Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VV9kCaYhYDpQal3AqD0N8l8X8D4.roa
File:                     VV9kCaYhYDpQal3AqD0N8l8X8D4.roa (raw, json)
Hash identifier:          oMgfRWaO1k3UlAJqKzf4iTiutUWyYZYHKhFo0K2pCgE=
Subject key identifier:   55:5F:64:09:A6:21:60:3A:50:6A:5D:C0:A8:3D:0D:F2:5F:17:F0:3E
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17A7214E
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VV9kCaYhYDpQal3AqD0N8l8X8D4.roa
Signing time:             Sat 01 Jan 2022 04:54:04 +0000
ROA not before:           Sat 01 Jan 2022 04:54:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39792
IP address blocks:        45.12.163.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396829006 (0x17a7214e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=555f6409a621603a506a5dc0a83d0df25f17f03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:0d:fc:7f:ad:41:72:6a:bc:70:79:95:d3:
                    6a:e1:65:2b:bc:bd:ac:7c:84:49:91:b8:d3:aa:49:
                    00:53:f9:4f:48:57:ce:03:9f:d8:ce:7c:31:2b:a1:
                    29:f6:5b:d9:b1:16:13:f4:eb:d4:65:55:64:19:9d:
                    ec:8a:97:98:db:fa:d0:27:9d:f1:bb:9d:5d:2e:e2:
                    d4:bd:e3:0e:03:2d:91:81:e1:13:50:71:52:bc:db:
                    fd:2d:82:55:24:32:ae:86:51:d0:bc:1b:1b:73:01:
                    bc:2d:41:fc:65:68:6d:a8:69:c7:b2:9e:5c:0c:29:
                    63:61:2c:35:8c:e6:02:bb:65:d7:02:f2:17:fe:38:
                    de:5e:f0:4a:00:7f:f9:ae:06:ae:56:7d:cc:43:1f:
                    c6:fc:9a:54:ee:49:92:44:30:73:8a:d5:44:18:af:
                    c8:ca:a9:17:84:76:9c:e3:73:ca:d4:d5:7a:ad:b3:
                    aa:f5:b4:f0:50:de:f8:11:1d:64:2b:c2:8b:4c:f9:
                    7e:3c:d4:28:31:20:dc:71:39:b9:65:b8:0e:c9:2c:
                    03:89:78:db:d1:a1:e6:86:92:5f:34:d3:e1:87:42:
                    e2:dd:f3:ca:5b:da:cf:49:17:8d:18:e2:bc:b2:c7:
                    47:d5:0e:8d:19:4d:f1:41:f0:26:6f:40:fb:32:e7:
                    62:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5F:64:09:A6:21:60:3A:50:6A:5D:C0:A8:3D:0D:F2:5F:17:F0:3E
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VV9kCaYhYDpQal3AqD0N8l8X8D4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:2a:50:89:53:6e:9d:73:bf:06:c2:a1:0d:7f:ba:6c:7c:bc:
         8b:fe:9a:77:a9:00:53:cc:a4:94:c6:9c:10:9b:3a:b2:ca:44:
         79:c9:d0:22:be:b8:be:a9:9e:9e:d4:88:8f:ca:d6:ca:7e:c2:
         70:7c:b9:55:97:12:13:2c:c7:2c:54:18:2f:1b:d0:15:54:9f:
         f5:89:0c:26:49:32:d2:99:6a:0b:e1:62:ab:13:2b:26:0d:b1:
         c5:95:16:8b:fd:79:30:1e:b5:3c:d1:99:7f:e7:f6:26:47:d0:
         21:46:a7:d5:09:d3:de:be:70:ce:06:5c:e1:92:75:2b:e7:62:
         2f:cd:3b:17:4e:50:10:82:9d:ac:3a:43:6e:00:28:e2:84:07:
         e0:0b:cb:f7:70:ca:05:42:60:b8:e0:18:13:b3:16:48:2c:5d:
         2c:a0:50:5e:72:4e:93:92:e4:17:04:09:e2:8c:49:32:e6:05:
         18:f4:bd:a4:ec:a8:01:1e:23:70:f0:6e:f7:32:b5:7c:73:0a:
         37:e7:83:53:71:9d:51:ae:d8:c6:46:4f:d4:ae:0c:8c:3e:dc:
         0d:88:42:ec:23:22:6b:16:79:39:c9:fd:41:22:9f:64:a5:6b:
         3b:7d:6f:3d:03:9c:b6:cc:7c:34:ef:71:75:b4:93:1f:3f:58:
         ca:9e:82:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----