Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/wv7qwe65yNIIe0QVL7wfF-Qjxqw.roa
File:                     wv7qwe65yNIIe0QVL7wfF-Qjxqw.roa (raw, json)
Hash identifier:          1l9VzYW8rnGUTQdBf1x8WjlYRvRFS500cqh8vtSkuKc=
Subject key identifier:   C2:FE:EA:C1:EE:B9:C8:D2:08:7B:44:15:2F:BC:1F:17:E4:23:C6:AC
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       01852515F97D869A8C885B955C82AEF5F7AF
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/wv7qwe65yNIIe0QVL7wfF-Qjxqw.roa
Signing time:             Sun 18 Dec 2022 11:54:35 +0000
ROA not before:           Sun 18 Dec 2022 11:54:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211804
IP address blocks:        45.8.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:25:15:f9:7d:86:9a:8c:88:5b:95:5c:82:ae:f5:f7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Dec 18 11:54:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2feeac1eeb9c8d2087b44152fbc1f17e423c6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ef:28:bf:17:7a:bf:c8:7e:5d:a8:89:d2:57:
                    fc:d5:18:d1:f9:8e:62:ce:76:7f:2c:18:1b:94:95:
                    9a:bc:3e:f2:63:50:20:d9:a3:3e:29:a1:38:5c:6a:
                    6b:c4:35:10:95:b9:b0:63:50:11:0d:b9:5b:0c:d9:
                    b9:79:02:34:02:a0:f2:d5:23:bd:df:ed:e0:0f:c9:
                    22:a9:39:80:90:9d:42:e9:1c:d9:e2:5c:bb:f9:fe:
                    c5:0a:84:bc:a3:f9:64:98:30:b7:5a:f3:73:68:94:
                    b2:43:a2:02:04:21:43:d2:fa:e6:c8:0f:e6:5f:60:
                    70:ee:7f:0e:e3:a8:f2:04:2f:01:99:77:55:e0:49:
                    d8:25:01:89:1f:4f:41:63:13:ad:bd:36:6a:52:25:
                    b3:32:37:72:2f:3d:1a:47:a9:3a:7d:6a:d7:d6:c2:
                    af:e4:1b:4e:0d:94:31:e2:89:f2:6e:9d:cf:6e:20:
                    5d:e0:89:f7:2d:65:2a:a5:3d:1f:2c:41:61:b4:8f:
                    f0:5c:8b:25:ca:1a:9b:86:c1:ec:11:73:f7:bb:2c:
                    ad:15:ad:30:4c:fc:e2:c5:db:90:ca:10:0c:d5:94:
                    a3:9d:d1:c3:fb:ca:14:59:2b:81:93:9e:3f:fc:e3:
                    a4:21:73:fd:bd:16:80:69:b2:ec:71:8d:7a:9e:b6:
                    1e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FE:EA:C1:EE:B9:C8:D2:08:7B:44:15:2F:BC:1F:17:E4:23:C6:AC
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/wv7qwe65yNIIe0QVL7wfF-Qjxqw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:92:e5:c5:31:c3:90:de:3d:52:0c:41:32:36:39:23:d0:07:
         01:53:56:76:de:d1:2b:4d:1e:d4:e8:a0:7a:7e:aa:1a:e2:e2:
         fe:b5:1e:0b:66:f0:4b:95:c5:fb:40:b2:0f:2d:11:65:42:1a:
         ec:80:1f:8f:b1:2b:fa:fa:c8:d5:d0:6e:a4:ad:d6:ee:c6:57:
         0d:5e:14:fc:9d:f9:85:e8:98:c4:9d:b9:af:d6:a2:0a:5a:54:
         4a:e2:14:b2:ac:fa:e1:b1:88:7f:17:1e:99:88:77:36:5f:9d:
         0a:d7:d3:53:4d:45:42:90:c2:a8:df:c8:c7:3c:fe:26:9c:79:
         93:92:a1:87:38:f3:56:d4:8c:d6:2a:f8:e9:0c:b2:e9:ff:dc:
         4e:55:ab:3b:59:cb:1d:25:95:86:a4:89:d7:4e:0f:b2:b1:22:
         c8:79:87:f3:8e:9d:84:21:6f:34:59:99:9c:c6:a0:cb:d3:c9:
         38:ad:fa:8a:41:cb:8e:6d:a2:89:c5:26:46:08:7c:39:67:c7:
         49:30:45:18:75:6e:ab:86:77:92:1f:3d:9b:39:cf:e6:ec:7d:
         72:d7:f8:0e:58:36:10:5e:6a:3a:1e:7b:fd:38:f2:18:3f:a7:
         ff:84:72:1e:fd:54:00:f1:c2:f8:52:eb:b6:81:ae:31:bf:9e:
         05:17:99:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----