Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i2bNrQpDnnFD2d395XmtuV8edgE.roa
File:                     i2bNrQpDnnFD2d395XmtuV8edgE.roa (raw, json)
Hash identifier:          /L1XkElmpvBwtfNDf4zSTzdCrU+IpgIJOeNWTHzYNvQ=
Subject key identifier:   8B:66:CD:AD:0A:43:9E:71:43:D9:DD:FD:E5:79:AD:B9:5F:1E:76:01
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       179A51D7
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i2bNrQpDnnFD2d395XmtuV8edgE.roa
Signing time:             Sat 01 Jan 2022 04:53:56 +0000
ROA not before:           Sat 01 Jan 2022 04:53:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23338
IP address blocks:        45.153.170.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395989463 (0x179a51d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:53:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8b66cdad0a439e7143d9ddfde579adb95f1e7601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:69:7d:09:5e:d7:b0:00:db:e8:d4:93:92:
                    da:b9:67:2d:f1:d6:2d:07:02:20:66:e9:ba:8a:1a:
                    ab:27:7a:c6:55:b8:f8:b2:0e:e5:98:e2:88:60:92:
                    1b:96:ac:4c:3a:3d:1a:1b:5f:f0:b6:fd:f5:1d:a9:
                    66:bf:5a:da:58:8a:57:40:0a:49:90:64:06:a7:8c:
                    f5:f8:a0:80:92:47:e0:f1:9d:47:87:89:99:7b:19:
                    51:86:11:75:bd:f4:ab:ce:5a:c6:f8:a5:2a:28:b8:
                    9b:4c:97:a4:e6:31:cb:eb:4a:72:e3:95:7f:be:52:
                    ed:6c:b4:26:71:b1:3e:8a:19:ee:81:94:c3:c8:60:
                    ed:56:7d:27:f2:6e:35:a8:48:0e:0c:a9:99:b9:02:
                    ca:35:6d:d6:7d:a2:7a:24:76:17:cd:c0:f0:f1:4d:
                    6d:94:39:b2:65:58:50:80:52:b1:d7:74:f5:a7:fb:
                    14:85:dc:35:0e:94:24:64:e9:33:0d:8f:0e:a7:a1:
                    31:4b:c0:6e:31:27:f0:58:24:6c:bf:c0:b9:35:90:
                    0f:12:89:4f:fa:d8:04:32:f1:32:82:7f:bd:82:76:
                    8b:4d:7f:de:97:0c:c6:a3:a4:74:bb:1f:87:35:0b:
                    ce:9b:5d:11:79:bd:dd:43:27:a9:66:e0:7c:4d:88:
                    f1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:66:CD:AD:0A:43:9E:71:43:D9:DD:FD:E5:79:AD:B9:5F:1E:76:01
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i2bNrQpDnnFD2d395XmtuV8edgE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:36:74:5e:52:fe:4f:5c:2f:7f:e2:64:29:5f:ef:fd:c7:83:
         58:c9:9b:8d:cc:5b:4d:a6:4e:7b:6b:77:25:98:16:71:4b:4a:
         78:46:af:0c:77:39:7c:df:59:05:87:cd:0d:5a:d2:d2:14:c8:
         c5:b7:b5:8b:a8:ab:57:99:f1:52:f7:c3:4c:bc:75:51:07:2b:
         7c:f6:b4:85:d5:2f:42:a0:c1:47:fd:52:a7:65:65:2b:80:b9:
         05:d0:c4:91:ec:56:64:59:10:70:06:bd:f4:f3:3f:19:dc:01:
         85:fb:d2:4b:2c:b5:a6:a9:53:f8:05:83:9f:08:8c:69:65:b5:
         7e:77:ae:6a:73:09:3f:41:59:6e:7f:a3:89:d0:63:f4:03:ac:
         d6:a4:08:64:ab:c6:b3:69:67:f1:34:4b:aa:78:2f:cd:78:e8:
         20:0f:61:e1:39:ec:4d:2c:c2:ca:93:8a:b4:97:10:ad:84:68:
         c9:26:37:38:4d:90:16:ee:e6:81:30:42:dc:56:ec:fd:56:f7:
         ba:a7:18:54:a9:1e:0e:91:98:85:3b:61:f0:4b:2a:42:5b:80:
         e0:15:6e:d1:f3:85:53:ca:81:f4:5d:41:4f:85:3d:67:96:cf:
         fa:70:ae:ee:ad:62:ac:84:36:24:ad:85:80:5d:2f:0d:d7:e7:
         30:c9:3e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----