Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/GmWuJ_f9erbJPjB8lIiSp1SE_UE.roa
File:                     GmWuJ_f9erbJPjB8lIiSp1SE_UE.roa (raw, json)
Hash identifier:          4ZwTOctLa0XLXkXZyTJuqmh/XH5WJsaMkrimTe63Bcc=
Subject key identifier:   1A:65:AE:27:F7:FD:7A:B6:C9:3E:30:7C:94:88:92:A7:54:84:FD:41
Certificate issuer:       /CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
Certificate serial:       7AD6
Authority key identifier: E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/GmWuJ_f9erbJPjB8lIiSp1SE_UE.roa
Signing time:             Wed 04 May 2022 08:46:39 +0000
ROA not before:           Wed 04 May 2022 08:46:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57105
IP address blocks:        91.230.206.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31446 (0x7ad6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8271443905f940b138d9d4b4a3487cbfbd021e3
        Validity
            Not Before: May  4 08:46:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1a65ae27f7fd7ab6c93e307c948892a75484fd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:e5:43:3c:d2:da:12:33:10:0b:d4:6e:77:
                    58:e7:92:1e:dc:db:72:4c:1d:d6:23:41:f9:68:e4:
                    da:11:f2:1c:5a:72:3d:9b:c1:ab:ab:64:23:77:b0:
                    bd:fc:19:04:69:c7:fc:06:e2:aa:c2:ad:82:dd:94:
                    73:da:dc:38:e2:47:37:8f:41:09:63:55:e5:8f:92:
                    f5:6f:10:1f:85:a0:e4:f1:95:58:9b:98:65:3a:dd:
                    f8:5a:7b:00:07:29:e5:82:bd:e0:59:1d:a9:df:e9:
                    db:3e:bd:56:ae:09:93:ed:00:16:e3:7c:d9:28:4e:
                    5d:a8:b8:f0:9f:fc:2e:e6:07:ab:dd:6e:df:f3:2b:
                    ef:f0:fc:51:4d:b9:10:08:ea:aa:d1:05:6f:90:05:
                    20:c7:13:03:5f:bd:1a:9f:2c:02:fc:f8:4f:aa:d8:
                    6f:3c:f3:16:e6:9a:ca:6f:6b:31:8c:d8:7f:d6:d0:
                    b0:81:9e:2e:43:99:c0:4f:9a:82:ea:3b:1d:0c:db:
                    2c:f6:0b:cd:1a:2d:ac:dd:87:f8:21:e7:88:09:6b:
                    d3:c3:8b:07:08:ea:81:ce:f3:49:7b:ff:0f:e1:0f:
                    f0:e0:82:e7:2c:4f:85:d1:79:50:23:01:6a:fc:50:
                    52:4f:76:5f:e4:9b:1e:c8:43:1c:43:a3:c8:42:86:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:65:AE:27:F7:FD:7A:B6:C9:3E:30:7C:94:88:92:A7:54:84:FD:41
            X509v3 Authority Key Identifier:
                keyid:E8:27:14:43:90:5F:94:0B:13:8D:9D:4B:4A:34:87:CB:FB:D0:21:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/GmWuJ_f9erbJPjB8lIiSp1SE_UE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e487da-4d2a-4b4d-bfe5-57c7e6199b12/1/6CcUQ5BflAsTjZ1LSjSHy_vQIeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.230.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:10:17:69:d4:8c:72:96:cc:f1:15:26:6b:56:6f:cd:45:69:
         c2:e1:12:6e:5e:09:a4:5b:34:73:5b:18:13:e4:7d:d1:e7:b1:
         2f:21:3a:b8:42:d0:ad:5c:57:d9:87:ad:3b:db:15:4e:39:42:
         6b:4a:46:7a:17:f4:7e:8e:f2:fa:bc:4a:d1:43:d7:4b:98:18:
         4e:9e:58:cb:0d:2b:ea:72:c8:23:d4:f6:2d:5f:2d:50:5d:cd:
         e1:06:10:e1:42:97:59:ff:f6:ba:07:19:a6:93:90:67:7d:93:
         df:88:32:04:e3:2e:b2:4f:b2:2b:2a:da:f1:f2:f2:07:c2:64:
         31:21:33:c3:55:6e:e7:2a:cc:5c:b7:e6:08:ea:11:b4:78:a0:
         09:9c:13:e5:83:76:c3:8d:20:30:3f:08:f5:05:93:e0:6d:b8:
         e1:02:09:c1:4b:e9:d3:eb:ea:80:fc:da:e1:00:57:01:42:bc:
         15:98:f0:73:dd:21:37:cb:89:d7:96:6a:3d:d0:4b:53:c5:c1:
         ad:af:ed:32:71:c9:69:98:c8:ce:4c:f2:33:b7:54:55:ba:53:
         fd:99:f8:eb:b6:e2:5c:5e:20:7e:a6:e4:dd:10:f1:44:da:1f:
         f9:75:1e:44:d0:e2:aa:29:37:5e:95:4d:db:7a:38:b9:50:cc:
         4f:b7:83:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----