Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/VFCalyL-kHZdpBAeEcdLli2GXiw.roa
File:                     VFCalyL-kHZdpBAeEcdLli2GXiw.roa (raw, json)
Hash identifier:          LwZvoNDxp+4kZE9bwQvAd7X9IikgFoqymOoxayDKxtI=
Subject key identifier:   54:50:9A:97:22:FE:90:76:5D:A4:10:1E:11:C7:4B:96:2D:86:5E:2C
Certificate issuer:       /CN=505026928467770d1c2fa7ceba98a18c38d6556d
Certificate serial:       01843F5BE383C67716795752B612518BAE58
Authority key identifier: 50:50:26:92:84:67:77:0D:1C:2F:A7:CE:BA:98:A1:8C:38:D6:55:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UFAmkoRndw0cL6fOupihjDjWVW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/VFCalyL-kHZdpBAeEcdLli2GXiw.roa
Signing time:             Thu 03 Nov 2022 21:18:17 +0000
ROA not before:           Thu 03 Nov 2022 21:18:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60345
IP address blocks:        91.228.135.0/24 maxlen: 24
                          2a06:2c80::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:3f:5b:e3:83:c6:77:16:79:57:52:b6:12:51:8b:ae:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=505026928467770d1c2fa7ceba98a18c38d6556d
        Validity
            Not Before: Nov  3 21:18:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=54509a9722fe90765da4101e11c74b962d865e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ec:d9:e6:2e:e8:3f:34:9e:db:8b:65:d5:0f:
                    ce:93:03:17:d8:f4:f6:c6:14:9f:7a:59:36:c2:8d:
                    30:3e:19:66:d2:1e:ed:bc:1c:e1:5f:60:d0:29:fb:
                    a5:f6:11:6c:e9:aa:88:d7:d7:dd:3f:60:b4:58:c3:
                    8e:7c:92:fc:c5:67:30:67:e2:65:1a:8f:2c:05:88:
                    89:ca:d5:a7:0e:6c:96:e2:bd:77:21:5e:06:06:36:
                    12:60:17:c4:9e:6a:0a:03:3d:e2:c1:90:fc:4e:12:
                    14:b6:eb:8f:0b:6b:8d:1e:1d:63:19:8d:58:3b:da:
                    b4:8c:db:04:6f:a9:35:6f:24:a3:75:b1:38:0b:94:
                    53:41:a7:c6:ed:9d:df:3c:e9:f5:30:fe:56:50:1b:
                    67:7c:9d:be:5f:6e:26:d4:07:2d:cc:70:1b:a8:dc:
                    55:6f:8a:82:7c:5c:15:ac:98:2e:08:cf:41:04:fd:
                    44:bd:b3:c7:cd:4b:de:40:5b:38:f1:4b:b0:2d:64:
                    51:cc:0e:92:56:ee:54:0f:0b:d6:66:c2:e7:68:cd:
                    22:49:a6:b6:2e:1f:2b:e6:bc:71:73:d0:8e:2a:d9:
                    4f:92:1a:9f:52:08:41:95:20:fe:65:e4:c1:d2:20:
                    2f:01:92:73:82:66:91:1f:5e:3d:dc:28:89:e5:c1:
                    8e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:50:9A:97:22:FE:90:76:5D:A4:10:1E:11:C7:4B:96:2D:86:5E:2C
            X509v3 Authority Key Identifier:
                keyid:50:50:26:92:84:67:77:0D:1C:2F:A7:CE:BA:98:A1:8C:38:D6:55:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFAmkoRndw0cL6fOupihjDjWVW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/VFCalyL-kHZdpBAeEcdLli2GXiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f96d1-9278-4b63-8288-f77c32ff19f7/1/UFAmkoRndw0cL6fOupihjDjWVW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.228.135.0/24
                IPv6:
                  2a06:2c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:75:ae:84:bb:b9:a3:6d:be:3d:1f:b4:25:cc:3c:03:a7:8e:
         e5:03:ae:d7:3d:a3:f6:5c:a0:14:49:61:a1:e3:3d:e0:72:d6:
         b3:9c:67:1b:18:f8:cc:18:bb:23:ab:8c:89:2b:06:c2:42:de:
         76:53:18:68:58:f2:97:03:fa:b2:93:24:8b:a9:28:5c:f4:b9:
         7e:45:00:ec:a6:ad:af:e9:b7:73:6b:69:d8:2e:45:a4:7c:12:
         84:f4:64:41:e9:30:7c:54:e3:43:35:2a:74:db:5f:a2:de:e8:
         b0:94:6a:e8:80:c2:8f:dc:a8:af:0a:ef:84:a2:0c:f7:62:c9:
         f9:8c:09:80:85:4d:2b:7d:ef:97:65:28:03:fa:90:5b:69:5e:
         df:3c:8a:67:a5:58:13:dd:d6:b0:aa:db:97:be:42:3c:ab:b0:
         c1:77:40:c5:70:67:85:4b:49:66:3b:7e:b9:5f:e0:fd:eb:45:
         9c:42:0d:e0:b2:6c:96:fd:ee:64:8a:20:be:1c:53:94:32:f8:
         88:a4:6a:87:c3:25:ce:2e:64:0f:bc:1c:4d:3b:22:24:14:3e:
         64:7d:78:b6:c8:bb:7b:97:c7:8f:27:fe:40:bd:3c:8f:b0:4c:
         f4:2a:d3:f1:0e:da:b9:ee:e2:4c:b7:81:6d:af:97:42:45:e9:
         94:52:6e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----