Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/Moeljy8Sl9ItwjrDsWeHuGppr_c.roa
File:                     Moeljy8Sl9ItwjrDsWeHuGppr_c.roa (raw, json)
Hash identifier:          ozgtERBQLwQHyNbDrUDuw/V3kjAH0z8yMCILUQmeMEI=
Subject key identifier:   32:87:A5:8F:2F:12:97:D2:2D:C2:3A:C3:B1:67:87:B8:6A:69:AF:F7
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       03CA6B6B
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/Moeljy8Sl9ItwjrDsWeHuGppr_c.roa
Signing time:             Sat 01 Jan 2022 02:56:35 +0000
ROA not before:           Sat 01 Jan 2022 02:56:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51659
IP address blocks:        45.150.198.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63597419 (0x3ca6b6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Jan  1 02:56:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3287a58f2f1297d22dc23ac3b16787b86a69aff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:88:ab:58:80:08:71:6f:0d:6b:87:a7:05:
                    f0:f6:b1:6d:f5:04:f8:af:cf:18:7d:c7:e9:b9:f4:
                    2c:cb:b8:55:b6:6b:78:13:bc:f6:61:ef:8f:a5:41:
                    97:66:58:d2:29:41:40:c5:da:43:83:cd:2e:62:58:
                    2f:bb:76:5d:4d:21:ef:72:c4:c9:29:a7:c5:39:1c:
                    84:08:37:a6:bf:ef:bc:75:4d:a0:61:31:00:d6:04:
                    ff:7c:40:6b:ed:2f:b8:de:d2:b0:8b:6c:a5:64:b7:
                    09:ce:5b:32:e3:6f:54:80:4f:c6:69:14:8c:53:74:
                    49:44:e4:bd:bd:be:fa:56:1f:6e:d2:7c:e7:04:f9:
                    93:76:a8:06:28:18:79:2a:69:f9:25:e2:84:ba:e4:
                    ca:3f:07:95:4c:9a:d7:03:c4:e8:1f:d9:74:f7:99:
                    4f:93:1d:a5:8f:3a:de:fb:49:38:8c:9c:50:85:94:
                    19:5e:b1:4f:d6:8c:11:06:74:3f:5f:99:c3:fc:fb:
                    21:13:e0:d0:34:51:7c:be:03:1c:b2:81:6e:63:79:
                    0e:ae:aa:dc:ee:4d:f2:69:fd:e6:1c:77:33:5b:e2:
                    43:7e:f7:32:5f:5e:4c:9a:55:5f:37:e0:f2:a6:3a:
                    1f:53:de:b5:e1:0a:ee:7e:a2:ca:11:cf:e6:23:f7:
                    b6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:87:A5:8F:2F:12:97:D2:2D:C2:3A:C3:B1:67:87:B8:6A:69:AF:F7
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/Moeljy8Sl9ItwjrDsWeHuGppr_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:2c:b0:83:e5:40:66:3b:db:4e:06:01:1d:82:40:11:b2:39:
         a8:db:ed:3a:0f:04:cc:d2:52:f9:0d:28:87:a0:49:68:9b:ba:
         63:f9:5a:36:c3:1e:08:63:11:e6:82:30:f5:f5:e2:40:c3:1f:
         2a:af:38:89:d2:2a:38:cb:fa:ac:f3:a0:09:0e:01:ee:7e:ec:
         3b:b0:e3:66:77:40:3a:8a:e4:4b:18:f1:95:8e:21:e9:5a:a5:
         b8:c0:4f:b5:27:2d:0f:e6:b5:fd:a9:e1:09:85:bf:01:ff:c8:
         3a:74:d8:cd:11:ae:7a:a0:95:88:91:5e:d4:db:dd:c8:9b:fb:
         3b:38:a7:d7:61:c2:7f:d4:8b:02:ba:49:0a:7d:f9:6d:ec:e4:
         47:42:77:bb:e9:16:72:a0:0b:77:bb:7a:e6:43:0b:63:c1:ec:
         a4:e3:cb:7d:18:a5:5c:65:c1:bf:6b:c6:0c:0a:95:8e:c5:d2:
         b9:93:62:51:93:63:53:c9:05:3f:58:78:23:3c:da:f1:1c:c1:
         6a:18:7e:c9:31:d9:40:33:d5:8b:8e:75:57:42:93:bf:a7:fe:
         56:bb:e2:0f:8a:74:62:4f:5c:cb:50:49:7c:41:fb:a5:28:9e:
         d7:6d:43:a4:38:ab:93:2c:e5:b2:1e:6d:5d:f3:ee:bf:86:b4:
         54:6c:16:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----