Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/3nPnp1FlF7D1SYFbDCTs6g96HYE.roa
File:                     3nPnp1FlF7D1SYFbDCTs6g96HYE.roa (raw, json)
Hash identifier:          YanoSWo+qi9MJGr62i5dg7w+lmeX6HecOy9AwHBLKUA=
Subject key identifier:   DE:73:E7:A7:51:65:17:B0:F5:49:81:5B:0C:24:EC:EA:0F:7A:1D:81
Certificate issuer:       /CN=f3751cf8c3a2d36c9744c96519899945ac607820
Certificate serial:       0821564E
Authority key identifier: F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/3nPnp1FlF7D1SYFbDCTs6g96HYE.roa
Signing time:             Sat 01 Jan 2022 01:55:06 +0000
ROA not before:           Sat 01 Jan 2022 01:55:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203140
IP address blocks:        45.90.2.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136402510 (0x821564e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3751cf8c3a2d36c9744c96519899945ac607820
        Validity
            Not Before: Jan  1 01:55:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=de73e7a7516517b0f549815b0c24ecea0f7a1d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f0:a5:83:69:1f:66:45:6d:df:21:11:18:7a:
                    df:6f:45:e8:d0:8a:b7:d6:9d:7c:74:f9:ad:4a:06:
                    11:8b:d8:81:ad:8b:9b:58:40:f8:24:80:01:88:85:
                    45:04:e9:97:c5:c4:63:12:5c:78:b7:f0:1a:f7:62:
                    26:b8:d0:7c:19:6a:1b:69:4b:88:62:a2:59:a4:90:
                    ab:d0:99:ed:9a:f9:9a:f8:40:6c:1a:70:c8:59:6a:
                    63:c9:04:47:d5:02:29:2c:5f:bd:e3:ba:76:8f:21:
                    63:4b:a5:7a:e2:01:97:bd:c1:87:db:62:98:75:6b:
                    d0:e3:ba:d5:fb:07:16:02:0c:f4:de:31:79:23:22:
                    5e:0c:e3:b8:6e:6e:19:51:69:cc:c1:a7:ae:8f:7b:
                    b4:05:b8:a5:d7:e1:25:9e:76:fc:26:7d:0d:97:d5:
                    6a:42:c8:35:48:68:49:d0:c1:57:26:b4:26:4e:c8:
                    c6:4a:ca:22:0f:36:e4:99:cd:1c:6a:f7:78:32:a1:
                    f8:f7:12:e8:18:92:7c:a2:76:d4:97:e4:4d:c9:37:
                    0f:87:35:ee:a2:9c:c4:9e:1b:07:a4:12:44:29:c1:
                    ab:b0:17:15:dc:eb:68:a0:2d:e6:e2:09:03:3f:bc:
                    9d:94:cd:3c:26:5c:e2:e0:48:d0:d0:17:04:c4:8c:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:73:E7:A7:51:65:17:B0:F5:49:81:5B:0C:24:EC:EA:0F:7A:1D:81
            X509v3 Authority Key Identifier:
                keyid:F3:75:1C:F8:C3:A2:D3:6C:97:44:C9:65:19:89:99:45:AC:60:78:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83Uc-MOi02yXRMllGYmZRaxgeCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/3nPnp1FlF7D1SYFbDCTs6g96HYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/08f9b4-115c-4488-b567-5cf7c0621065/1/83Uc-MOi02yXRMllGYmZRaxgeCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:72:5c:93:17:9f:67:5a:3d:af:c4:31:0a:d0:31:ba:7a:2a:
