Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/5CjAQGba0UonC9-4o7-2dtyOtkk.roa
File:                     5CjAQGba0UonC9-4o7-2dtyOtkk.roa (raw, json)
Hash identifier:          lpdl8rJB3rjgTAERGlZerGAXkLGj4inXdcvHzdqQzT4=
Subject key identifier:   E4:28:C0:40:66:DA:D1:4A:27:0B:DF:B8:A3:BF:B6:76:DC:8E:B6:49
Certificate issuer:       /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial:       018543559AFDFD93C19FEEF10C80FF57CEED
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/5CjAQGba0UonC9-4o7-2dtyOtkk.roa
Signing time:             Sat 24 Dec 2022 08:52:41 +0000
ROA not before:           Sat 24 Dec 2022 08:52:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50907
IP address blocks:        212.46.55.0/24 maxlen: 24
                          2a12:bc0:5::/48 maxlen: 48
                          2a12:bc0:3::/48 maxlen: 48
                          2a12:bc0:4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:43:55:9a:fd:fd:93:c1:9f:ee:f1:0c:80:ff:57:ce:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
        Validity
            Not Before: Dec 24 08:52:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e428c04066dad14a270bdfb8a3bfb676dc8eb649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:09:22:df:be:69:39:7f:d2:f5:d9:53:f4:fa:
                    a4:ea:6e:76:6d:29:da:7d:12:a5:9d:cc:cd:6b:45:
                    1d:d3:eb:1e:63:06:96:2a:11:31:df:23:c0:88:3f:
                    81:82:4c:aa:53:a0:a8:6e:d4:3e:c5:52:da:3a:7c:
                    b6:52:35:29:b7:56:6b:1a:86:20:25:99:4d:00:f6:
                    08:f4:d4:d5:88:f3:93:77:7b:58:f1:13:07:3c:97:
                    3e:4c:e4:d2:bd:a5:f6:69:dd:f5:c9:2b:4d:74:e4:
                    82:bb:98:5c:d9:76:72:6d:25:4d:04:8c:99:a7:2a:
                    68:dd:1d:2b:e2:a1:1c:bb:96:69:68:ce:91:8e:7f:
                    70:39:54:a6:d3:ea:67:ab:fb:02:13:41:31:ab:4b:
                    48:48:2f:f9:de:84:03:23:d6:c2:84:29:1b:e5:b6:
                    a2:74:9f:ae:fd:99:97:29:ef:10:ed:ac:ca:60:84:
                    5e:01:6b:ce:2c:70:a1:78:86:8d:ad:a4:92:1f:65:
                    34:6d:5b:00:1a:e8:33:d7:f2:c1:09:84:58:42:07:
                    cf:05:28:c2:00:73:97:a2:c8:b4:53:91:89:15:48:
                    d7:db:6e:52:70:21:51:3d:1c:1d:cc:01:53:86:bb:
                    00:70:7c:06:aa:60:46:39:50:5c:f1:89:2b:89:45:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:28:C0:40:66:DA:D1:4A:27:0B:DF:B8:A3:BF:B6:76:DC:8E:B6:49
            X509v3 Authority Key Identifier:
                keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/5CjAQGba0UonC9-4o7-2dtyOtkk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.55.0/24
                IPv6:
                  2a12:bc0:3::-2a12:bc0:5:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         64:e9:c3:b3:98:ee:ca:11:34:9d:16:12:64:5b:b9:a6:3f:09:
         ac:4f:9d:ac:ec:27:82:77:be:d3:71:6a:a4:30:63:f4:43:fc:
         9a:34:e1:89:39:e7:c0:71:58:88:e9:65:83:81:14:24:f8:1e:
         15:cc:9c:b9:5d:1f:d5:39:17:6e:7e:6b:09:0b:e9:b0:68:ce:
         2b:8c:ec:88:ab:ca:49:9d:92:4a:ed:11:ce:55:63:bb:54:74:
         43:23:b0:34:6a:cd:32:2a:9e:6d:1f:0e:44:a0:b8:94:ce:f4:
         69:49:8e:18:4d:e3:22:f4:db:87:0a:b2:98:42:b0:ac:fe:1a:
         7b:42:50:83:75:dc:0a:13:1c:25:bc:91:00:cf:d5:c2:98:19:
         ca:f0:00:3e:85:5a:43:8b:76:73:d3:3c:cd:6c:c1:1d:b1:3a:
         1f:5f:6c:29:ed:78:3e:7b:e5:b4:7d:f7:1f:65:09:47:64:be:
         64:2f:8d:c9:c3:41:4f:a6:fd:2d:62:21:42:73:d9:cd:4c:d6:
         de:b8:19:99:54:ff:37:51:ec:5e:12:34:f6:a3:c8:67:30:be:
         41:a7:2d:93:7d:c3:47:69:66:69:2e:d1:c6:1a:31:bf:f1:91:
         60:60:73:30:39:f9:59:89:21:d9:29:79:c5:70:71:58:fd:86:
         8a:97:7e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----