Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/OH6QGln_W5kdknzECtAlu2JRMek.roa
File:                     OH6QGln_W5kdknzECtAlu2JRMek.roa (raw, json)
Hash identifier:          HtOhSI3Au5gZFFj55/qf/zczYcpDDpUxf1qLBCDQidM=
Subject key identifier:   38:7E:90:1A:59:FF:5B:99:1D:92:7C:C4:0A:D0:25:BB:62:51:31:E9
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       03DC9EEE
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/OH6QGln_W5kdknzECtAlu2JRMek.roa
Signing time:             Sat 01 Jan 2022 02:52:30 +0000
ROA not before:           Sat 01 Jan 2022 02:52:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43641
IP address blocks:        45.11.56.0/24 maxlen: 24
                          2a09:2dc1::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64790254 (0x3dc9eee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Jan  1 02:52:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=387e901a59ff5b991d927cc40ad025bb625131e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b4:49:eb:dc:79:d5:5e:d9:64:9b:ff:e5:4b:
                    55:91:28:06:f3:97:cc:2e:ca:34:03:4f:93:4d:92:
                    16:5c:31:63:a5:f6:27:ef:f7:99:d7:ae:96:ec:0b:
                    80:6d:f5:7d:c1:b0:d1:55:7d:da:8a:f0:3b:a3:9d:
                    63:8b:85:14:6b:13:52:ff:63:9d:e9:53:cc:bd:12:
                    56:16:d8:a4:f7:3d:ad:01:d8:01:cd:7e:3d:88:7c:
                    c7:86:f0:7a:5b:c2:bf:16:b3:28:b0:e5:80:a4:32:
                    8f:e1:d7:25:ff:56:6f:91:e4:82:80:9a:37:93:41:
                    d7:63:5f:69:de:3c:98:62:30:20:7e:94:06:dc:71:
                    4a:cc:cb:27:8a:55:01:d0:2f:5c:be:f7:2d:d3:47:
                    88:56:b4:20:af:3d:f5:73:a5:3c:66:48:64:b9:e0:
                    0b:9d:24:14:3d:34:cd:9b:6d:2f:b7:1e:a6:fe:93:
                    e5:70:2b:11:fb:6b:6f:9c:b6:59:bd:b0:86:80:2b:
                    3f:4a:bd:12:ac:f2:12:58:04:97:bb:17:92:ce:21:
                    40:ab:2e:c6:31:99:3d:60:a1:10:79:bb:0a:42:df:
                    79:db:29:08:37:17:42:0f:eb:9f:9e:6a:e0:4f:08:
                    98:31:a2:7c:ac:f3:b4:20:02:19:c0:cc:cc:f9:eb:
                    49:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7E:90:1A:59:FF:5B:99:1D:92:7C:C4:0A:D0:25:BB:62:51:31:E9
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/OH6QGln_W5kdknzECtAlu2JRMek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.56.0/24
                IPv6:
                  2a09:2dc1::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:1d:a2:7b:67:25:69:ad:7f:02:28:7c:b8:74:3f:93:ca:e3:
         0d:91:65:55:ec:e5:a8:b0:c3:d6:69:21:b5:5e:5a:ad:bc:b3:
         93:f5:8c:4c:65:d0:2f:9d:a0:64:27:38:bd:5c:c1:27:8d:d5:
         76:93:99:9e:5f:4b:f3:d9:3f:2d:78:6d:93:36:e0:d9:e5:31:
         39:08:da:d0:76:f3:d6:cd:39:4a:4b:b9:99:a2:64:ab:a7:b7:
         73:12:b6:3a:42:16:74:d4:2b:06:68:30:8f:fd:ed:39:96:b8:
         d4:06:70:d1:79:c5:a0:ba:74:06:ce:3e:ee:43:aa:7c:69:01:
         17:61:5a:39:a5:fa:d3:ac:e1:0f:7f:ee:34:a2:2b:e7:07:74:
         f4:24:e3:87:dc:67:8e:5a:53:0e:c2:74:73:50:91:e6:bb:88:
         dc:07:d0:fd:a3:d9:1a:24:ff:fd:33:54:b7:c3:43:e9:9a:1b:
         fd:cc:38:7a:5e:e8:60:4d:10:a9:21:69:4a:05:2f:a9:52:64:
         f5:42:e4:ac:97:29:33:be:25:40:c1:7f:50:54:33:d3:e0:83:
         9f:cf:03:1c:a9:95:ea:d4:7d:c6:08:b9:b0:76:9b:7b:86:d6:
         62:8d:a1:a5:18:5b:4f:67:b7:4f:21:a7:f4:aa:76:3c:70:2f:
         43:76:5c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----