Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/aIit6oYXJ-uNi6jv5fbLKxouFig.roa
File:                     aIit6oYXJ-uNi6jv5fbLKxouFig.roa (raw, json)
Hash identifier:          aiuOg4vEpBw4DhhLl6xJjsu7hZBunKZEWKwa3wlwA7k=
Subject key identifier:   68:88:AD:EA:86:17:27:EB:8D:8B:A8:EF:E5:F6:CB:2B:1A:2E:16:28
Certificate issuer:       /CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
Certificate serial:       64820F
Authority key identifier: F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/aIit6oYXJ-uNi6jv5fbLKxouFig.roa
Signing time:             Wed 12 Jan 2022 13:37:11 +0000
ROA not before:           Wed 12 Jan 2022 13:37:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200984
IP address blocks:        45.13.80.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6586895 (0x64820f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f020cb4f9b5f79b9da6b4827bad9c54a2a80c531
        Validity
            Not Before: Jan 12 13:37:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6888adea861727eb8d8ba8efe5f6cb2b1a2e1628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2d:0e:14:13:8f:e9:fe:0d:9c:ec:58:70:0e:
                    31:cc:b6:ca:a5:3b:c7:e6:63:c0:21:19:62:05:bd:
                    86:28:ce:02:5f:53:d4:cb:cc:33:bd:82:5a:de:c8:
                    fa:5c:3e:37:7b:64:21:8d:0d:42:82:a2:fa:0c:c1:
                    a1:69:de:15:68:81:47:af:85:4c:ec:e0:88:02:ad:
                    aa:5c:d5:d3:8f:f8:94:23:cc:cd:47:cb:3b:e2:29:
                    1e:35:c9:ab:2d:e3:11:15:cf:1a:29:cd:62:91:27:
                    69:8e:58:ae:51:6a:19:dc:7d:4e:1c:22:fd:51:0d:
                    15:04:44:c0:41:e4:8c:c4:fb:a4:af:66:f6:4f:bb:
                    45:11:39:ef:41:7f:0c:18:49:cc:43:94:c8:2f:19:
                    79:8c:30:01:a6:19:e1:a8:b9:44:ca:e4:52:42:84:
                    86:87:12:05:da:50:40:24:f7:75:45:a0:be:ef:46:
                    a5:c8:df:c9:b9:dd:9b:6b:9d:bd:6b:55:3e:39:81:
                    c8:49:2e:5f:cd:a5:49:99:34:4a:f3:77:b8:e5:ca:
                    3a:50:08:cc:32:0b:26:f7:59:c0:b6:7e:eb:ae:31:
                    06:3c:d8:0e:a2:85:96:56:06:a4:3b:3a:47:65:ad:
                    cd:b7:51:18:f9:ab:cd:3e:9b:df:30:70:84:07:00:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:88:AD:EA:86:17:27:EB:8D:8B:A8:EF:E5:F6:CB:2B:1A:2E:16:28
            X509v3 Authority Key Identifier:
                keyid:F0:20:CB:4F:9B:5F:79:B9:DA:6B:48:27:BA:D9:C5:4A:2A:80:C5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8CDLT5tfebnaa0gnutnFSiqAxTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/aIit6oYXJ-uNi6jv5fbLKxouFig.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7c44c4-eccd-495c-b983-84c90bba9cd4/1/8CDLT5tfebnaa0gnutnFSiqAxTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:71:6a:7f:32:d5:37:f2:db:1a:f2:cb:c9:5a:8b:f5:32:cb:
         11:6c:94:3a:62:a7:ee:51:69:59:65:bd:f5:ba:4f:83:0f:6e:
         b7:04:2d:21:0b:49:05:97:df:5b:be:94:29:ab:30:17:c9:18:
         c8:42:b8:a1:2e:f3:eb:6d:16:f8:90:7b:28:75:47:9f:85:90:
         61:74:83:87:b1:69:9e:d5:af:30:08:59:66:0e:22:54:d3:a6:
         ec:e9:af:36:99:09:40:e5:fe:73:53:4f:0d:52:8f:a8:89:f6:
         7e:9a:62:72:16:48:8c:36:83:fb:e2:33:20:ab:81:43:2e:cb:
         51:7d:11:bf:54:67:78:cf:5a:a4:4f:1b:0a:c5:3c:3c:2f:56:
         6d:7b:81:e1:2d:c5:aa:a7:2d:00:b3:99:72:f4:95:df:1d:6e:
         93:9b:b2:57:85:20:99:25:6c:3e:29:45:73:2d:0c:44:99:2d:
         2d:2d:98:75:e7:34:b0:b6:fe:18:5b:19:d5:a2:a5:70:56:63:
         41:09:18:8b:55:37:33:06:88:b8:45:91:b1:a8:7c:fb:cc:25:
         86:bb:eb:c4:63:35:fb:81:68:df:69:63:fa:a8:ad:55:3a:43:
         07:6a:0c:a5:74:ea:a5:f5:b2:da:07:28:a9:3a:f9:df:6b:84:
         fb:1f:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----