Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/MEGUs-f9ITq-fEaXHay6_dXuq04.roa
File:                     MEGUs-f9ITq-fEaXHay6_dXuq04.roa (raw, json)
Hash identifier:          vQ6bgM7RnQvkIA8PPCA818QOdQKnVVWx/WxjD/biSBM=
Subject key identifier:   30:41:94:B3:E7:FD:21:3A:BE:7C:46:97:1D:AC:BA:FD:D5:EE:AB:4E
Certificate issuer:       /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial:       0182C52BC48EC3022316DBFDF906D9C0AE28
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/MEGUs-f9ITq-fEaXHay6_dXuq04.roa
Signing time:             Mon 22 Aug 2022 10:49:15 +0000
ROA not before:           Mon 22 Aug 2022 10:49:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212384
IP address blocks:        45.9.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c5:2b:c4:8e:c3:02:23:16:db:fd:f9:06:d9:c0:ae:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
        Validity
            Not Before: Aug 22 10:49:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=304194b3e7fd213abe7c46971dacbafdd5eeab4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:05:36:8a:7b:17:88:7e:bf:ab:02:1f:35:
                    3f:b2:fa:1e:e6:b0:f3:11:fa:bf:41:45:8e:7d:82:
                    a2:cb:38:e2:db:c1:e4:0f:94:a5:36:64:b8:68:18:
                    39:23:12:b8:35:4b:67:e2:66:6f:63:7f:e9:fa:2d:
                    b9:a6:4f:56:72:14:6d:a2:04:de:cb:ea:3f:53:f7:
                    ac:ce:1a:4d:52:0f:ec:66:92:80:0e:d4:8f:3e:63:
                    a7:17:0b:a7:01:6f:09:64:5f:bf:64:77:e9:6c:01:
                    84:f9:80:2b:7f:f0:41:2a:ec:45:d3:a0:53:cf:93:
                    7a:f1:98:e2:ff:54:2c:f1:4f:ef:83:9f:a4:46:a3:
                    3a:bd:09:e5:f6:69:f5:5c:34:d8:35:77:e1:c4:9d:
                    e1:2b:91:5b:36:21:7c:66:e4:e8:1c:31:4f:6b:b5:
                    dc:68:9a:7b:c0:b9:45:82:8d:cd:dd:38:8f:8c:1e:
                    94:f9:d0:2a:40:39:0a:2f:75:9b:06:d1:34:40:60:
                    c9:f9:78:37:89:80:06:3d:39:19:d9:0c:ed:01:d8:
                    fb:29:88:ef:a5:48:26:e1:38:a7:b4:47:61:44:60:
                    2d:b2:13:75:e9:a8:aa:7c:9f:85:51:27:5b:5a:26:
                    57:89:74:aa:a9:d1:06:79:c3:f8:d9:cc:e6:37:38:
                    f7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:41:94:B3:E7:FD:21:3A:BE:7C:46:97:1D:AC:BA:FD:D5:EE:AB:4E
            X509v3 Authority Key Identifier:
                keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/MEGUs-f9ITq-fEaXHay6_dXuq04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:26:b1:a0:ff:0a:4c:c1:d5:a4:ce:8f:0e:05:ce:33:4d:e4:
         e7:33:88:79:a3:db:3c:82:ca:71:d5:3a:32:6c:da:49:20:6e:
         3b:74:d6:d1:23:e6:aa:d4:ac:e7:ef:cb:c5:d0:c8:9b:b9:f5:
         65:e8:e6:0f:26:6a:cd:77:24:7b:83:05:4e:c6:6a:87:5c:fa:
         43:4e:ce:3b:4b:a6:a5:be:a9:53:67:e1:e0:1d:df:f3:77:11:
         10:98:fa:57:99:a2:36:ce:00:4d:c1:3a:b8:18:6d:12:91:8e:
         72:d4:db:14:40:28:e4:de:f0:94:c1:c1:a6:6e:53:1d:cb:e2:
         2e:d1:75:fb:d2:c0:52:6c:c5:5a:82:ac:e0:b3:f6:67:4f:8c:
         27:d7:57:8b:52:ae:06:3b:5d:45:26:64:7e:56:01:0f:21:35:
         58:ca:2f:e8:b7:bd:0e:c3:49:a0:ea:82:c0:da:c2:19:ea:bb:
         3e:7e:e5:b0:5e:1b:bb:4c:a8:24:0f:6c:83:5a:e2:fa:b2:d8:
         97:28:1e:48:8c:dc:9d:3d:20:51:6f:cf:e3:90:2b:9c:2f:77:
         44:12:df:19:f6:99:c7:63:ae:a8:ec:8a:be:a7:60:25:dc:14:
         af:9c:e7:60:ac:58:a8:8f:04:9b:c1:be:d6:a2:20:d6:60:31:
         34:b3:1d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----