Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xDc1f2s8_rl2xTmr8XJrca13FOU.roa
File:                     xDc1f2s8_rl2xTmr8XJrca13FOU.roa (raw, json)
Hash identifier:          i7/qE8fjWBehVgye1uQFykmyntVWdE5WGSxcVA2fF8U=
Subject key identifier:   C4:37:35:7F:6B:3C:FE:B9:76:C5:39:AB:F1:72:6B:71:AD:77:14:E5
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       0183D03DD5B2ACA0DD4BF936CDE02539A8B5
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xDc1f2s8_rl2xTmr8XJrca13FOU.roa
Signing time:             Thu 13 Oct 2022 07:27:36 +0000
ROA not before:           Thu 13 Oct 2022 07:27:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208227
IP address blocks:        82.177.44.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d0:3d:d5:b2:ac:a0:dd:4b:f9:36:cd:e0:25:39:a8:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Oct 13 07:27:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c437357f6b3cfeb976c539abf1726b71ad7714e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:6a:e8:db:d1:6c:5f:ba:a8:66:5a:be:32:
                    dc:89:e3:bf:16:e8:03:2c:6d:b4:b3:41:63:1b:7b:
                    02:17:22:e8:3e:69:71:28:43:e4:f3:3a:8f:20:02:
                    12:93:8b:af:26:b0:e8:d1:2c:5d:08:f9:55:62:e4:
                    4a:0d:71:52:04:13:f7:75:b6:42:a3:19:89:b9:fb:
                    b2:3c:73:2b:d2:0b:04:64:f6:b6:2e:bc:b4:68:55:
                    63:1a:98:2d:d7:b5:ba:fe:0e:3f:9d:cc:5f:b9:97:
                    bc:fd:19:a8:33:0d:33:24:67:03:cb:5e:e6:f2:75:
                    e7:22:4c:36:21:ee:67:e8:d6:0f:13:2d:72:83:28:
                    85:11:f0:7d:87:e1:56:dc:fa:aa:41:c6:06:b3:d9:
                    19:30:4e:e1:d1:d0:ff:c2:77:10:1c:85:23:af:43:
                    84:45:2e:11:8c:e4:58:66:b7:19:6a:e8:cb:2c:4d:
                    40:b9:14:64:5f:da:75:a4:93:a7:cf:b2:ee:9d:b2:
                    5e:1d:fd:0a:22:5b:b3:94:aa:7a:31:f3:84:d5:1f:
                    a2:91:26:76:6b:50:7f:a8:da:01:bd:dd:12:1e:20:
                    e5:dd:89:6d:c4:af:ab:65:53:f5:0d:e0:2f:1c:d2:
                    e6:b7:19:01:bc:e7:f4:3d:6a:2a:5e:81:a9:8f:d4:
                    13:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:37:35:7F:6B:3C:FE:B9:76:C5:39:AB:F1:72:6B:71:AD:77:14:E5
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xDc1f2s8_rl2xTmr8XJrca13FOU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:74:a5:5d:c5:ca:0c:7a:b2:64:75:35:9a:f2:d1:d8:63:fb:
         99:9c:c9:5d:3a:6b:71:ef:e1:55:19:9f:32:98:9c:fc:62:e4:
         fe:53:49:7a:6d:5e:f5:ac:e1:c6:41:c8:a3:d8:12:0d:94:e1:
         68:21:9c:f9:13:3d:ed:d9:ac:21:3a:a6:32:d9:6c:56:1c:f2:
         e3:71:3b:64:d6:20:08:58:3b:03:91:00:6c:66:3a:ee:1e:66:
         74:e4:22:6c:22:0f:92:1e:9f:d0:74:2c:70:de:61:05:e9:d0:
         aa:6c:f0:58:8d:25:b4:67:3c:f2:12:ff:b8:38:f3:03:ad:5c:
         58:fc:38:a1:93:ed:dd:0a:da:e7:ae:89:d7:10:ad:24:70:f0:
         4a:04:2b:15:1b:7f:58:63:53:dc:a6:ba:bb:8f:88:9c:0a:e3:
         77:04:d2:89:1c:74:d1:32:f2:1c:e5:23:81:8e:c1:d8:3e:48:
         82:d3:0f:8f:94:10:47:0c:df:6a:61:36:75:a4:ea:fd:c9:fa:
         18:4b:5c:20:69:63:f2:76:68:64:ab:77:c9:f1:87:dd:02:79:
         2f:d3:bd:32:0c:6b:a6:62:35:cf:f2:48:22:ec:78:26:8d:81:
         88:e0:9b:67:c1:0e:f9:b7:37:0d:66:78:35:57:b9:8e:f4:b2:
         ae:a2:15:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----