Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UrB1fIWxOeBJ4JaQqPFkuBv3XEw.roa
File:                     UrB1fIWxOeBJ4JaQqPFkuBv3XEw.roa (raw, json)
Hash identifier:          vwAvZw3olJtIE5RuW80zNssiO+gh4dBIXZAmx4VnBZE=
Subject key identifier:   52:B0:75:7C:85:B1:39:E0:49:E0:96:90:A8:F1:64:B8:1B:F7:5C:4C
Certificate issuer:       /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial:       38E04728
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UrB1fIWxOeBJ4JaQqPFkuBv3XEw.roa
Signing time:             Sat 01 Jan 2022 07:55:20 +0000
ROA not before:           Sat 01 Jan 2022 07:55:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202189
IP address blocks:        145.15.244.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954222376 (0x38e04728)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
        Validity
            Not Before: Jan  1 07:55:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=52b0757c85b139e049e09690a8f164b81bf75c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:59:e2:3f:74:ae:a2:47:e7:a7:17:9b:16:45:
                    28:3c:e5:3d:7e:44:76:cd:da:53:da:4c:9e:71:b5:
                    2d:ec:bc:4a:98:d6:fe:2e:fd:89:bf:67:63:dd:49:
                    11:b2:8a:f6:ae:8c:f9:92:82:34:97:cf:67:79:c8:
                    66:ba:9d:9b:f3:f0:fc:d3:eb:61:1f:7a:48:ec:e8:
                    61:9c:fb:ad:19:07:d1:b3:a6:fd:19:c7:06:2a:15:
                    a7:30:1f:63:f0:43:fc:86:09:6f:9d:5a:ca:f3:df:
                    e0:d4:15:65:43:45:32:fe:2f:6f:d7:74:cb:af:e7:
                    44:02:85:04:c6:03:c2:73:6e:dc:ac:db:99:df:db:
                    68:44:81:9a:e6:4d:f0:e0:89:1a:40:80:7b:69:90:
                    fc:f3:f7:76:54:c9:90:41:b3:4a:3c:90:3f:33:82:
                    95:a5:dc:c8:29:2a:89:3c:6a:7f:f2:0c:28:8b:cf:
                    4d:09:f1:a9:c9:8f:88:c0:e0:87:e1:0a:d4:5b:a3:
                    1c:d3:1b:17:3a:4a:3f:d8:85:c1:d5:23:fc:56:88:
                    4f:81:c8:71:ee:38:44:4f:da:ec:9c:e0:73:ee:33:
                    bc:84:91:2f:fa:c2:b3:0f:30:33:33:fa:9b:c4:c3:
                    a8:4f:6c:67:aa:a5:8a:eb:7e:ae:2f:b5:84:86:4b:
                    d5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B0:75:7C:85:B1:39:E0:49:E0:96:90:A8:F1:64:B8:1B:F7:5C:4C
            X509v3 Authority Key Identifier:
                keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/UrB1fIWxOeBJ4JaQqPFkuBv3XEw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.15.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:78:d9:0b:da:24:c1:4a:23:72:5c:f5:88:78:18:d7:19:9e:
         00:8f:a5:39:b4:f5:c2:21:3b:6c:c3:d4:d1:fb:03:27:3d:a1:
         4b:50:96:e5:63:d8:eb:2c:26:57:bd:2f:3c:30:d2:6a:d4:16:
         0e:ec:c2:c0:80:8b:8e:09:e9:63:14:c1:1b:bd:2d:fd:9e:f1:
         fc:c6:30:61:02:b0:6f:f4:71:1e:c3:72:f1:2c:8f:9e:37:0d:
         66:6f:48:42:92:14:be:36:57:28:71:56:f3:38:54:69:5b:05:
         ba:af:aa:bc:9c:ec:c8:03:da:00:cc:a2:42:ba:c8:f4:b3:fc:
         69:04:08:a3:8b:74:98:37:f2:3d:7d:f9:eb:67:24:6f:85:da:
         b4:89:00:94:10:ee:32:8e:c3:31:a5:0a:c4:60:45:13:0c:19:
         65:b3:16:cc:e7:3f:b9:65:49:69:15:fd:01:2a:fd:d4:85:eb:
         19:b4:fb:a0:36:d9:c8:a8:b8:80:29:57:d7:50:b8:2f:07:cd:
         eb:64:6b:b8:dc:e0:8e:7d:19:53:c3:83:be:d5:7e:60:c9:c3:
         cb:ee:0b:47:17:02:0a:80:e9:74:9f:a4:d1:18:37:bd:76:ab:
         da:65:29:4b:e4:a0:a6:c1:f3:ec:ff:22:d9:10:8b:b4:96:1f:
         99:88:78:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----