Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/CDgxUO0rBl9p_pKaFtjuM1h4JyA.roa
File:                     CDgxUO0rBl9p_pKaFtjuM1h4JyA.roa (raw, json)
Hash identifier:          /z/T4enjVdhrjOS1cDlqi3rQhV2nztyl78KwuF2tJ38=
Subject key identifier:   08:38:31:50:ED:2B:06:5F:69:FE:92:9A:16:D8:EE:33:58:78:27:20
Certificate issuer:       /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial:       026FCC81
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/CDgxUO0rBl9p_pKaFtjuM1h4JyA.roa
Signing time:             Fri 13 May 2022 18:26:40 +0000
ROA not before:           Fri 13 May 2022 18:26:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208661
IP address blocks:        45.90.84.0/24 maxlen: 24
                          2a0c:b6c3::/32 maxlen: 32
                          2a0c:b6c7::/32 maxlen: 32
                          2a0c:b6c5::/32 maxlen: 32
                          2a0c:b6c1::/32 maxlen: 32
                          2a0c:b6c4::/32 maxlen: 32
                          2a0c:b6c2::/32 maxlen: 32
                          2a0c:b6c0::/32 maxlen: 32
                          2a0c:b6c6::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40881281 (0x26fcc81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
        Validity
            Not Before: May 13 18:26:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=08383150ed2b065f69fe929a16d8ee3358782720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:fb:db:f2:06:1f:f1:86:66:58:a0:96:fc:
                    ab:d7:68:45:3f:6a:f8:66:7b:0d:d2:aa:dc:9b:a8:
                    d4:f7:84:1c:8e:87:61:e4:b3:ff:26:a9:3d:c1:3c:
                    84:9d:0a:12:5b:8c:d3:29:b3:80:19:8c:b5:30:66:
                    ed:73:43:69:18:1b:62:e0:f3:af:63:13:d1:d5:34:
                    ac:f8:fd:4c:55:b6:b4:d6:fe:df:c3:8f:b4:f9:17:
                    1c:17:2f:5b:00:1d:22:c2:15:e0:64:ab:a9:f2:56:
                    81:5c:ca:1a:aa:a9:60:9c:84:9f:29:7b:c4:03:a1:
                    d4:5d:2c:bc:c3:4c:07:2d:5b:8e:63:8d:7a:d6:06:
                    bc:4f:50:17:94:77:70:8f:2f:e2:b3:b5:f9:e1:e8:
                    33:24:55:9e:55:1d:e4:ff:ad:98:b2:32:55:26:bc:
                    ee:08:de:07:4d:c1:b7:e6:78:96:03:56:b4:8a:16:
                    2a:b9:bd:f2:3e:4a:54:88:3f:4c:21:e2:e5:77:c0:
                    20:b6:a0:48:f0:4b:1f:da:e2:99:15:ba:6a:6e:a1:
                    25:88:b7:57:4c:a2:0a:d1:0d:92:b1:ca:da:9e:e6:
                    7e:87:a9:29:f3:51:cd:57:18:c6:50:26:a8:29:32:
                    bf:1b:cb:c9:4f:34:36:97:c1:99:75:16:37:8e:30:
                    fc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:38:31:50:ED:2B:06:5F:69:FE:92:9A:16:D8:EE:33:58:78:27:20
            X509v3 Authority Key Identifier:
                keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/CDgxUO0rBl9p_pKaFtjuM1h4JyA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.84.0/24
                IPv6:
                  2a0c:b6c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6a:06:28:57:8c:a9:8f:06:be:46:b2:48:a4:a3:c9:fc:d6:e5:
         51:60:e1:d0:c8:dc:10:6e:e8:15:0b:7e:56:81:e0:76:58:cc:
         13:b8:f2:68:61:60:03:04:52:67:25:14:25:9e:ac:9c:82:da:
         11:d8:33:74:ba:40:c4:64:ad:0b:af:db:e4:60:2b:c9:30:22:
         ab:6c:b5:82:90:f6:44:4f:3e:a8:c1:e7:47:67:3d:00:38:a6:
         64:bc:1f:76:c0:b3:2a:eb:53:7f:0e:10:d4:6b:c8:9e:ce:86:
         38:d1:8c:ca:a2:d8:b9:0c:4c:53:1f:b2:54:36:79:6a:26:3d:
         2c:66:ad:95:62:ac:c6:57:ed:8b:25:6c:a9:9f:b1:a9:07:32:
         fa:78:a1:1e:a3:e9:0f:e3:fc:25:a0:ee:45:1e:ab:44:44:4d:
         a8:19:5e:8d:51:1b:e1:90:ea:ba:04:02:45:0b:8a:d4:e7:08:
         c7:09:1c:b4:bf:be:d1:20:62:84:0f:d3:64:13:b0:83:d7:c1:
         ae:a2:dc:ed:d7:5c:2d:b7:61:ad:46:34:e6:76:48:4f:51:a2:
         5a:7a:a6:f2:ad:c2:74:7d:c4:0b:45:71:c7:d5:af:74:e2:29:
         67:a9:c4:40:09:83:9e:eb:09:ac:96:9d:5c:be:e5:86:f7:97:
         0b:b9:f7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----