Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/ht_mNTrrPCD-nvysBvUKlBthWzw.roa
File:                     ht_mNTrrPCD-nvysBvUKlBthWzw.roa (raw, json)
Hash identifier:          tKnVrTVsE52VN4+9NhH4KVZyoW1LwycNtL/D7QiUCHs=
Subject key identifier:   86:DF:E6:35:3A:EB:3C:20:FE:9E:FC:AC:06:F5:0A:94:1B:61:5B:3C
Certificate issuer:       /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial:       0231877A
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/ht_mNTrrPCD-nvysBvUKlBthWzw.roa
Signing time:             Sat 01 Jan 2022 02:58:54 +0000
ROA not before:           Sat 01 Jan 2022 02:58:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6768
IP address blocks:        45.14.108.0/22 maxlen: 22
                          45.14.111.0/24 maxlen: 24
                          45.14.109.0/24 maxlen: 24
                          2a01:4a60::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36800378 (0x231877a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
        Validity
            Not Before: Jan  1 02:58:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=86dfe6353aeb3c20fe9efcac06f50a941b615b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:92:47:fa:dc:94:10:fb:09:3d:9d:73:b4:23:
                    41:19:62:4f:3b:4f:a3:eb:96:7c:52:71:01:c8:cc:
                    28:87:67:1b:5e:8a:10:b9:d1:06:4b:0a:00:f2:75:
                    d1:d2:e9:36:3b:c7:21:ee:f7:e3:81:47:48:6b:71:
                    db:d1:93:24:af:7e:4a:02:8b:e2:c7:8e:22:1d:16:
                    95:68:14:bf:0f:e6:35:03:03:16:6b:df:1a:91:60:
                    b4:18:93:00:20:a8:d1:c8:dc:04:a8:98:e3:32:52:
                    fa:f0:ce:49:45:7d:5e:69:52:c5:30:a4:1a:e5:1b:
                    30:08:42:cd:90:b8:ba:cb:68:ba:bb:d6:67:51:f9:
                    b5:60:d5:63:49:17:88:5c:a9:47:3b:cc:16:95:53:
                    27:77:a1:db:72:65:69:05:fa:77:46:e4:a4:fb:a0:
                    91:91:3d:86:39:26:02:ad:cd:f6:87:31:47:aa:85:
                    96:0f:02:9f:79:28:27:0e:7f:b9:09:e7:4b:d6:d1:
                    95:ac:12:8f:8b:7e:07:d2:6a:74:3b:f9:da:51:b6:
                    93:ef:0d:2d:b0:21:72:22:53:ea:5d:b2:ca:67:50:
                    be:41:3d:a4:70:19:1d:24:4e:28:d3:80:24:4f:ec:
                    82:9a:b2:05:06:2e:bf:0e:29:0e:dd:3f:38:72:67:
                    0f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DF:E6:35:3A:EB:3C:20:FE:9E:FC:AC:06:F5:0A:94:1B:61:5B:3C
            X509v3 Authority Key Identifier:
                keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/ht_mNTrrPCD-nvysBvUKlBthWzw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.14.108.0/22
                IPv6:
                  2a01:4a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:eb:0a:45:84:a0:f6:69:1d:e1:90:55:eb:b4:d7:d4:fc:c0:
         55:7a:2e:89:c7:30:01:9a:73:5a:97:4b:6b:51:65:c7:63:98:
         da:32:5a:fd:be:88:5e:ab:34:2c:c4:fa:bd:25:45:7e:bb:6c:
         0b:b6:9d:8f:a5:df:6a:20:9b:66:32:41:68:0c:53:38:91:4f:
         a5:4a:f8:e4:bb:2a:ba:7f:44:b8:07:33:56:0b:5d:13:fa:a6:
         01:8a:70:a7:0b:09:1e:0f:4f:92:00:da:ff:00:e7:80:39:41:
         45:28:76:91:f9:5e:05:82:db:f2:21:53:7d:cc:24:0a:1f:71:
         d2:5c:99:06:b9:2e:cb:ba:9a:a6:66:bb:b0:0f:08:12:94:6d:
         72:76:5b:33:6f:6b:2d:23:86:42:ab:76:10:09:38:87:58:f5:
         a3:7c:15:3c:a1:4d:25:1b:97:f2:5a:06:1c:37:22:fc:e8:05:
         b9:01:5c:e9:02:f7:f2:b5:e1:a7:62:b4:97:b6:5f:c7:0c:b8:
         4b:0b:7e:cc:63:73:b7:25:16:bf:e7:30:28:aa:93:c7:77:73:
         aa:d1:8c:32:a9:df:1f:90:e4:98:70:61:62:a4:69:fa:d3:11:
         70:da:bc:47:1b:8f:91:f7:7a:8f:e0:1c:6f:a6:7a:49:96:ce:
         2d:57:b5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----