Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/_B8ZlojOvwGofNBkBSb3oxz4JUc.roa
File:                     _B8ZlojOvwGofNBkBSb3oxz4JUc.roa (raw, json)
Hash identifier:          xrMY9RlBOJyyz2Q4SjJb0YmzaRbXGlQeJ6lTmFgfOJ4=
Subject key identifier:   FC:1F:19:96:88:CE:BF:01:A8:7C:D0:64:05:26:F7:A3:1C:F8:25:47
Certificate issuer:       /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial:       0184F74F9C229FE305717BB22F01B3D757C5
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/_B8ZlojOvwGofNBkBSb3oxz4JUc.roa
Signing time:             Fri 09 Dec 2022 14:35:00 +0000
ROA not before:           Fri 09 Dec 2022 14:35:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43202
IP address blocks:        45.128.4.0/22 maxlen: 24
                          2a12:83c0::/32 maxlen: 32
                          2a12:83c5::/32 maxlen: 32
                          2a12:83c2::/32 maxlen: 32
                          2a12:83c3::/32 maxlen: 32
                          2a12:83c6::/32 maxlen: 32
                          2a12:83c1::/32 maxlen: 32
                          2a12:83c4::/32 maxlen: 32
                          2a12:83c7::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f7:4f:9c:22:9f:e3:05:71:7b:b2:2f:01:b3:d7:57:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
        Validity
            Not Before: Dec  9 14:35:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc1f199688cebf01a87cd0640526f7a31cf82547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:12:39:6b:13:2d:0b:c3:71:34:1d:1e:ff:0b:
                    dc:8d:a1:79:16:82:34:42:36:83:9c:38:41:bb:e3:
                    e7:93:c6:ba:11:b0:05:d2:b2:60:8d:e2:77:b3:95:
                    fb:cf:07:d3:8e:7d:98:73:83:10:2c:df:10:64:36:
                    6e:1c:36:ca:6d:08:09:b0:75:76:60:9b:21:9f:a0:
                    76:c9:57:6e:40:9e:58:f4:24:42:7d:e9:a9:d4:ac:
                    8f:38:1f:30:14:68:5b:4e:ac:23:f8:db:91:46:22:
                    77:ae:ec:26:fc:ee:4f:bd:fe:44:41:8a:ea:3d:bb:
                    50:14:ba:13:59:c3:58:f7:d2:10:09:87:fb:fc:51:
                    21:fe:dd:2d:29:02:ac:2d:5b:81:46:06:de:ba:63:
                    60:25:ef:09:fb:ae:f9:5a:7b:91:e9:2f:b6:28:11:
                    45:1a:e1:c9:1a:dc:71:01:8e:5f:35:80:bd:f1:71:
                    65:d1:9d:b7:0c:db:0c:c3:da:09:37:10:7b:b2:8d:
                    82:57:b2:85:0b:5b:fd:00:a5:72:7c:f6:af:9e:91:
                    28:af:1d:a4:c1:66:aa:46:e2:d5:e2:47:ec:11:00:
                    db:b8:f2:ce:e6:f5:05:18:33:5e:f9:81:5d:29:09:
                    96:d1:b6:b2:2c:6b:24:2c:ec:5d:ad:7f:71:08:5a:
                    dc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:1F:19:96:88:CE:BF:01:A8:7C:D0:64:05:26:F7:A3:1C:F8:25:47
            X509v3 Authority Key Identifier:
                keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/_B8ZlojOvwGofNBkBSb3oxz4JUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.128.4.0/22
                IPv6:
                  2a12:83c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         95:dd:1d:0d:40:2d:5c:d3:57:95:11:5d:4a:ed:36:ff:80:9b:
         6d:5e:e1:fd:3c:88:cf:2b:07:9e:c7:c2:39:f2:2c:5b:77:b3:
         45:16:b7:e2:e1:b0:dd:6d:e7:75:f5:f3:18:78:bb:64:75:9a:
         fd:e4:73:8a:aa:8e:ac:71:9c:c4:50:64:ee:fb:f4:f7:23:96:
         22:fc:03:57:88:76:70:7a:13:33:80:35:fa:dd:c7:80:d1:9c:
         ce:ec:d8:7f:27:e2:a5:6b:bd:ec:ff:98:f5:66:13:50:ff:60:
         b6:1d:49:27:6c:f5:33:04:ea:7d:9d:fb:3f:18:7d:3a:70:c2:
         a1:1c:86:3d:61:36:c5:30:b9:4a:5e:35:fe:4a:03:44:54:a6:
         07:27:e5:f7:34:12:7b:84:63:48:21:c2:35:72:14:3e:6e:0d:
         77:21:4d:5e:7c:22:eb:4d:29:e9:44:69:37:78:8d:40:83:d0:
         cf:15:d7:63:9b:36:6d:ee:99:74:14:c3:cb:e9:a5:82:e3:b2:
         ed:c6:af:75:4c:69:84:2a:7c:2b:0e:f4:df:04:16:36:37:e8:
         8f:d3:3c:cb:04:42:7d:e9:35:77:10:9f:97:57:04:dd:d2:63:
         81:04:53:36:e8:dd:8b:61:fc:87:69:81:af:f4:d6:3a:86:93:
         21:31:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----