:01:3f:e5:9d:52:d9:15:73:6a:25:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C5:7A:15:A6:86:1F:4F:DE:05:1B:4C:11:C1:9F:A3:2B:46:04:84
            X509v3 Authority Key Identifier:
                keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/A8V6FaaGH0_eBRtMEcGfoytGBIQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:d7:f5:4f:aa:ad:46:f9:04:5e:88:70:1a:75:52:4a:7d:2b:
         83:85:e8:1a:68:ec:44:2c:1c:6f:bf:c6:de:78:19:2d:4e:1a:
         ad:f7:07:91:de:80:d9:78:b0:a8:7e:15:00:ea:36:00:a9:5c:
         12:59:41:18:61:51:df:ef:ab:c6:38:e2:5a:ec:56:fe:dd:91:
         ec:da:d7:51:6f:5a:9f:a0:2b:03:52:68:ed:d6:d2:54:d9:26:
         df:62:23:cb:d4:5f:89:19:94:bb:23:1b:48:c2:56:5c:c3:c0:
         bb:e0:fb:35:b9:63:58:c3:b4:fc:e3:54:1d:86:7c:90:8e:31:
         98:5c:87:fb:c5:86:fb:20:81:7a:b1:73:68:c2:2d:e6:f6:d2:
         bc:e0:49:7a:f4:a0:1c:66:e3:a7:1f:c4:dc:74:9c:45:99:55:
         09:57:d1:a6:80:1e:92:51:06:b6:76:33:15:66:1e:f0:e5:31:
         04:b0:a4:85:d6:16:ce:9c:e0:55:9e:89:97:4b:6b:f8:a9:43:
         7e:4a:c3:40:5d:13:6f:e8:a0:c5:b3:c1:5f:2d:8e:ba:8b:df:
         6a:3c:19:24:1c:c0:de:18:8a:46:33:d2:86:6e:60:1f:ba:77:
         41:ef:8b:b7:c4:4b:b5:d9:eb:16:04:45:d2:94:4e:e0:22:1c:
         9d:f0:b0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----