         7f:7e:65:43:48:41:ff:10:be:dc:56:ff:fe:f2:40:02:77:e1:
         2a:9c:13:e4:bd:8f:05:10:3c:48:81:19:9a:ce:e7:e8:cc:67:
         85:10:30:36:04:7e:73:1f:e6:98:4b:f8:2f:7d:5f:f5:c3:6b:
         de:67:e2:f4:24:46:2c:b8:29:f6:15:2b:f0:fa:eb:f5:2a:03:
         88:ae:f0:18:55:d5:d2:ba:62:da:3e:82:a6:c4:4e:d2:ec:fe:
         fd:0c:0f:b3:11:03:6b:11:e3:61:9e:46:0a:7e:dc:3c:e0:a6:
         42:18:53:01:e4:0c:8f:ec:b2:62:ff:61:11:58:76:12:87:30:
         63:05:58:0d:bd:75:94:d3:a5:ed:79:2e:87:95:13:11:43:03:
         25:e8:fd:1a:ee:fc:ec:3f:31:30:90:fb:2c:1a:86:fb:f5:bf:
         7e:b3:7c:28:2c:e5:c5:a2:ce:af:f4:1b:31:8a:19:af:5f:c2:
         2a:b7:9e:91:e9:20:97:8a:e7:2e:c7:24:44:d2:ae:9c:62:1e:
         78:b3:33:11:00:8e:7e:6d:a3:65:18:16:8f:eb:a3:87:e4:63:
         82:e4:2e:e9:74:63:9f:c1:41:12:7e:68:15:98:07:3d:e7:a6:
         95:56:d2:15
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECCFWTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
Mzc1MWNmOGMzYTJkMzZjOTc0NGM5NjUxOTg5OTk0NWFjNjA3ODIwMB4XDTIyMDEw
MTAxNTUwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGU3M2U3YTc1MTY1
MTdiMGY1NDk4MTViMGMyNGVjZWEwZjdhMWQ4MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL7wpYNpH2ZFbd8hERh6329F6NCKt9adfHT5rUoGEYvYga2L
m1hA+CSAAYiFRQTpl8XEYxJceLfwGvdiJrjQfBlqG2lLiGKiWaSQq9CZ7Zr5mvhA
bBpwyFlqY8kER9UCKSxfveO6do8hY0uleuIBl73Bh9timHVr0OO61fsHFgIM9N4x
eSMiXgzjuG5uGVFpzMGnro97tAW4pdfhJZ52/CZ9DZfVakLINUhoSdDBVya0Jk7I
xkrKIg825JnNHGr3eDKh+PcS6BiSfKJ21JfkTck3D4c17qKcxJ4bB6QSRCnBq7AX
FdzraKAt5uIJAz+8nZTNPCZc4uBI0NAXBMSMzaECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTec+enUWUXsPVJgVsMJOzqD3odgTAfBgNVHSMEGDAWgBTzdRz4w6LTbJdE
yWUZiZlFrGB4IDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzgzVWMtTU9pMDJ5WFJNbGxHWW1aUmF4Z2VDQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDIvMDhmOWI0LTExNWMtNDQ4OC1iNTY3LTVjZjdjMDYyMTA2NS8x
LzNuUG5wMUZsRjdEMVNZRmJEQ1RzNmc5NkhZRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDIv
MDhmOWI0LTExNWMtNDQ4OC1iNTY3LTVjZjdjMDYyMTA2NS8xLzgzVWMtTU9pMDJ5
WFJNbGxHWW1aUmF4Z2VDQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1aAjANBgkqhkiG9w0BAQsFAAOC
AQEAk3JckxefZ1o9r8QxCtAxunoqf35lQ0hB/xC+3Fb//vJAAnfhKpwT5L2PBRA8
SIEZms7n6MxnhRAwNgR+cx/mmEv4L31f9cNr3mfi9CRGLLgp9hUr8Prr9SoDiK7w
GFXV0rpi2j6CpsRO0uz+/QwPsxEDaxHjYZ5GCn7cPOCmQhhTAeQMj+yyYv9hEVh2
EocwYwVYDb11lNOl7Xkuh5UTEUMDJej9Gu787D8xMJD7LBqG+/W/frN8KCzlxaLO
r/QbMYoZr1/CKreekekgl4rnLsckRNKunGIeeLMzEQCOfm2jZRgWj+ujh+RjguQu
6XRjn8FBEn5oFZgHPeemlVbSFQ==
-----END CERTIFICATE-----