Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/50e597-496c-47df-ba46-5ca8d41fe388/1/Y_ka9Yg35Uwej67STInWJwszhsc.roa
File:                     Y_ka9Yg35Uwej67STInWJwszhsc.roa (raw, json)
Hash identifier:          aMmxghcoefGaVjNHSrGKvqSh2FLNLqZt7+4ArZfqsQQ=
Subject key identifier:   63:F9:1A:F5:88:37:E5:4C:1E:8F:AE:D2:4C:89:D6:27:0B:33:86:C7
Certificate issuer:       /CN=edca1c3626528a99b5f0c006fbff33b7ce6cb1ae
Certificate serial:       0884BE87
Authority key identifier: ED:CA:1C:36:26:52:8A:99:B5:F0:C0:06:FB:FF:33:B7:CE:6C:B1:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cocNiZSipm18MAG-_8zt85ssa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/50e597-496c-47df-ba46-5ca8d41fe388/1/Y_ka9Yg35Uwej67STInWJwszhsc.roa
Signing time:             Sat 01 Jan 2022 16:05:05 +0000
ROA not before:           Sat 01 Jan 2022 16:05:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44205
IP address blocks:        45.8.120.0/22 maxlen: 24
                          2a0e:8900::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142917255 (0x884be87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edca1c3626528a99b5f0c006fbff33b7ce6cb1ae
        Validity
            Not Before: Jan  1 16:05:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63f91af58837e54c1e8faed24c89d6270b3386c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:d6:86:e6:5b:89:10:b8:0f:77:3b:b4:17:
                    34:b2:a1:ee:6f:fa:cd:5a:17:10:d9:31:b1:a4:d6:
                    30:35:72:e9:07:d6:4c:72:32:1c:47:2d:d1:ef:bb:
                    c9:f4:77:24:04:7f:0b:e8:4b:a9:7c:f9:42:fe:26:
                    1d:ca:f3:2d:34:8f:fd:08:99:25:f1:ab:a1:06:b1:
                    8d:33:0a:59:02:3d:bc:9a:5f:fa:b0:ea:7c:b6:9c:
                    ed:fd:ac:9e:33:84:c3:e5:a8:e2:eb:19:1d:c1:df:
                    81:3e:c9:b3:37:17:6c:f0:cb:9e:3a:30:01:8d:e7:
                    65:41:ec:59:94:e1:da:18:f3:10:c5:9a:c2:11:01:
                    f9:61:6c:c1:73:4e:a5:dd:69:e8:3b:89:03:c5:57:
                    01:30:34:b9:97:fa:96:a9:84:b6:c0:7a:b8:85:ca:
                    84:ef:be:ce:d2:ca:68:05:a1:c2:a7:e0:8b:10:f0:
                    83:54:2a:4d:7b:35:8a:64:fa:cf:de:a5:8d:5e:5c:
                    31:10:a6:e7:b6:b1:f8:90:7e:56:2e:a7:0f:6b:9d:
                    2c:e4:33:15:35:9d:19:f7:54:d4:98:35:3f:1c:0b:
                    ff:3e:f7:ed:25:8f:d9:c3:c9:06:c6:5c:c8:fa:e2:
                    c0:5c:6c:f8:6a:62:ce:5e:92:58:07:6e:e2:7c:be:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F9:1A:F5:88:37:E5:4C:1E:8F:AE:D2:4C:89:D6:27:0B:33:86:C7
            X509v3 Authority Key Identifier:
                keyid:ED:CA:1C:36:26:52:8A:99:B5:F0:C0:06:FB:FF:33:B7:CE:6C:B1:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cocNiZSipm18MAG-_8zt85ssa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/50e597-496c-47df-ba46-5ca8d41fe388/1/Y_ka9Yg35Uwej67STInWJwszhsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/50e597-496c-47df-ba46-5ca8d41fe388/1/7cocNiZSipm18MAG-_8zt85ssa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.120.0/22
                IPv6:
                  2a0e:8900::/29

    Signature Algorithm: sha256WithRSAEncryption
         9d:45:e9:36:90:51:ed:ea:94:30:a8:0e:cb:a6:6f:eb:59:47:
         53:ca:df:8c:02:d0:71:bb:9a:a5:17:d9:8f:68:eb:4f:2a:66:
         96:67:29:d3:37:ae:f9:b2:e5:0a:97:f9:73:2c:38:60:bf:81:
         c4:01:c2:be:84:85:fd:93:99:6c:fa:3e:0c:2a:41:e0:fb:ef:
         50:6b:6f:8b:5b:60:3f:48:ac:85:70:f7:db:fa:99:2d:43:ad:
         1d:e7:05:97:31:09:14:d2:25:91:7b:f8:27:d9:e1:00:75:9e:
         52:fd:40:d9:e7:a7:c4:13:a1:eb:70:d9:63:1e:df:12:1a:5c:
         f8:b8:b1:85:da:67:66:53:ec:29:ff:86:af:06:9d:8c:ae:a2:
         31:36:07:a4:03:fb:ed:f5:01:4d:33:d0:7e:18:d6:88:a0:c5:
         32:66:85:27:d0:19:cd:fc:b7:f4:af:5b:0e:e5:80:ce:b8:58:
         55:5f:dd:d4:50:63:f9:35:d0:e1:01:fb:f3:5e:ab:cc:1a:a1:
         4f:77:59:bb:72:cf:33:6b:09:9b:79:bd:a2:ca:4b:e0:73:3d:
         6b:8f:23:34:48:95:be:52:7f:6e:70:ca:76:d6:86:3a:66:56:
         8a:a6:cb:03:49:97:4f:01:9d:ce:e5:ab:c0:73:d7:74:b2:17:
         51:b6:23:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----