Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tb8oENzcpMjCMch4eHrtzt1Ri6Q.roa
File:                     tb8oENzcpMjCMch4eHrtzt1Ri6Q.roa (raw, json)
Hash identifier:          FAmmLW3u0M2kv5IYYvogTcQqduLbk6dSC7CJZ9/+JpQ=
Subject key identifier:   B5:BF:28:10:DC:DC:A4:C8:C2:31:C8:78:78:7A:ED:CE:DD:51:8B:A4
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       0184A0BBD97315C1ABC289A1B00577BD2652
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tb8oENzcpMjCMch4eHrtzt1Ri6Q.roa
Signing time:             Tue 22 Nov 2022 19:06:16 +0000
ROA not before:           Tue 22 Nov 2022 19:06:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134963
IP address blocks:        45.134.146.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:a0:bb:d9:73:15:c1:ab:c2:89:a1:b0:05:77:bd:26:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Nov 22 19:06:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b5bf2810dcdca4c8c231c878787aedcedd518ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:44:f5:79:d7:f9:3f:6f:27:94:e4:96:2d:56:
                    46:98:ee:6a:da:31:56:89:c0:1c:42:1b:74:c9:07:
                    ed:bd:f7:ac:40:50:43:82:62:e2:d0:17:f9:ec:53:
                    a3:36:89:f3:64:64:73:b3:60:5c:d2:5c:12:fd:9e:
                    1d:fa:e9:ce:3c:b2:17:4c:1e:34:1c:b9:04:71:22:
                    a2:5a:6e:b8:8e:d2:68:eb:82:25:70:aa:fd:22:c3:
                    2a:86:46:de:7c:2b:de:d9:ca:99:62:96:33:bd:ac:
                    14:41:e9:61:d2:5e:73:98:31:56:86:d8:0b:cd:3b:
                    ab:15:c8:4b:1c:7f:81:22:4e:bb:e4:30:74:f7:4e:
                    27:11:e3:7d:d6:b7:5e:43:ac:31:cb:f5:40:ce:6d:
                    40:46:8c:18:ca:ee:c6:49:14:8f:98:be:3d:ee:2e:
                    08:a9:16:23:57:9e:0f:14:cb:70:96:24:58:b5:d1:
                    89:57:a2:4d:ea:7c:b9:0e:cb:20:9c:1a:4b:40:08:
                    a5:70:71:88:ca:09:b7:6f:b6:57:fd:03:89:cc:cc:
                    c4:1f:ac:fc:e1:84:f8:a2:42:21:ff:f1:a8:0f:18:
                    b0:99:d7:e5:4d:13:c9:df:d0:5b:97:cf:e7:16:ab:
                    bd:4c:11:4e:24:bd:f3:63:98:18:f4:c6:bd:e8:25:
                    f5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BF:28:10:DC:DC:A4:C8:C2:31:C8:78:78:7A:ED:CE:DD:51:8B:A4
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tb8oENzcpMjCMch4eHrtzt1Ri6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:48:80:28:5c:db:7d:91:83:a6:39:df:b9:c9:b6:77:d5:91:
         e7:96:2f:b8:f6:1b:35:23:03:45:8b:62:ff:14:89:3d:a2:38:
         57:33:2c:89:9d:62:3a:c8:16:b4:7e:17:06:ba:83:61:9b:09:
         09:78:85:41:2d:30:e9:2a:38:58:48:18:d9:6f:67:d0:36:83:
         e1:9b:18:88:ed:06:58:d5:e7:09:fd:50:08:08:e0:8e:86:35:
         d0:73:20:e6:d4:3b:61:7c:51:0e:bc:43:69:03:f1:53:db:86:
         62:ef:7e:6d:6e:6a:a8:88:25:be:be:ad:ea:99:26:ba:30:71:
         6e:5c:2f:bb:c3:de:fe:b0:94:3b:71:2c:fb:30:be:8a:04:7d:
         43:c1:d2:00:df:4b:45:70:e2:f7:8f:d2:57:f5:a8:41:11:f7:
         d6:3a:41:bf:29:28:01:92:bc:88:02:38:52:09:62:44:5a:2b:
         05:17:fa:e2:f2:88:cf:82:8e:31:8e:68:ec:69:df:1f:1f:97:
         13:5a:96:fc:2e:c6:7b:54:84:53:53:9a:c3:dc:ba:6f:56:a6:
         d5:63:eb:5e:6f:f1:77:6c:29:9f:c8:06:04:0a:3b:dc:2c:cd:
         75:47:ad:f4:6f:24:c6:4d:5e:7b:f2:39:ac:86:d5:c7:ab:20:
         b6:e5:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----