Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/QBpEGzXZ5vaw2_k4ciLe0KQAHCs.roa
File:                     QBpEGzXZ5vaw2_k4ciLe0KQAHCs.roa (raw, json)
Hash identifier:          c7Ki6nlwptxsFFLAx8+7wIWceQ3+LKPFUekqtrD+t3I=
Subject key identifier:   40:1A:44:1B:35:D9:E6:F6:B0:DB:F9:38:72:22:DE:D0:A4:00:1C:2B
Certificate issuer:       /CN=f98ef904147026acd4e9df789292196ace328ac2
Certificate serial:       07F24993
Authority key identifier: F9:8E:F9:04:14:70:26:AC:D4:E9:DF:78:92:92:19:6A:CE:32:8A:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Y75BBRwJqzU6d94kpIZas4yisI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/QBpEGzXZ5vaw2_k4ciLe0KQAHCs.roa
Signing time:             Sat 01 Jan 2022 10:55:23 +0000
ROA not before:           Sat 01 Jan 2022 10:55:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34790
IP address blocks:        45.93.112.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133319059 (0x7f24993)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98ef904147026acd4e9df789292196ace328ac2
        Validity
            Not Before: Jan  1 10:55:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=401a441b35d9e6f6b0dbf9387222ded0a4001c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:90:57:48:c2:44:35:53:e9:d6:32:2d:48:
                    23:a7:6a:cb:b1:1a:a4:e5:6a:f7:c9:bc:c7:ac:17:
                    0a:6f:6e:11:f8:3f:8f:2f:27:10:1e:fb:a2:cf:27:
                    56:b4:11:8a:56:81:db:ff:8a:4c:d3:e2:e7:2d:8b:
                    62:19:0a:08:b9:4c:92:07:62:42:fa:49:81:cf:69:
                    12:6a:75:bb:f3:42:de:84:15:9e:55:3f:07:5f:69:
                    b7:97:fc:d7:ce:22:67:5c:53:1a:03:1d:18:23:27:
                    dd:2d:ed:70:2b:24:1f:bf:79:bb:0d:ed:6d:7f:49:
                    62:fa:42:75:0e:3d:4c:b2:c6:7f:2a:49:1c:e6:6b:
                    a6:44:b1:8f:41:69:ca:42:dd:20:6e:55:61:b0:5f:
                    44:b3:f2:a0:94:21:01:36:34:c5:97:fd:5d:97:6e:
                    dd:11:ea:6f:b7:bd:69:b3:ae:89:85:ce:c9:af:8a:
                    fc:33:3b:6a:1b:17:a8:d6:9c:10:06:8a:71:c5:42:
                    43:cc:50:df:37:2f:58:c4:bd:d1:b6:16:c8:cb:ea:
                    d3:f1:ff:7b:a7:c5:07:1b:02:40:19:aa:de:d8:31:
                    06:a7:b7:6c:64:6d:cf:3b:e3:72:50:00:24:19:ea:
                    85:c1:40:51:7e:44:07:05:bb:af:dc:ae:29:e9:e1:
                    66:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1A:44:1B:35:D9:E6:F6:B0:DB:F9:38:72:22:DE:D0:A4:00:1C:2B
            X509v3 Authority Key Identifier:
                keyid:F9:8E:F9:04:14:70:26:AC:D4:E9:DF:78:92:92:19:6A:CE:32:8A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y75BBRwJqzU6d94kpIZas4yisI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/QBpEGzXZ5vaw2_k4ciLe0KQAHCs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/1-Y75BBRwJqzU6d94kpIZas4yisI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:b5:a7:1e:f9:9a:0c:93:06:6b:46:e3:2a:37:2e:94:15:e8:
         69:55:97:a2:47:f5:b8:db:63:de:1d:de:b4:5f:ef:64:47:56:
         99:3f:98:56:31:1e:ac:71:fb:cc:b2:83:9c:53:29:04:81:1e:
         01:bd:d9:8a:5e:d0:96:cd:3e:0d:a6:1b:67:d5:1a:86:18:82:
         41:0d:aa:49:ce:2d:d7:f8:a6:b4:12:7f:17:52:fa:f4:07:8d:
         4f:9c:91:15:49:b4:0e:8e:f8:02:a7:f1:f2:a6:03:4d:6b:b3:
         bd:5f:d1:12:60:f7:fd:43:26:5d:de:e1:85:4a:d2:3e:79:4c:
         9b:e4:fe:a1:eb:f1:93:67:cd:ef:17:3c:1c:44:81:23:2e:6e:
         db:ee:91:23:a7:16:4b:32:a3:fa:d5:6d:f8:39:59:d8:da:54:
         d6:0f:24:2d:ff:8c:d7:c2:61:8d:9a:6f:c1:68:29:8f:f3:92:
         c9:e0:ea:5d:37:c4:c1:55:8e:20:d7:42:a9:eb:df:11:57:a1:
         f1:0f:55:65:75:e0:9f:53:fe:9c:90:93:0f:d3:24:6f:39:b6:
         81:b8:35:a6:36:22:b4:71:e9:a3:77:63:52:d5:6f:0c:c0:88:
         7e:77:7a:0a:1a:86:a4:ad:01:a8:5f:3c:95:42:b8:46:45:c4:
         bf:5f:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----