Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/303X6V1k4U3XeVDz51HAbuByMl4.roa
File:                     303X6V1k4U3XeVDz51HAbuByMl4.roa (raw, json)
Hash identifier:          PkxNwC0dLgVcJLUPVH+a5e/nxnSATB9++PqVXBTDdrE=
Subject key identifier:   DF:4D:D7:E9:5D:64:E1:4D:D7:79:50:F3:E7:51:C0:6E:E0:72:32:5E
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       14CA0492
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/303X6V1k4U3XeVDz51HAbuByMl4.roa
Signing time:             Mon 02 May 2022 07:22:01 +0000
ROA not before:           Mon 02 May 2022 07:22:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9331
IP address blocks:        46.249.98.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348783762 (0x14ca0492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: May  2 07:22:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=df4dd7e95d64e14dd77950f3e751c06ee072325e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4b:57:e8:0f:87:c4:57:5e:5c:13:18:e5:53:
                    85:09:ba:de:c4:b6:02:6f:9e:c8:9a:48:70:ba:60:
                    23:ff:18:ee:f9:58:c5:17:17:c2:bc:fb:f8:c9:b0:
                    c2:0a:f7:73:34:08:22:96:3c:80:1f:ce:a3:0d:70:
                    0f:7a:c0:39:de:84:d0:e0:5e:15:66:bd:8a:4b:99:
                    3f:6a:fa:c0:1e:01:e3:97:99:ae:3f:fc:70:b2:89:
                    ba:de:36:a0:6e:af:f6:f4:c9:b7:8a:80:e9:07:97:
                    1a:b5:87:78:ea:f7:3a:da:0e:ac:77:5f:4f:89:8b:
                    e3:ae:d7:46:c0:a2:99:19:13:a5:a8:d3:69:b9:53:
                    b8:02:93:fb:ee:e6:fa:51:0f:5d:e7:7c:ab:3d:de:
                    6d:75:fc:f9:a6:a6:9d:15:d2:c1:17:c4:46:cf:8a:
                    05:d9:ce:21:96:ea:79:4a:3b:8a:3d:1f:a4:ee:2b:
                    72:99:2f:71:f1:84:ba:42:2e:ba:28:d0:61:ec:95:
                    27:67:83:3b:d1:bc:d7:27:76:d1:c9:b7:1f:91:81:
                    ef:b9:93:78:ba:7d:0c:51:7d:47:ec:70:20:c0:b5:
                    95:e5:2e:26:9b:2d:44:f2:d6:1c:2c:33:5f:5c:ea:
                    53:e7:f4:11:19:88:de:a6:56:ea:f6:bc:9b:7f:07:
                    c8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4D:D7:E9:5D:64:E1:4D:D7:79:50:F3:E7:51:C0:6E:E0:72:32:5E
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/303X6V1k4U3XeVDz51HAbuByMl4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.249.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:e7:1a:a8:4f:58:71:59:78:d6:43:d9:c6:17:4c:63:ae:16:
         89:ae:a8:70:97:ed:9e:24:53:db:6b:9a:4e:e7:bd:4b:67:a5:
         a7:03:c6:60:3b:07:d2:b6:1c:3e:e2:b1:e9:9f:54:ec:32:cd:
         44:66:f0:8b:03:54:12:bd:07:14:cf:c4:cb:79:9b:df:3a:2a:
         d1:aa:b4:64:9c:c4:1b:ef:1d:7a:c6:16:a0:10:74:79:66:27:
         34:b5:7b:bf:3b:8a:97:3a:83:7a:ce:1a:46:e6:f8:d1:9f:fa:
         88:0a:b0:8c:e9:d2:6d:71:dd:e8:45:5f:2a:36:21:c9:84:42:
         ed:14:00:e2:e3:ce:4d:d5:17:25:a2:f7:09:26:7b:da:a5:61:
         ec:93:80:c2:25:86:3d:ba:d2:d4:01:20:a3:aa:e2:aa:70:8b:
         4d:f6:c8:e9:e3:1c:3b:19:eb:6c:a2:a8:47:47:4f:e8:68:ee:
         94:da:ef:19:94:f5:74:37:2d:8f:67:e5:da:7e:be:75:af:62:
         00:89:50:79:0e:5b:72:6b:af:2d:ea:91:90:02:95:0b:02:34:
         83:d0:0b:8d:21:e4:33:43:d2:c3:a5:04:9a:56:8a:87:1e:86:
         3e:7a:bf:36:f1:30:95:04:a5:ad:3b:19:f7:54:b3:a1:11:a1:
         54:20:3f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----