Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/y7_3rbRPNqtJdikYPoaBjflBtJg.roa
File:                     y7_3rbRPNqtJdikYPoaBjflBtJg.roa (raw, json)
Hash identifier:          gj5LmN9H/voAKh6KmR/HQDj5ib6sExQyjD2sEqB7WWo=
Subject key identifier:   CB:BF:F7:AD:B4:4F:36:AB:49:76:29:18:3E:86:81:8D:F9:41:B4:98
Certificate issuer:       /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial:       013EFF34
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/y7_3rbRPNqtJdikYPoaBjflBtJg.roa
Signing time:             Sat 01 Jan 2022 13:05:37 +0000
ROA not before:           Sat 01 Jan 2022 13:05:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40676
IP address blocks:        45.150.224.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20905780 (0x13eff34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
        Validity
            Not Before: Jan  1 13:05:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cbbff7adb44f36ab497629183e86818df941b498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:18:1f:d7:f9:ae:ba:c9:08:70:5f:3b:aa:
                    62:b8:4f:a9:d4:8b:48:f7:f5:28:26:94:88:75:4c:
                    8c:d6:fb:95:67:c7:fd:68:b1:0c:a3:17:e9:f8:4f:
                    6e:e3:5a:bd:89:26:cb:7a:9b:c2:44:bd:ab:29:e9:
                    f3:be:20:89:5d:ae:78:7d:c7:90:04:bd:f6:fa:69:
                    5c:b6:a1:b1:d8:e7:24:31:81:a9:ae:91:b5:52:17:
                    ff:b4:c9:3d:23:57:49:de:c7:bd:9a:2c:84:ec:7e:
                    03:b2:c0:7b:17:ac:50:d8:3a:f0:68:7a:23:4e:32:
                    a1:b7:c3:db:b3:e7:4a:1d:09:19:dc:4f:3b:29:20:
                    24:4b:26:4d:2b:51:2c:0f:b2:d7:ae:8b:b9:b8:03:
                    48:a7:d5:4c:83:92:e2:51:60:29:a5:b0:e7:17:4a:
                    50:fe:a3:7e:54:26:37:e8:c2:c4:a3:e1:bc:76:06:
                    4f:9c:b3:ef:39:15:a3:3f:c1:34:cc:55:19:61:ba:
                    09:57:2d:25:cd:0b:2e:41:09:70:7c:92:91:38:75:
                    b5:0e:c1:65:ae:f4:16:9d:3b:6d:f6:9c:d2:15:33:
                    04:5f:5b:ab:83:11:da:70:5b:c8:58:34:d6:7f:26:
                    8b:dc:b6:70:7b:b7:a2:33:2d:ae:9f:a0:74:02:fb:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BF:F7:AD:B4:4F:36:AB:49:76:29:18:3E:86:81:8D:F9:41:B4:98
            X509v3 Authority Key Identifier:
                keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/y7_3rbRPNqtJdikYPoaBjflBtJg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:49:0d:83:51:8f:72:2a:fc:4d:26:e4:ef:3f:a5:db:74:be:
         f4:6a:44:a4:e9:f5:1f:2f:a8:99:2e:b2:c7:69:8a:87:98:cd:
         2e:56:0d:bd:65:17:29:ad:6d:60:27:eb:22:e5:c9:91:da:ca:
         87:18:c9:a9:04:91:8a:af:2d:99:03:b8:58:98:32:85:d5:29:
         19:0e:2d:c5:67:76:bd:c3:20:3c:05:4e:72:6e:7c:15:4c:c2:
         3a:e0:2b:be:80:5a:e1:4d:bb:93:af:0d:c9:89:84:ef:7d:28:
         b2:2b:b0:3b:dc:01:fc:67:ec:ff:28:71:b7:2a:34:cf:e7:09:
         68:14:95:02:00:a8:fa:7c:ac:ec:05:e9:a6:e6:f6:5f:c4:67:
         f9:1e:32:e9:11:e0:b2:35:6d:3c:ea:8e:02:c2:e5:a2:48:6f:
         f2:d1:89:2f:14:8f:6d:02:43:97:6c:80:55:db:ab:b1:a6:01:
         66:84:d3:14:e2:8a:0e:46:97:de:72:96:61:6d:84:e4:be:c4:
         5f:cc:f8:48:7e:07:36:cb:74:cd:7b:14:f6:f4:9d:3a:0a:ee:
         12:a6:3a:9b:a8:ce:dc:a7:b1:95:97:1c:ce:9a:a8:55:40:22:
         29:fb:1c:ef:55:64:a2:55:02:5d:b7:d0:72:a0:25:94:eb:e6:
         2b:30:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----