Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/U-49FPD35swPr0J2oi8LfYnJVtg.roa
File:                     U-49FPD35swPr0J2oi8LfYnJVtg.roa (raw, json)
Hash identifier:          yLgMvsvPd5kRtrRop0pLAztEViy5rXkpkqdQ5PwUjCk=
Subject key identifier:   53:EE:3D:14:F0:F7:E6:CC:0F:AF:42:76:A2:2F:0B:7D:89:C9:56:D8
Certificate issuer:       /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial:       07BF20DF
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/U-49FPD35swPr0J2oi8LfYnJVtg.roa
Signing time:             Sat 01 Jan 2022 01:58:39 +0000
ROA not before:           Sat 01 Jan 2022 01:58:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        45.136.240.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129966303 (0x7bf20df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
        Validity
            Not Before: Jan  1 01:58:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=53ee3d14f0f7e6cc0faf4276a22f0b7d89c956d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:a5:f8:04:97:10:bc:17:36:1c:6d:a8:00:
                    a7:70:74:2a:e7:b4:70:36:94:9d:cb:e2:61:ea:44:
                    94:3b:80:09:ea:80:5e:2d:f5:85:3b:93:02:2a:f2:
                    9d:a6:41:3c:2d:90:de:96:32:f5:22:5c:67:33:47:
                    2a:5b:01:43:44:f2:dd:9b:aa:63:3c:85:49:e9:12:
                    99:1b:a5:57:dc:73:48:c1:71:53:5c:fc:ea:8f:57:
                    d0:78:b4:7b:ce:1c:3d:c8:b8:fe:c8:3a:1e:fd:2e:
                    7b:3c:f1:23:61:bd:6e:9b:21:57:ff:87:1c:27:2c:
                    4e:ad:49:95:b2:cf:2d:56:e7:20:58:95:e5:0d:11:
                    75:82:d6:92:46:34:cc:aa:11:0c:47:46:1f:71:21:
                    9f:74:91:05:c8:dc:82:9b:9b:fd:c3:30:91:ba:4f:
                    a0:14:31:27:1e:2a:48:db:c2:f5:ce:2e:cb:54:95:
                    71:02:eb:5b:a9:d3:0a:b2:a4:ce:c0:e7:c6:ba:b5:
                    86:33:94:6e:f1:bb:76:b4:7e:fe:7e:96:36:b2:4b:
                    c1:7d:54:94:ac:9a:16:12:5b:5a:af:29:68:40:4e:
                    d1:fb:88:12:34:0b:32:d3:56:5f:8f:15:7a:d3:57:
                    a0:6e:a8:a5:f3:f1:9b:cf:fa:a9:4a:3f:98:f9:55:
                    da:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EE:3D:14:F0:F7:E6:CC:0F:AF:42:76:A2:2F:0B:7D:89:C9:56:D8
            X509v3 Authority Key Identifier:
                keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/U-49FPD35swPr0J2oi8LfYnJVtg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:23:69:48:04:fe:36:65:7e:3a:64:4a:ba:c6:87:50:dc:f7:
         f2:6d:ea:21:15:03:0a:4b:54:fb:66:18:e9:ba:6e:e9:20:c1:
         b2:1b:32:a6:ca:dd:82:cf:d2:2d:fd:d1:25:c9:5b:c6:20:6b:
         3c:09:de:89:1f:a2:67:01:e3:9f:65:87:ba:60:4e:13:ae:c5:
         aa:f8:b8:fa:c2:8a:5e:ad:a0:af:b2:7d:95:d9:ef:fc:d7:bd:
         f6:23:16:1c:3e:0e:e5:48:db:77:f8:6c:d9:ae:6a:a4:54:29:
         3f:38:f2:41:e8:e2:0f:99:d5:d0:af:f7:ee:ba:a2:5f:67:04:
         3a:53:01:74:fd:5b:30:3c:75:8d:37:bc:bd:19:c7:67:36:89:
         03:7e:e0:d9:2d:7c:4e:8a:a0:01:cf:1b:e8:f8:46:68:05:bd:
         68:62:ae:96:14:5b:7c:d1:31:69:a9:2a:9c:66:77:54:83:e6:
         15:05:67:b4:58:ef:a2:af:57:f8:d7:75:e9:6a:48:b9:71:c5:
         b5:66:5c:0c:4e:a2:59:1b:64:b8:e6:42:f6:09:30:fa:a0:e8:
         35:aa:54:89:08:d8:f3:aa:b7:4b:09:86:e0:19:98:a3:88:79:
         ef:b6:5b:ec:e2:e4:b1:6f:b7:ec:51:ab:12:b7:dc:09:75:c1:
         87:59:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----