Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VeSlcWm85NGqvRVB5V69l5vsAPc.roa
File:                     VeSlcWm85NGqvRVB5V69l5vsAPc.roa (raw, json)
Hash identifier:          yECiTFbo6i77XEW80+VKjyaWaUMrHRu9RbsBg4r0GtI=
Subject key identifier:   55:E4:A5:71:69:BC:E4:D1:AA:BD:15:41:E5:5E:BD:97:9B:EC:00:F7
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17D737AE
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VeSlcWm85NGqvRVB5V69l5vsAPc.roa
Signing time:             Sat 01 Jan 2022 04:54:35 +0000
ROA not before:           Sat 01 Jan 2022 04:54:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140883
IP address blocks:        45.138.208.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399980462 (0x17d737ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55e4a57169bce4d1aabd1541e55ebd979bec00f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:02:5a:f2:29:d3:0d:67:4f:ca:59:98:60:
                    a6:e3:26:90:ba:c7:33:85:a5:4a:f2:89:be:3b:d8:
                    e3:46:78:63:2e:ae:bc:40:67:f4:1b:89:0c:90:48:
                    27:14:5c:f5:92:5f:c2:6a:09:b3:45:aa:c8:c6:63:
                    0e:68:c3:9e:bc:c8:10:d0:f3:32:54:d5:c7:90:0a:
                    ec:5d:d3:27:71:9f:99:1f:b8:49:e5:40:d6:7a:82:
                    e1:46:dd:7c:e4:89:f6:a5:f3:70:3a:db:ac:f6:82:
                    43:a0:d8:b1:f1:14:88:ea:8f:be:e5:65:44:91:af:
                    01:2f:04:83:68:e1:16:8e:28:18:36:6d:6a:06:f3:
                    d4:ad:f9:1c:0c:2e:7d:b9:10:66:81:8f:c9:d8:0f:
                    34:19:d6:86:23:72:34:fa:ba:dc:aa:11:3a:3b:6e:
                    ef:80:d7:c8:4e:31:0a:cc:d7:dc:2f:cc:3f:08:6c:
                    56:1e:77:c7:a5:8a:9c:7c:ce:f9:c9:a9:a6:1c:07:
                    db:87:76:87:6d:cd:58:60:43:58:10:61:39:4d:10:
                    db:0a:dc:a0:2a:ad:52:28:46:01:d8:ec:a5:44:a0:
                    3c:51:3d:07:c7:df:5e:77:d6:51:f3:29:4d:4e:40:
                    f2:0f:23:4a:4e:09:1c:1d:15:d3:80:d3:fc:a7:a6:
                    75:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E4:A5:71:69:BC:E4:D1:AA:BD:15:41:E5:5E:BD:97:9B:EC:00:F7
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/VeSlcWm85NGqvRVB5V69l5vsAPc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:a1:30:cc:2e:ac:d1:29:4d:dc:e7:bf:d7:b3:bc:b8:e5:f7:
         ab:ea:25:28:92:6c:e7:91:e8:01:db:88:3e:2e:0c:7b:5c:c8:
         ac:81:fe:89:e2:04:ca:52:4e:77:55:07:70:d5:c9:84:94:c9:
         db:09:06:67:98:de:55:dd:4a:1f:c3:f7:2c:20:e9:63:a1:37:
         66:31:4f:68:bf:f8:34:2c:4a:b2:65:4d:24:2b:c9:f9:48:6e:
         92:29:4f:88:d2:54:b1:18:7e:35:76:6e:d2:bc:bc:e3:b9:fe:
         f6:b7:3d:d8:35:ff:50:9a:6a:cc:ee:b3:db:ed:80:b9:5a:d2:
         83:04:06:ea:51:da:b1:cf:a7:ac:87:5f:12:af:b5:3e:20:fb:
         5f:aa:8a:cd:ca:56:64:d0:35:fb:5a:0f:dc:ba:33:e6:77:a9:
         f0:02:87:21:00:cd:b1:9f:d4:e9:f1:9d:8d:45:c2:59:8c:09:
         92:3f:86:c3:86:5c:41:a7:80:59:cf:ef:fb:7d:6a:9e:72:e9:
         ab:25:b2:24:22:39:df:95:84:ce:c7:fe:95:66:ab:76:92:ea:
         db:dc:95:3c:40:1b:68:44:f4:7d:ba:7e:fa:df:3e:8a:09:70:
         d9:31:32:e0:54:e0:1d:81:73:23:9d:a9:a5:59:e6:a5:26:c4:
         f0:6d:51:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----