Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/1-pLBGUR_OlAj2goj8fl5w8ptzDI.roa
File:                     1-pLBGUR_OlAj2goj8fl5w8ptzDI.roa (raw, json)
Hash identifier:          /AQ8fredBcPV6grRA67YV49J6qFpAtIhfEb5RTyBUUU=
Subject key identifier:   FA:92:C1:19:44:7F:3A:50:23:DA:0A:23:F1:F9:79:C3:CA:6D:CC:32
Certificate issuer:       /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial:       1BE6B700
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/1-pLBGUR_OlAj2goj8fl5w8ptzDI.roa
Signing time:             Sat 01 Jan 2022 06:06:17 +0000
ROA not before:           Sat 01 Jan 2022 06:06:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49697
IP address blocks:        46.251.230.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468104960 (0x1be6b700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
        Validity
            Not Before: Jan  1 06:06:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa92c119447f3a5023da0a23f1f979c3ca6dcc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:c1:6b:6c:2a:70:76:a7:82:03:7b:25:1c:
                    6a:73:b5:df:34:76:27:ac:96:79:a4:8a:53:55:70:
                    f7:1f:d1:7c:55:a9:da:ed:d9:78:7e:fd:5a:fc:8e:
                    e0:38:b2:df:9f:ed:5c:45:c1:69:c3:30:42:7c:b0:
                    1e:d9:c1:ea:27:4e:ee:99:bb:e4:45:e3:e3:94:93:
                    e6:11:a5:cb:87:11:65:db:04:73:33:bc:f0:e3:6c:
                    ca:e7:90:fc:74:2d:e9:8c:31:86:12:97:e1:03:f4:
                    82:a2:7d:fc:dd:7b:d0:38:61:ed:32:8c:1d:d1:9f:
                    e1:ce:22:48:51:5c:4f:b3:52:d6:09:53:2d:2d:c3:
                    38:70:ad:a3:60:6d:cc:d6:24:3d:6d:71:0a:06:83:
                    02:b0:78:fd:5a:13:f7:73:5e:f3:ed:8a:04:89:e7:
                    3b:68:40:c7:15:b1:71:ec:cd:c3:b3:b2:ad:70:d0:
                    a3:08:97:01:37:11:8b:55:85:be:7f:68:77:cc:16:
                    83:f2:b8:7d:91:d2:24:96:8d:11:be:a3:12:29:a7:
                    4d:9a:52:9b:53:43:3f:f7:15:30:48:e6:ee:36:0e:
                    96:14:2b:43:5b:30:41:ff:87:d8:44:50:92:06:0c:
                    a8:fa:1c:d4:3e:7d:1e:9d:be:4c:1b:21:17:40:4b:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:92:C1:19:44:7F:3A:50:23:DA:0A:23:F1:F9:79:C3:CA:6D:CC:32
            X509v3 Authority Key Identifier:
                keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/1-pLBGUR_OlAj2goj8fl5w8ptzDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.251.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:00:ee:62:5e:b0:60:ed:ef:a3:d3:2b:4f:1b:a3:ed:d1:88:
         5b:e7:a1:fd:dd:8f:9f:0c:e7:da:41:50:74:2c:f0:a1:18:9a:
         d2:b8:39:52:e2:e5:7c:53:4a:b8:7f:4c:6e:21:fd:2c:5b:94:
         31:ff:12:6a:c7:dd:26:71:b3:05:41:a0:f5:ba:5b:6d:05:1e:
         0d:8f:59:5d:c1:e3:bc:e9:61:be:50:97:e2:0a:ae:39:3c:c9:
         06:4e:53:de:0d:af:11:76:73:79:2d:f6:d3:ad:88:8f:c2:bb:
         9d:47:9e:65:8c:94:bd:ee:1d:d7:ad:34:31:7b:41:bc:92:1e:
         24:4f:68:79:8e:80:75:0f:4e:68:b6:8a:60:c2:88:8f:34:9d:
         6d:a2:a3:1c:fb:e7:13:bd:fb:a4:e8:aa:9a:a6:40:32:93:61:
         d3:94:04:78:d3:e8:61:48:fe:78:18:eb:e0:09:06:3c:7d:e1:
         42:f8:62:e0:88:e0:0b:39:fb:75:17:10:ae:fc:26:3f:1d:cc:
         91:07:7a:11:8c:c9:c9:75:b2:6d:4f:00:a3:f0:a5:02:40:85:
         6d:57:6d:f9:81:69:b9:da:88:7a:a8:2b:f7:9e:86:9c:af:62:
         2a:2e:a6:a3:30:b7:71:6c:43:46:fd:57:8f:9d:cd:fb:e1:49:
         8e:09:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----