Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/tmbU_ceABtUIAdjy7ObWjPvMCCc.roa
File:                     tmbU_ceABtUIAdjy7ObWjPvMCCc.roa (raw, json)
Hash identifier:          E6cz8BUmzZNaTVc+VME5UdDnXwqpQZ3v3CD1VPmBAbc=
Subject key identifier:   B6:66:D4:FD:C7:80:06:D5:08:01:D8:F2:EC:E6:D6:8C:FB:CC:08:27
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17CB237A
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/tmbU_ceABtUIAdjy7ObWjPvMCCc.roa
Signing time:             Sat 01 Jan 2022 04:54:28 +0000
ROA not before:           Sat 01 Jan 2022 04:54:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     133295
IP address blocks:        45.132.15.0/24 maxlen: 24
                          2a06:7a02::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399188858 (0x17cb237a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b666d4fdc78006d50801d8f2ece6d68cfbcc0827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:ef:94:0c:43:78:39:30:00:0c:aa:a2:87:74:
                    dc:0c:d4:b2:7e:d7:c1:f6:dc:58:a3:cf:86:c6:33:
                    26:79:f6:40:d4:16:9f:1d:5e:61:67:af:a9:ba:53:
                    5c:03:dc:fe:fa:b7:64:e8:9d:c2:06:c3:01:b1:af:
                    bb:ad:e4:d6:fa:4e:bb:06:93:d2:ae:66:14:d5:06:
                    3b:c4:4b:e0:b9:21:63:01:be:64:1b:b5:47:47:e0:
                    51:51:ab:1e:01:90:b9:1b:58:24:06:87:82:35:d9:
                    e7:9a:f9:ea:9a:7e:f6:7f:03:91:54:0c:ac:90:bd:
                    96:ca:9a:f1:16:31:a3:68:71:27:be:5b:11:3e:43:
                    dd:23:51:86:a2:86:45:40:da:b4:66:e9:0a:5c:79:
                    1d:7b:2f:be:04:2e:d9:25:4c:04:59:34:2d:9f:d4:
                    00:00:3f:1b:d8:47:7b:6f:61:88:27:fa:e0:59:05:
                    17:d5:bf:69:98:08:c7:fb:16:95:0d:de:1c:de:bd:
                    aa:cb:37:29:cd:46:ea:89:96:7a:bb:3e:09:a3:6e:
                    78:95:9c:a8:64:6a:63:d4:69:42:94:f7:76:58:0a:
                    13:95:c4:59:ae:08:9a:1f:68:26:8f:b9:16:81:16:
                    cc:b2:a7:d2:ff:d1:5b:d5:25:2f:f3:a0:ff:f3:88:
                    a1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:66:D4:FD:C7:80:06:D5:08:01:D8:F2:EC:E6:D6:8C:FB:CC:08:27
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/tmbU_ceABtUIAdjy7ObWjPvMCCc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.15.0/24
                IPv6:
                  2a06:7a02::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:71:0e:13:40:ef:2a:37:1c:13:28:1e:1d:e4:6e:7d:7a:cb:
         90:f6:a8:f9:ae:10:f6:f2:e4:bc:f9:10:70:9c:36:ae:54:3a:
         89:65:9b:93:78:6b:97:71:51:81:f8:b6:30:d3:5a:36:da:79:
         be:d5:89:fc:77:6e:17:d5:00:0d:6a:01:70:90:4b:71:0f:90:
         18:22:0e:a8:56:2e:34:8b:27:f0:ed:16:fb:b1:5f:74:9e:7a:
         eb:ed:f9:1f:44:b5:c1:fe:78:c9:7c:ad:2f:b0:7c:d1:86:17:
         b0:27:52:4a:83:35:56:b2:78:98:f6:35:aa:30:38:10:eb:f3:
         72:5f:c7:fb:c3:50:f5:99:f1:6e:ce:0a:ca:ff:92:b8:a3:ca:
         fe:3d:8f:0b:0b:4e:5c:1c:67:d4:95:4b:3b:f8:7f:b2:09:b9:
         91:66:c8:1e:31:9b:88:8c:9a:5b:cc:e2:d8:8b:bc:7d:0c:60:
         0c:12:af:6e:ab:64:2b:bf:ea:ed:3a:36:61:c2:34:e0:99:9f:
         60:c1:c3:7e:5c:98:0a:87:d7:3b:98:1d:43:93:8c:3a:07:66:
         c6:42:d9:56:99:b8:71:db:11:b2:55:e1:14:43:cc:0e:d8:41:
         14:a3:be:57:6b:9f:83:31:31:5d:a4:8a:74:62:1f:d6:ef:34:
         7c:58:e1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----