Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RSdGZOce8jIYdHSEGcIlNubdOio.roa
File:                     RSdGZOce8jIYdHSEGcIlNubdOio.roa (raw, json)
Hash identifier:          LnxNb1Ka3Vk8FvE5mEMZ7Yuqxg2qAnxI4Hn1Vxw/wFo=
Subject key identifier:   45:27:46:64:E7:1E:F2:32:18:74:74:84:19:C2:25:36:E6:DD:3A:2A
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17AE9029
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RSdGZOce8jIYdHSEGcIlNubdOio.roa
Signing time:             Sat 01 Jan 2022 04:54:09 +0000
ROA not before:           Sat 01 Jan 2022 04:54:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43350
IP address blocks:        185.142.141.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397316137 (0x17ae9029)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=45274664e71ef2321874748419c22536e6dd3a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2d:32:e2:96:50:31:bd:48:1d:c7:71:e8:b3:
                    ef:20:7d:17:a1:6e:21:05:b4:d0:ee:b5:a4:80:a6:
                    d3:64:94:a8:3d:60:93:05:c8:53:1a:42:93:0a:a6:
                    cb:b4:44:e9:66:b9:f5:e3:08:9d:11:d4:7f:45:38:
                    ad:b5:fd:0e:af:03:c7:6f:0b:32:32:3e:d2:d3:20:
                    f0:ec:de:96:35:e4:a6:10:20:5d:4f:2a:2e:19:04:
                    f4:f8:b5:27:fc:53:45:29:78:64:cc:bb:9d:15:f5:
                    2a:1f:6e:40:0a:f6:21:bd:1b:5c:e1:17:3a:f2:23:
                    10:40:98:62:ab:27:d0:e7:75:2e:b6:e2:10:b9:6a:
                    c5:f0:ed:88:42:23:51:34:22:98:1a:71:9f:7f:bc:
                    8b:63:3f:89:73:5c:51:5b:18:7c:d2:be:6d:4f:cb:
                    7e:3c:76:66:63:4f:7d:31:7a:1e:b4:d1:41:48:e3:
                    8c:47:82:48:c0:42:c3:d5:21:ff:98:1d:ef:02:1e:
                    7c:99:46:35:f2:2d:6d:58:f6:6e:4b:b6:67:bc:36:
                    ce:77:e3:91:6b:17:d5:de:3d:88:a3:40:0f:b0:4f:
                    ea:b9:6c:82:53:d3:60:e2:58:9b:5c:f6:11:ec:13:
                    27:8d:89:e4:61:94:d0:a4:31:49:12:42:6f:25:5f:
                    8b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:27:46:64:E7:1E:F2:32:18:74:74:84:19:C2:25:36:E6:DD:3A:2A
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/RSdGZOce8jIYdHSEGcIlNubdOio.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:3c:a9:1c:7b:b0:a6:04:a6:70:96:7d:a1:9c:d8:b2:f4:3c:
         cc:95:a9:31:e3:2d:4f:a9:7e:ba:a6:67:fd:bc:bf:5f:fa:62:
         8a:5b:c5:4f:c2:e1:cf:3c:32:cc:55:30:b2:0f:57:26:79:42:
         36:75:3f:8a:3a:0b:1a:be:5b:44:8a:e2:2b:9f:aa:4a:75:59:
         1b:fe:23:ea:fb:1c:30:84:ad:26:e6:66:c1:8d:de:c6:d2:aa:
         06:fd:93:cc:55:14:0a:63:d3:9e:42:1d:ee:46:1a:5f:0c:1f:
         e7:b7:ac:96:6b:d2:c6:a2:ae:d0:dc:c3:47:c7:53:48:d8:e7:
         66:b9:1f:97:5f:c8:d8:90:ff:77:ca:3b:f0:06:c0:bd:59:a3:
         98:08:cc:0a:2e:b5:5e:66:da:3b:5e:05:2a:08:da:9c:f9:78:
         f3:04:77:35:3d:82:e0:d2:19:ef:dd:10:c2:4b:11:25:76:5b:
         5d:db:69:ad:6b:f4:a0:2a:c2:81:ae:59:3d:1d:45:f5:fe:f3:
         7d:26:37:c8:ac:22:48:97:fe:fa:84:56:aa:4e:b6:17:97:34:
         39:40:87:d5:8c:aa:6b:4b:fe:f9:89:5f:76:7e:54:10:91:1f:
         9b:91:91:7d:6d:7f:d5:63:9e:10:f8:09:ed:3f:55:58:99:da:
         51:bc:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----