Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/vnE9_WLER7whPRhKF5Qy-9KsmNo.roa
File:                     vnE9_WLER7whPRhKF5Qy-9KsmNo.roa (raw, json)
Hash identifier:          dI4ZwqSKSUfSbfq0Bh4kPRXw662k8sIJ7BLn3hygi84=
Subject key identifier:   BE:71:3D:FD:62:C4:47:BC:21:3D:18:4A:17:94:32:FB:D2:AC:98:DA
Certificate issuer:       /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial:       040D8057
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/vnE9_WLER7whPRhKF5Qy-9KsmNo.roa
Signing time:             Sat 01 Jan 2022 02:56:25 +0000
ROA not before:           Sat 01 Jan 2022 02:56:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207265
IP address blocks:        45.151.128.0/22 maxlen: 22
                          2a10:20c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67993687 (0x40d8057)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
        Validity
            Not Before: Jan  1 02:56:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be713dfd62c447bc213d184a179432fbd2ac98da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:28:d0:60:5e:29:3e:4b:dc:b8:c8:77:ef:25:
                    d0:95:d7:96:73:74:ed:c0:8c:d9:a8:18:7e:45:46:
                    4d:27:8d:60:2f:e5:1b:a9:b0:fa:cf:2f:5d:e0:53:
                    5d:f2:0e:59:c8:41:75:aa:e4:d2:be:8b:c6:ee:25:
                    52:12:dd:92:e2:ee:6b:19:8c:69:ad:92:3e:ec:a5:
                    65:b0:f6:23:61:3d:87:f5:62:81:23:3d:71:cc:b8:
                    51:a2:93:55:dd:a5:c0:39:07:f5:95:b6:48:3d:53:
                    6e:64:55:44:34:71:f5:9d:65:5e:dc:99:80:6e:c3:
                    2d:d2:9c:7a:67:b3:cd:a8:53:6b:30:95:91:71:00:
                    44:72:f6:95:50:bf:ed:0f:58:1c:13:15:29:5b:bf:
                    4b:fb:8b:16:91:12:a1:1e:44:7c:35:32:8a:c8:15:
                    a5:20:4a:56:0c:39:f1:33:5b:4d:f3:9e:ad:0a:9c:
                    fd:70:f7:ad:54:1e:da:9a:cd:78:43:93:cd:16:e1:
                    a6:a7:2e:a3:bc:5d:66:ac:44:80:6c:55:d5:a9:80:
                    60:5e:f2:0f:bd:ca:f0:c7:60:6f:c3:23:00:70:58:
                    83:95:58:8f:80:8b:78:bd:fc:ee:17:0e:16:71:5d:
                    1f:fb:55:b4:8d:5a:60:00:35:24:85:e7:41:7e:c3:
                    56:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:71:3D:FD:62:C4:47:BC:21:3D:18:4A:17:94:32:FB:D2:AC:98:DA
            X509v3 Authority Key Identifier:
                keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/vnE9_WLER7whPRhKF5Qy-9KsmNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.128.0/22
                IPv6:
                  2a10:20c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1b:04:83:fa:0a:50:93:cd:ca:bf:14:71:8d:c1:2e:b3:79:eb:
         e3:a6:e7:4a:c7:9d:d8:14:6b:c3:fa:d2:a6:0f:b7:e2:63:9a:
         d5:97:bb:73:95:a8:76:4f:a0:5f:51:68:bc:0b:ff:6f:78:fb:
         e5:3e:80:9a:75:ed:a2:38:4d:ce:38:ad:64:f4:6b:67:9e:e8:
         67:c2:98:61:5d:56:16:db:3b:a8:b5:8d:39:85:ad:c6:9f:c1:
         5d:74:d8:00:d3:0e:cf:06:cc:19:5e:60:9a:bd:55:df:ee:7a:
         c3:be:73:58:3c:98:c8:b0:d8:4e:8a:59:fe:34:d0:5a:ae:63:
         30:0c:47:5c:93:ad:5f:98:e7:07:a5:a5:25:2a:5a:5f:58:61:
         ef:9c:91:75:b8:e7:0a:c8:2a:48:c9:b4:9b:2a:5f:82:cd:f9:
         ab:9b:78:c1:c2:99:85:e4:f5:47:57:6c:ba:e1:90:bd:1c:5c:
         cc:6d:d7:ef:20:7c:13:dc:6e:6e:5f:95:11:06:49:a2:ce:ef:
         8b:c4:b0:0d:90:8a:04:e1:58:19:4e:58:43:05:58:92:96:8e:
         e2:da:f1:64:4f:31:81:19:bf:a9:34:36:ed:89:2b:af:be:a4:
         c5:dd:5f:20:6b:50:4e:4c:cb:b9:f2:64:18:19:5d:f3:0b:5d:
         c1:2c:69:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----