Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/bF64EznhtwtwOHg2VyPB62tBHjc.roa
File:                     bF64EznhtwtwOHg2VyPB62tBHjc.roa (raw, json)
Hash identifier:          0S8lrTJ4vbAiwcr2Lg0KJVcsVQkJP5oLAHLktegX0FA=
Subject key identifier:   6C:5E:B8:13:39:E1:B7:0B:70:38:78:36:57:23:C1:EB:6B:41:1E:37
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       0183E5E76C353101A7C3E42540882E1EFFB4
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/bF64EznhtwtwOHg2VyPB62tBHjc.roa
Signing time:             Mon 17 Oct 2022 12:24:52 +0000
ROA not before:           Mon 17 Oct 2022 12:24:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        45.149.94.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e5:e7:6c:35:31:01:a7:c3:e4:25:40:88:2e:1e:ff:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Oct 17 12:24:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6c5eb81339e1b70b703878365723c1eb6b411e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c7:ea:11:30:62:93:85:e3:14:f4:8c:0a:ee:
                    4f:2a:4b:43:a0:aa:bd:fe:7b:13:a6:53:8a:c5:39:
                    68:cc:9e:7a:6b:1b:c4:5e:9f:62:e2:73:f3:29:b3:
                    c8:c6:4a:86:b5:2f:60:38:a8:e8:44:3f:c8:4d:b8:
                    bc:1c:15:b9:9b:92:6b:46:ba:c3:67:61:53:99:b6:
                    bc:b4:b1:b6:97:3e:9d:52:be:70:d5:b6:12:3a:94:
                    e5:63:2c:9f:f5:f3:c4:49:40:fd:33:30:28:15:dd:
                    a3:f2:cf:29:21:35:e9:e7:f0:ec:25:bf:51:65:71:
                    ad:3a:fa:e0:38:80:8e:d4:14:51:9d:d0:5f:10:33:
                    08:99:56:35:9a:5e:6b:99:3f:f3:f0:00:b9:83:54:
                    e0:4b:07:c7:bf:c6:d5:08:24:7e:c4:fe:40:a0:ad:
                    25:e9:f4:d4:51:db:ac:3b:6a:f3:42:cd:4e:e9:cf:
                    e5:43:88:39:83:8b:ac:d9:cc:4e:e9:aa:47:c9:a6:
                    77:df:ce:cd:cf:e6:c2:f4:f4:20:55:83:75:00:68:
                    47:0a:3a:d3:60:d5:a5:f2:43:fa:07:21:65:e7:0f:
                    5d:8c:49:f7:20:6b:c5:85:4f:41:cc:a8:2d:c8:49:
                    91:6e:a6:5e:c2:b5:ec:a1:29:10:7e:d2:0e:ae:8d:
                    00:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5E:B8:13:39:E1:B7:0B:70:38:78:36:57:23:C1:EB:6B:41:1E:37
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/bF64EznhtwtwOHg2VyPB62tBHjc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:f0:4e:8c:b7:3a:62:91:80:a0:c8:2f:fb:57:e7:f2:d9:80:
         e8:6a:b1:83:bf:16:e9:92:22:dc:a2:5b:50:e3:36:1d:62:d4:
         24:c7:06:ff:e5:70:7f:0a:84:bf:a1:90:35:88:ff:67:f7:0a:
         04:64:ec:9e:9a:0a:91:a3:be:86:e4:94:10:89:b5:25:6e:11:
         69:f8:56:b2:02:4f:8b:fd:f9:f6:01:dc:90:9e:3d:f7:a1:f5:
         99:8e:0b:39:84:1f:32:9e:db:47:31:a2:08:6a:12:53:02:20:
         95:65:f5:3c:2d:b6:52:b4:8f:8d:77:f2:5b:19:ab:fe:75:d8:
         e4:48:ce:aa:2d:a9:ef:23:6a:9a:e8:5a:e7:6c:a0:69:b8:73:
         32:fd:d7:9c:1b:c0:35:ab:fd:af:81:30:2c:27:7a:1e:ce:ce:
         47:78:19:1e:41:bb:c2:3c:fc:86:f5:e4:71:e3:92:78:6b:9b:
         ab:a2:71:06:3b:14:6c:04:21:91:1a:ff:19:9b:dd:df:68:42:
         e8:16:1d:e4:8a:b8:84:8a:5e:49:15:9e:50:d6:9d:b0:01:d1:
         d7:9a:79:f1:72:6e:1b:cb:a6:bb:38:66:bf:32:5b:e8:a4:ef:
         1e:cf:58:f6:f3:2d:ff:b1:d5:c0:ea:11:0f:eb:20:13:50:76:
         17:30:09:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----