Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/E15fFEPpALZweedZPDd6MIqkq3M.roa
File:                     E15fFEPpALZweedZPDd6MIqkq3M.roa (raw, json)
Hash identifier:          JoT10gfqlIr645Y3Zti0z5pdEfcgC89fK5lD2Rv+0q4=
Subject key identifier:   13:5E:5F:14:43:E9:00:B6:70:79:E7:59:3C:37:7A:30:8A:A4:AB:73
Certificate issuer:       /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial:       018331D780F8DAEE93939687B2F8664F2F9A
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/E15fFEPpALZweedZPDd6MIqkq3M.roa
Signing time:             Mon 12 Sep 2022 13:15:50 +0000
ROA not before:           Mon 12 Sep 2022 13:15:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20542
IP address blocks:        185.55.32.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:31:d7:80:f8:da:ee:93:93:96:87:b2:f8:66:4f:2f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
        Validity
            Not Before: Sep 12 13:15:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=135e5f1443e900b67079e7593c377a308aa4ab73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:37:91:b3:d7:bf:3c:7c:83:33:c8:91:49:9f:
                    67:e9:71:ec:22:32:f8:7a:26:9e:6c:bf:ff:37:c3:
                    ef:bb:62:29:b8:f6:d3:4d:20:ba:8c:20:49:a5:bb:
                    f4:a8:06:f3:c0:e7:82:24:ef:20:c6:67:99:7f:b2:
                    df:58:e5:20:5a:ea:ef:f6:19:94:2c:53:23:76:8e:
                    0b:6a:31:a2:95:3c:a3:35:3c:8d:a3:0f:58:b5:0b:
                    96:04:f6:a5:ec:9f:9c:3d:92:3e:ee:2c:5e:14:08:
                    b8:ec:fd:ba:c4:c8:90:4f:19:8a:03:fd:6e:88:61:
                    34:fa:7e:ed:f5:42:9b:0f:e6:11:49:eb:ec:32:f1:
                    5d:a9:c9:a6:c4:1f:53:ff:10:dd:e7:a1:a4:fc:05:
                    4f:c7:64:e9:88:15:b5:2c:a4:e2:34:a6:83:54:93:
                    45:95:e8:11:78:4f:30:77:fe:ea:a1:a0:8c:95:e0:
                    0e:03:31:47:cd:5a:d0:46:8f:a7:d5:30:9f:53:e3:
                    4c:09:61:21:97:34:83:0d:a7:a9:85:51:ed:ee:dd:
                    96:fa:97:c4:23:97:d8:39:73:92:57:ab:57:c4:7d:
                    39:01:68:66:8f:91:17:73:d0:57:59:f9:c4:de:d3:
                    0d:ce:d8:e3:f2:86:49:e2:42:78:9a:31:0d:8e:f4:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5E:5F:14:43:E9:00:B6:70:79:E7:59:3C:37:7A:30:8A:A4:AB:73
            X509v3 Authority Key Identifier:
                keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/E15fFEPpALZweedZPDd6MIqkq3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.55.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:55:06:1f:5a:6e:04:36:3a:c5:3e:97:af:47:a2:9f:99:62:
         4b:2c:fb:c5:7d:85:42:5f:85:d3:11:d6:8d:88:3a:c0:e5:fe:
         59:d2:9c:1b:5b:9a:c4:17:1d:0a:cd:c5:01:1b:67:a4:07:45:
         c8:3b:b6:d7:33:22:bb:0b:9a:f0:06:55:c2:1e:21:a4:25:86:
         0b:ce:93:1f:e0:47:4a:12:a1:1c:cd:1c:de:42:22:ba:44:5d:
         f2:1b:4d:d3:4d:04:2b:e6:e5:6d:ef:1e:0a:e9:a0:31:31:26:
         eb:7f:74:16:75:40:8b:fb:9f:e3:15:71:db:a4:b2:e4:cf:32:
         f4:fb:74:46:da:f6:a0:c6:bf:8c:64:4a:2a:16:b3:26:6a:fa:
         5d:43:8d:a2:4c:66:42:05:65:7c:66:6f:6f:3e:de:85:e3:09:
         fa:05:16:06:6c:33:18:10:6f:c4:b5:69:c4:8e:be:6b:37:4e:
         58:f5:cb:93:b3:6c:fb:bc:b3:72:44:bf:eb:e8:d4:fc:bd:fc:
         a6:c0:c5:db:ed:28:e2:89:a9:ea:2f:72:96:33:84:81:33:63:
         a9:46:2a:7f:59:92:21:5a:d1:cf:66:71:f1:5f:81:d9:82:fa:
         13:7d:9b:59:c7:97:19:81:a4:c8:09:4e:e9:ec:26:1d:cb:ec:
         2c:e1:72:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----