Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/wVXJICPE3DFKaoWyMjpNQCHyU90.roa
File:                     wVXJICPE3DFKaoWyMjpNQCHyU90.roa (raw, json)
Hash identifier:          IQ8CjDPTvLtTiCsQPeNKlhRG2bcTpAjJBZb1GMQh5VU=
Subject key identifier:   C1:55:C9:20:23:C4:DC:31:4A:6A:85:B2:32:3A:4D:40:21:F2:53:DD
Certificate issuer:       /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial:       03161C3F
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/wVXJICPE3DFKaoWyMjpNQCHyU90.roa
Signing time:             Sat 28 May 2022 13:27:57 +0000
ROA not before:           Sat 28 May 2022 13:27:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51659
IP address blocks:        62.182.168.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51780671 (0x3161c3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
        Validity
            Not Before: May 28 13:27:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c155c92023c4dc314a6a85b2323a4d4021f253dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:f1:3f:1a:d4:15:ff:c5:e1:8d:3f:0a:cf:
                    92:1e:1f:d0:b0:af:a2:69:e7:72:d0:ab:6f:da:46:
                    fa:18:ef:ea:9f:d9:0d:fa:8c:1a:21:69:37:ef:44:
                    7b:20:61:89:2e:29:57:7c:96:70:c2:11:42:3d:40:
                    6c:88:b8:51:b2:22:2a:af:5e:dd:71:29:28:ff:03:
                    1a:bf:be:b0:d3:a0:95:54:bf:0e:02:3e:24:2d:ee:
                    a3:ca:d2:2b:14:3e:c3:91:2f:a4:d2:a0:4e:60:d0:
                    40:80:f6:43:12:fb:82:a2:24:ad:94:cb:f5:18:ca:
                    50:53:5b:75:ad:a6:5c:ce:fd:b9:92:04:04:76:44:
                    c3:0d:0e:27:02:63:21:30:12:df:5a:9f:7e:ba:87:
                    5c:7b:f5:7b:e8:ce:b7:46:85:5c:db:c5:93:07:a8:
                    fc:9c:eb:46:7b:a1:4d:a4:39:89:52:b2:fa:09:b9:
                    18:35:f1:67:00:7c:28:9c:a1:26:bd:ea:3e:cd:7c:
                    a5:c8:91:7c:fa:97:e1:2c:f5:5c:83:7a:c1:8b:58:
                    5d:b6:3f:d0:fd:84:f8:b9:6b:73:21:0a:de:4a:40:
                    96:88:2b:f8:02:60:e3:a0:5f:72:50:a9:dc:3f:30:
                    c3:fd:cb:05:f0:5e:64:e6:1b:99:3b:f3:88:85:47:
                    98:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:55:C9:20:23:C4:DC:31:4A:6A:85:B2:32:3A:4D:40:21:F2:53:DD
            X509v3 Authority Key Identifier:
                keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/wVXJICPE3DFKaoWyMjpNQCHyU90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.182.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:87:83:cd:e8:9a:96:86:69:cf:e1:49:ba:c6:f1:20:3d:c8:
         7e:02:83:9d:38:c5:1b:a5:52:59:53:51:ec:12:fb:92:b3:a4:
         26:bb:2f:25:89:de:20:b4:82:7d:75:32:79:d8:9b:c0:2b:23:
         b5:da:9d:f3:0c:c1:36:f4:67:47:c5:a2:5b:1a:99:4f:5b:b0:
         23:9c:a9:2a:31:65:b4:ff:ec:3a:a6:61:37:a6:25:ff:8f:37:
         86:5d:ea:28:9e:47:29:3f:88:bf:40:92:84:4d:69:75:b1:ab:
         fb:b7:f4:df:17:53:82:60:76:dc:fc:32:b4:69:ee:b3:06:ba:
         b0:7d:9e:e6:1f:a3:ec:ee:79:41:87:ba:3b:aa:2d:a8:9a:6f:
         8f:64:68:97:b2:f4:b1:7d:8f:f9:17:66:64:e0:45:e7:ed:0e:
         e5:35:3a:25:f0:21:1b:da:cd:12:cc:c4:37:75:06:05:e5:22:
         c3:f8:2d:19:bd:e9:8b:a4:c3:6a:51:09:04:06:32:5e:b1:75:
         ad:01:d9:8d:36:28:42:52:3f:ea:83:4d:e3:6c:a3:ac:98:58:
         fe:92:0a:e4:34:03:cd:b8:16:a9:21:78:66:ee:09:7d:7e:bb:
         dd:78:8e:dd:8a:25:e6:1b:9b:54:9a:5d:35:5a:48:4f:35:f7:
         30:0b:88:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----