Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/BE2EynbqA1eknGJxfJG9IBoGil0.roa
File:                     BE2EynbqA1eknGJxfJG9IBoGil0.roa (raw, json)
Hash identifier:          yU2a3Wh6A3Shhrg77zAMm1OJWX7WAlGmRHDXz1lUsXI=
Subject key identifier:   04:4D:84:CA:76:EA:03:57:A4:9C:62:71:7C:91:BD:20:1A:06:8A:5D
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       01836887B80DE494F11EE94906B9E0DD6871
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/BE2EynbqA1eknGJxfJG9IBoGil0.roa
Signing time:             Fri 23 Sep 2022 04:07:48 +0000
ROA not before:           Fri 23 Sep 2022 04:07:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142019
IP address blocks:        45.93.17.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:68:87:b8:0d:e4:94:f1:1e:e9:49:06:b9:e0:dd:68:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Sep 23 04:07:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=044d84ca76ea0357a49c62717c91bd201a068a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3b:3f:4c:dd:6f:e8:b2:e5:83:6b:ef:70:e0:
                    22:bb:fe:66:f5:82:8c:b1:21:d3:df:10:08:8f:18:
                    95:37:96:c1:67:1a:b3:a8:8d:65:e7:99:7d:a8:3e:
                    ed:8f:6a:a3:a1:3b:d3:98:56:9d:ce:bc:7e:2b:65:
                    c0:e1:2a:de:3e:3f:f7:18:87:bf:f4:8e:86:15:9c:
                    53:c0:89:b6:2a:56:87:3e:b6:1d:8c:1d:77:b5:e4:
                    3f:0f:39:fb:ab:a9:d5:09:07:71:d0:ba:60:b9:97:
                    41:80:99:ea:25:fc:19:cc:7c:f0:a7:44:34:b4:4a:
                    1c:47:27:95:c1:e0:46:7a:b7:4e:c2:38:4d:2f:2d:
                    9a:d5:dc:c4:e2:78:ee:75:39:69:59:f7:4b:8c:5d:
                    29:67:b6:7e:1b:18:c2:6f:65:fb:be:e5:76:ef:c5:
                    ae:7f:ba:61:1f:b8:47:e9:8c:df:34:6d:9f:18:74:
                    bd:ad:9f:4f:09:6d:84:7e:8f:8e:76:a7:da:ea:5f:
                    bc:5e:d9:f8:c9:05:ed:f5:79:71:d0:bf:f2:10:4d:
                    ee:18:3b:a0:82:51:af:b2:ec:91:88:0c:15:38:7f:
                    89:59:c2:24:0f:29:d9:f1:d1:9b:8c:cb:d4:64:ad:
                    f6:de:28:90:00:68:f7:8b:f8:cc:87:d2:1b:74:8c:
                    0d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4D:84:CA:76:EA:03:57:A4:9C:62:71:7C:91:BD:20:1A:06:8A:5D
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/BE2EynbqA1eknGJxfJG9IBoGil0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:1c:d5:1f:0f:36:5d:af:0d:ff:82:10:5b:84:67:9b:0d:
         46:5f:e6:f2:13:75:38:28:2d:f0:b9:1e:4e:0e:21:de:f4:fb:
         ba:6b:84:07:b1:da:35:c8:86:af:4e:d5:75:07:fd:10:65:15:
         64:b3:bc:8d:7c:af:f5:c7:db:8a:57:1d:8c:f7:2e:8b:79:2b:
         11:ad:8d:54:4d:78:2a:ea:2b:ef:f9:7b:84:a4:92:62:a5:f4:
         eb:bd:8e:67:fa:5e:b2:24:4d:16:5c:ff:8b:e9:bc:16:95:4b:
         74:87:e0:11:40:82:ae:f8:4b:8a:69:67:8f:e4:29:50:d3:67:
         5f:09:d4:4d:9b:79:49:00:58:8b:3a:b7:8a:d8:7f:58:97:53:
         ca:f3:79:a2:ea:f3:67:1c:01:cf:6c:46:b4:77:91:4b:35:2a:
         e4:3c:6b:dd:ce:8d:d4:17:72:dc:fa:e8:09:d7:5b:ac:df:27:
         65:d5:c1:21:97:cf:17:2e:e4:f1:84:1d:3b:5c:d8:52:9c:b6:
         59:14:13:95:d4:90:6d:94:2f:ef:35:b5:2e:7f:bc:08:bd:63:
         67:fa:b0:b5:4e:15:6a:27:d6:d3:47:ad:e7:94:cc:31:9b:57:
         fb:c1:20:73:65:6c:47:d5:3b:57:a7:d5:b7:8d:c9:31:20:41:
         f2:33:40:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----