Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/dcgv2QTbyx3h4PWN2YrRUhDPfIA.roa
File:                     dcgv2QTbyx3h4PWN2YrRUhDPfIA.roa (raw, json)
Hash identifier:          LWIm6ThSlP4r5Z+Nw6RuZFQ4W/xknV5T+W2m0u6O/C4=
Subject key identifier:   75:C8:2F:D9:04:DB:CB:1D:E1:E0:F5:8D:D9:8A:D1:52:10:CF:7C:80
Certificate issuer:       /CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Certificate serial:       B9C0
Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/dcgv2QTbyx3h4PWN2YrRUhDPfIA.roa
Signing time:             Wed 11 May 2022 08:03:31 +0000
ROA not before:           Wed 11 May 2022 08:03:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208315
IP address blocks:        45.142.240.0/22 maxlen: 22
                          2a0e:dc40::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47552 (0xb9c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6
        Validity
            Not Before: May 11 08:03:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75c82fd904dbcb1de1e0f58dd98ad15210cf7c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:5e:1b:a4:ea:01:c8:a8:47:e4:6c:38:65:
                    e6:4f:f8:83:4e:a2:9d:a5:45:f5:b5:75:ac:1d:25:
                    70:e7:ac:a7:ea:ff:aa:92:67:8e:23:f4:21:74:41:
                    cb:8b:31:af:0f:1e:10:0f:e4:58:81:bb:21:05:b5:
                    36:6d:8a:b6:94:70:9a:03:8e:da:5d:7a:d7:42:31:
                    f9:c4:a1:25:f2:49:97:78:53:e9:75:45:c1:93:92:
                    91:b5:61:b0:be:56:c6:fb:47:2f:72:d2:12:92:97:
                    28:03:a4:79:52:95:f9:27:2a:2e:f9:c4:83:12:7c:
                    9c:8c:2f:2e:16:d9:22:1d:ff:28:47:61:b8:e9:b1:
                    ef:db:cd:84:30:82:c4:71:47:01:f3:35:99:a9:e1:
                    cb:e2:bc:6f:e4:70:ce:2b:59:9b:63:98:23:e2:3a:
                    70:d5:ba:d1:c3:3e:db:ff:0a:87:e3:21:04:47:45:
                    27:94:8a:bf:28:7a:c5:f4:60:15:47:51:0c:e5:47:
                    85:45:b1:40:31:c5:9e:96:2c:32:9b:3a:d0:24:ae:
                    1f:c7:d8:df:ed:ad:0b:de:ef:8a:c2:16:76:29:bd:
                    11:af:31:07:cd:a3:ec:6c:2c:a9:d2:81:1c:ae:96:
                    d7:90:62:30:4f:e7:4a:25:7c:88:d1:49:dd:9d:3a:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C8:2F:D9:04:DB:CB:1D:E1:E0:F5:8D:D9:8A:D1:52:10:CF:7C:80
            X509v3 Authority Key Identifier:
                keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/dcgv2QTbyx3h4PWN2YrRUhDPfIA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.240.0/22
                IPv6:
                  2a0e:dc40::/29

    Signature Algorithm: sha256WithRSAEncryption
         4c:56:ac:91:68:46:70:06:0e:2c:ff:f9:65:30:ad:54:9f:87:
         b8:95:6e:0d:27:d1:9c:61:6e:21:a1:11:62:d0:a6:d6:43:b9:
         a3:5a:4b:df:db:ce:a7:11:90:5a:45:29:7b:5d:a3:fc:f7:6f:
         a1:36:91:2f:83:bc:2b:f4:31:9d:8a:89:da:62:7b:58:18:03:
         c0:45:6f:01:fc:6c:31:4a:61:b8:5d:0f:e3:1f:5f:6d:03:2c:
         b9:a1:9f:c6:e7:bf:bf:9e:ec:1b:c6:ac:88:ee:8f:a7:ca:32:
         e4:1b:ac:14:81:72:8f:d5:12:ff:35:e4:67:4c:0e:ec:0e:e4:
         1e:f6:c9:40:33:0a:8b:7f:1c:4c:5a:01:eb:63:66:fc:ed:75:
         ba:1b:a2:d9:55:06:7b:79:af:de:d8:92:db:03:6c:93:15:0e:
         9c:99:34:2a:94:7e:6b:d4:1c:1c:81:73:7e:fa:67:4b:e2:9e:
         a6:f6:31:77:18:0d:04:d4:b9:a3:a5:72:f5:84:41:31:73:7d:
         27:0d:75:57:a7:1b:e2:74:5d:75:74:26:8c:6a:8c:30:99:91:
         db:35:de:57:b3:79:bf:3a:cb:1f:cd:03:9a:6f:67:18:e3:08:
         d3:2d:ed:2c:35:ce:69:92:07:ad:7e:ec:cb:c8:64:67:80:0b:
         8f:8c:41:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----