Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/QnluGAEm25uwk1csqZXujts3F3Q.roa
File:                     QnluGAEm25uwk1csqZXujts3F3Q.roa (raw, json)
Hash identifier:          /9bAdTTJ1wvf3bTP4a3CavlwTOf/Nx5PFlFGMDaqmC0=
Subject key identifier:   42:79:6E:18:01:26:DB:9B:B0:93:57:2C:A9:95:EE:8E:DB:37:17:74
Certificate issuer:       /CN=c732c680ce512d72f15c136293b737e098ac255f
Certificate serial:       0117D0CC
Authority key identifier: C7:32:C6:80:CE:51:2D:72:F1:5C:13:62:93:B7:37:E0:98:AC:25:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xzLGgM5RLXLxXBNik7c34JisJV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/QnluGAEm25uwk1csqZXujts3F3Q.roa
Signing time:             Sat 01 Jan 2022 01:56:51 +0000
ROA not before:           Sat 01 Jan 2022 01:56:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        45.90.184.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18337996 (0x117d0cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c732c680ce512d72f15c136293b737e098ac255f
        Validity
            Not Before: Jan  1 01:56:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=42796e180126db9bb093572ca995ee8edb371774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:19:1b:70:4b:23:42:bc:2e:e8:bb:c2:37:44:
                    f3:dd:57:05:c6:09:89:97:19:9b:99:e0:9e:93:0b:
                    6b:7b:ce:93:06:22:38:bf:d8:a9:25:e2:07:0e:c2:
                    44:68:b9:79:18:99:01:aa:ef:ac:cf:82:a8:c3:fd:
                    46:c7:62:dc:8b:65:da:89:c3:31:70:44:17:b0:d1:
                    3c:75:ab:6d:35:63:d4:7e:60:cc:d6:7d:34:01:92:
                    13:92:91:59:92:04:3f:f0:d9:d6:13:ed:ca:4b:6a:
                    a2:fd:59:d7:3c:bc:aa:52:00:af:80:6d:68:69:06:
                    50:b0:9b:3a:7d:b3:2c:25:84:7b:4c:66:f0:02:f1:
                    55:06:ac:18:4e:8c:d3:ff:fd:c7:1e:8a:6d:c6:ab:
                    7c:41:8f:74:08:77:46:63:3c:df:b8:08:b8:1b:55:
                    3e:2b:40:e5:4c:9d:a9:db:09:e3:3c:87:cf:b0:40:
                    a5:03:88:aa:fd:0b:ad:31:a9:e9:55:9b:98:30:2f:
                    97:aa:60:57:70:3b:18:72:ba:38:4e:57:c2:4b:ec:
                    84:80:3a:b3:e3:79:65:eb:a4:ef:28:ce:84:ac:e3:
                    71:0d:a1:90:2f:3b:92:88:68:5c:54:83:a9:7d:88:
                    86:53:00:73:46:ac:da:0d:9f:9a:2b:7f:d0:d9:0b:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:79:6E:18:01:26:DB:9B:B0:93:57:2C:A9:95:EE:8E:DB:37:17:74
            X509v3 Authority Key Identifier:
                keyid:C7:32:C6:80:CE:51:2D:72:F1:5C:13:62:93:B7:37:E0:98:AC:25:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzLGgM5RLXLxXBNik7c34JisJV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/QnluGAEm25uwk1csqZXujts3F3Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f5a548-897f-4007-96bb-388ef9997a72/1/xzLGgM5RLXLxXBNik7c34JisJV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:1a:f3:de:20:b0:cb:4f:2b:32:93:4e:fb:6c:6e:f1:00:0b:
         d8:fa:3c:fd:21:2b:b7:ba:36:6b:30:0f:d8:44:82:dd:eb:b9:
         6b:38:2b:a0:5e:db:2a:67:4c:1d:f1:0c:22:ce:21:d7:d8:f8:
         09:95:3e:01:3e:85:93:32:b9:2a:62:41:a2:e1:92:8e:78:29:
         56:77:8c:e5:83:7e:72:d1:d2:24:20:9b:ce:e9:94:16:56:0c:
         18:49:28:c8:e1:23:18:36:b8:0c:1d:bf:15:17:90:08:c2:60:
         f7:6a:41:ff:97:c0:3d:c7:9a:89:f4:ec:e4:a8:ca:fd:81:b8:
         d3:c4:91:a3:2b:d5:7d:26:4e:9c:f2:9d:cd:13:20:9e:83:6b:
         dd:ac:6b:8f:d1:1b:1c:1e:a3:1c:59:ff:02:84:70:f3:02:d0:
         d2:5c:3d:45:45:14:f7:a2:36:5f:fa:f0:c4:0e:62:66:34:c2:
         f3:2d:88:52:b9:4c:93:25:80:74:f5:59:49:fc:c4:e8:db:09:
         70:28:4c:2c:9e:a4:6a:fb:06:45:7a:6c:a0:de:54:c2:96:c0:
         71:e2:d6:f2:b3:d2:ae:fb:83:58:24:82:c9:fa:ae:cd:91:93:
         b7:50:03:f3:71:13:2c:09:65:67:b5:a9:aa:9d:72:f5:80:42:
         29:db:26:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----