Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/56j1CxOENPxio8qxK4XDVoiOVq8.roa
File:                     56j1CxOENPxio8qxK4XDVoiOVq8.roa (raw, json)
Hash identifier:          pnVTC3BcUlEWHl6Ubay++pFtBEvnEZwBOSDQUSDHxl0=
Subject key identifier:   E7:A8:F5:0B:13:84:34:FC:62:A3:CA:B1:2B:85:C3:56:88:8E:56:AF
Certificate issuer:       /CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
Certificate serial:       18F23CE3
Authority key identifier: B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/56j1CxOENPxio8qxK4XDVoiOVq8.roa
Signing time:             Sat 01 Jan 2022 05:06:36 +0000
ROA not before:           Sat 01 Jan 2022 05:06:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51224
IP address blocks:        91.216.216.0/24 maxlen: 32
                          2001:67c:254::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418528483 (0x18f23ce3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c5155db7f9859e084c2ee9bf96e8689209d3d5
        Validity
            Not Before: Jan  1 05:06:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e7a8f50b138434fc62a3cab12b85c356888e56af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:20:be:27:8a:fd:6c:39:bb:49:b1:dd:91:
                    69:73:e9:73:cf:32:cb:b7:32:f4:4c:3e:94:1c:8a:
                    57:d5:08:67:81:e6:80:00:63:74:33:f2:02:a9:ff:
                    1d:0d:f2:fa:be:15:9b:2e:a6:25:ae:5e:9d:b2:c3:
                    f5:60:62:0d:3c:c3:38:38:ba:27:88:a2:5b:fe:1a:
                    b5:bf:cd:b7:15:81:30:28:a6:b8:78:8d:fb:d2:af:
                    fa:0f:fc:4c:a3:9d:81:57:74:e0:a6:9b:69:db:44:
                    3c:56:bc:d9:da:59:53:6f:bd:d2:74:04:b6:78:9e:
                    72:40:65:e7:e6:55:c3:41:d0:17:ac:2f:15:72:c9:
                    a9:de:32:90:38:a0:82:26:07:58:6c:92:96:c1:b6:
                    c3:2d:15:e1:b6:fa:ed:d1:a8:f4:d1:8e:80:2f:e3:
                    81:95:99:50:4b:36:e3:ac:1c:57:03:29:d2:13:f4:
                    42:ba:3e:c5:7d:a8:f2:5b:82:87:69:c4:a6:49:e7:
                    df:e3:4d:c5:da:9e:81:7c:26:7b:e0:94:06:14:2a:
                    ad:bf:68:93:2f:d7:2c:7e:e3:f3:21:fd:9b:b2:57:
                    4a:92:ee:2e:0f:4e:95:8c:e8:7f:a2:5f:48:84:1a:
                    41:fc:94:d5:ae:fe:bc:02:6c:eb:b6:3d:27:3c:db:
                    ad:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A8:F5:0B:13:84:34:FC:62:A3:CA:B1:2B:85:C3:56:88:8E:56:AF
            X509v3 Authority Key Identifier:
                keyid:B8:C5:15:5D:B7:F9:85:9E:08:4C:2E:E9:BF:96:E8:68:92:09:D3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMUVXbf5hZ4ITC7pv5boaJIJ09U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/56j1CxOENPxio8qxK4XDVoiOVq8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/440132-eb5a-46df-a229-c68a68e8a234/1/uMUVXbf5hZ4ITC7pv5boaJIJ09U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.216.216.0/24
                IPv6:
                  2001:67c:254::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:ce:32:3b:69:fd:02:24:fa:f3:e9:67:c2:eb:cb:ae:c3:84:
         b5:47:e0:01:14:40:6d:0a:76:53:ee:ab:e1:10:d6:0f:de:44:
         63:bc:91:cd:fc:90:41:7d:65:7a:03:46:4c:88:92:a3:2b:46:
         3a:58:d4:82:86:33:e2:c7:dc:ce:f0:29:9e:d3:17:81:db:2f:
         ca:7e:1c:60:b9:3e:ed:b1:ae:31:6c:9a:38:9d:bc:c9:be:1e:
         b9:e4:a0:ea:7e:6a:78:af:67:85:c9:d4:99:61:fb:ac:11:1c:
         47:31:cb:74:e7:2c:9b:d9:93:91:a0:1a:f7:88:e0:ac:81:1d:
         05:5e:26:b2:fd:88:b8:1b:a8:fb:e7:05:b3:a8:65:b7:69:ca:
         31:c4:d2:eb:cb:db:64:30:1b:49:4d:cd:1b:ad:2b:a9:09:fd:
         8f:20:fe:c1:02:ab:84:d6:7e:0e:40:68:ff:e3:0b:78:c7:0c:
         10:f7:49:42:af:1b:3e:e2:c3:89:36:d3:58:94:eb:30:1f:2a:
         ba:79:4f:7e:7b:6a:85:34:38:ba:b3:cd:a7:1b:e2:0d:85:25:
         3a:52:30:41:a1:31:13:b9:27:3c:ad:21:ad:8e:8a:be:bd:30:
         5b:8f:97:a8:c2:dc:fb:02:d5:1a:90:09:9a:e0:41:47:5e:7e:
         3f:75:74:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----