Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c88514-fad0-4d06-a138-da585e1970ed/1/RwbFopODnB9RuQGMVfAQ_-sJboQ.roa
File:                     RwbFopODnB9RuQGMVfAQ_-sJboQ.roa (raw, json)
Hash identifier:          pdmAsqqTtEIUySoz6+yHP50yMRzXkTUx9RFHKEKCelI=
Subject key identifier:   47:06:C5:A2:93:83:9C:1F:51:B9:01:8C:55:F0:10:FF:EB:09:6E:84
Certificate issuer:       /CN=d0b1bec98e79471ec0e10d1c3452067196c91c12
Certificate serial:       01B796B0
Authority key identifier: D0:B1:BE:C9:8E:79:47:1E:C0:E1:0D:1C:34:52:06:71:96:C9:1C:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0LG-yY55Rx7A4Q0cNFIGcZbJHBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/c88514-fad0-4d06-a138-da585e1970ed/1/RwbFopODnB9RuQGMVfAQ_-sJboQ.roa
Signing time:             Sat 01 Jan 2022 07:04:10 +0000
ROA not before:           Sat 01 Jan 2022 07:04:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51747
IP address blocks:        45.142.64.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28808880 (0x1b796b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0b1bec98e79471ec0e10d1c3452067196c91c12
        Validity
            Not Before: Jan  1 07:04:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4706c5a293839c1f51b9018c55f010ffeb096e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:ba:96:4e:39:47:39:45:03:7b:cb:ca:de:
                    9f:ae:b7:6b:e5:35:fc:c7:ab:f3:49:b4:bd:5b:94:
                    d3:12:98:db:58:be:33:5f:22:76:91:42:ac:d0:4b:
                    33:85:43:72:45:ac:16:16:3b:ce:69:84:ac:d3:39:
                    50:d6:1b:bf:f5:84:e9:97:01:9b:2b:43:ba:b9:c6:
                    f5:95:97:aa:5e:47:1e:e6:68:95:d2:f1:33:40:d3:
                    c3:fe:d0:87:b3:d1:b6:2e:8c:96:f1:a5:ef:bd:10:
                    1a:25:1c:d7:50:b4:bd:05:94:cf:72:8f:20:7a:63:
                    4a:fb:fe:e0:58:c5:58:bb:95:72:14:56:38:96:0a:
                    63:ea:a1:9c:16:4f:8c:28:98:40:2e:e3:4b:5f:6e:
                    37:9c:58:6c:14:1e:6c:88:04:8f:28:d8:6d:ba:18:
                    d1:4c:c2:0d:d2:81:c8:d5:d9:01:88:60:ab:2b:9d:
                    96:3c:b8:ac:8a:32:b5:69:dc:34:ab:26:3b:3d:95:
                    5c:aa:65:a5:88:f0:0e:54:d2:60:33:3c:c5:e7:d3:
                    51:f6:76:c0:5f:f1:f4:fc:a9:86:f1:47:31:80:9f:
                    c2:6d:0e:67:10:23:00:25:1e:21:c1:ca:66:ed:47:
                    19:11:21:75:dc:c8:8b:20:49:48:32:17:18:1b:3e:
                    65:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:06:C5:A2:93:83:9C:1F:51:B9:01:8C:55:F0:10:FF:EB:09:6E:84
            X509v3 Authority Key Identifier:
                keyid:D0:B1:BE:C9:8E:79:47:1E:C0:E1:0D:1C:34:52:06:71:96:C9:1C:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LG-yY55Rx7A4Q0cNFIGcZbJHBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c88514-fad0-4d06-a138-da585e1970ed/1/RwbFopODnB9RuQGMVfAQ_-sJboQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c88514-fad0-4d06-a138-da585e1970ed/1/0LG-yY55Rx7A4Q0cNFIGcZbJHBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:32:d6:86:b3:b7:e9:2a:c8:ad:8e:2a:04:7f:bf:69:0d:52:
         75:43:04:38:c5:64:a4:9d:bc:01:3b:ed:89:53:12:ab:73:92:
         d7:f7:58:44:6f:73:ba:c6:d6:94:b7:43:29:44:75:45:45:2a:
         0f:58:d3:85:cf:44:f8:b2:17:5d:2f:64:71:3f:5d:e4:0e:86:
         ff:db:3c:9e:8b:42:1c:44:a5:bf:38:68:fd:66:e2:37:f6:f2:
         fb:88:93:59:9f:4f:aa:80:ec:a3:ce:13:c1:c2:ae:1e:23:0b:
         0a:9b:5b:d3:c9:af:26:9e:70:83:10:60:69:2c:b1:f9:e0:86:
         f1:03:76:79:83:2e:26:fc:af:0d:f4:51:23:2e:8e:fb:32:86:
         5a:06:74:a0:1e:91:a7:f6:f8:c2:43:37:46:ce:76:30:2b:3e:
         80:92:fa:43:fe:04:d2:db:5e:74:70:43:84:94:07:43:53:1b:
         13:52:6a:3d:af:21:2a:77:8b:f6:ea:6f:77:4d:69:b0:84:27:
         c7:a5:ff:30:41:70:90:ab:1c:94:64:d9:e5:37:e6:bf:18:32:
         6a:dd:86:db:40:63:b6:08:8b:47:e9:f0:1e:81:1b:0f:20:d3:
         2a:98:18:18:ab:80:9e:8d:d5:8d:5d:ed:06:40:6c:7a:8c:2c:
         9e:bd:94:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----