Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/ReXu2dzK3rmZNZ-jXTPjuhNzywA.roa
File:                     ReXu2dzK3rmZNZ-jXTPjuhNzywA.roa (raw, json)
Hash identifier:          mvwlc0wC8BuLHLNXAmX6k0F9lV3TJS46/Ypo8kv/+sQ=
Subject key identifier:   45:E5:EE:D9:DC:CA:DE:B9:99:35:9F:A3:5D:33:E3:BA:13:73:CB:00
Certificate issuer:       /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial:       05AD1981
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/ReXu2dzK3rmZNZ-jXTPjuhNzywA.roa
Signing time:             Thu 30 Jun 2022 04:47:04 +0000
ROA not before:           Thu 30 Jun 2022 04:47:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44400
IP address blocks:        89.40.110.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95230337 (0x5ad1981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
        Validity
            Not Before: Jun 30 04:47:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=45e5eed9dccadeb999359fa35d33e3ba1373cb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:99:77:dc:53:a5:15:22:d1:97:08:7e:75:
                    fd:21:b5:3e:ee:a9:21:12:c0:e0:98:f1:7b:53:c1:
                    bf:7c:0a:9b:b4:cb:84:dc:66:be:98:d3:ff:af:72:
                    6d:0c:4a:f7:1b:c3:1a:61:be:eb:86:53:4c:15:de:
                    79:c0:ae:e1:81:02:5e:60:56:82:10:4f:e0:a6:94:
                    82:51:f4:1d:af:d3:fb:00:05:f3:fd:1a:26:81:d0:
                    fc:0e:d9:77:85:c4:65:1c:c8:e2:df:6f:98:4d:0b:
                    80:b6:98:79:e5:9d:7d:5b:5d:4b:23:74:63:b6:ae:
                    3c:80:bb:de:af:2d:95:d5:08:6a:e1:c9:5b:e4:88:
                    56:3d:2a:b4:c9:52:d4:a8:47:d0:05:35:98:99:0e:
                    19:f4:27:20:e4:4a:79:66:6a:f1:85:a0:f1:1e:06:
                    8d:6d:2e:cc:a6:9b:9d:34:a0:b9:6e:09:ee:66:7c:
                    8b:6e:58:65:b6:1c:10:bb:49:d5:c8:30:a3:60:8e:
                    75:b7:80:50:14:8d:41:83:35:34:b0:94:db:3c:34:
                    ca:26:d0:9e:f3:ef:52:9c:cb:5a:d5:0b:6e:35:e0:
                    b0:75:84:a7:71:ca:2f:f5:74:23:e5:d9:3a:99:0d:
                    2b:04:15:b0:a9:38:ec:52:39:d3:41:c8:ce:a8:43:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E5:EE:D9:DC:CA:DE:B9:99:35:9F:A3:5D:33:E3:BA:13:73:CB:00
            X509v3 Authority Key Identifier:
                keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/ReXu2dzK3rmZNZ-jXTPjuhNzywA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.40.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:93:f2:9f:c4:7e:1f:9d:0f:a0:f2:c4:fe:5c:1f:7b:70:2f:
         92:e2:cf:81:71:5a:74:8e:40:63:ab:82:d0:bd:20:18:c9:f4:
         ca:ca:55:66:2b:c7:8d:4b:ca:e6:11:7c:08:61:17:5a:14:8b:
         17:ac:70:78:68:36:8b:40:be:e2:40:cd:1b:8a:0c:b0:47:c5:
         bc:bf:69:c6:69:fd:09:58:ab:ca:c3:41:f7:27:18:51:7b:2c:
         a0:4d:f5:55:92:2c:66:51:6b:79:a1:6d:bd:1a:d6:93:68:28:
         7d:8a:d5:f1:8a:a3:f4:b1:8c:24:5e:bb:b8:2e:a9:c8:6f:2e:
         08:6f:7e:9d:b7:68:b7:b6:6a:1c:82:46:9a:bb:e4:6a:71:4b:
         2b:ee:6f:63:74:8d:67:f3:7d:49:65:67:8b:7f:35:89:f7:0d:
         63:9e:d5:fa:6f:49:35:e4:81:b0:8c:a6:b0:c7:4e:ac:c3:c7:
         ed:7e:e5:27:92:db:4d:66:1f:ae:8d:d1:d5:bc:06:cb:00:01:
         77:0e:9a:c7:d9:64:60:35:55:1b:76:1e:cc:81:08:16:ca:95:
         f4:40:0b:70:61:b1:b6:d4:a8:f6:96:66:12:7a:d7:6a:f6:87:
         ec:37:ed:f1:ee:d6:81:41:bd:f7:4a:9e:bd:45:39:b5:ab:ee:
         8c:60:c2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----