Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/VsTJftIur6RCLoTexYbaI4FwFgM.roa
File:                     VsTJftIur6RCLoTexYbaI4FwFgM.roa (raw, json)
Hash identifier:          gJt/IQsHJNBsaksZkNHQ8iPegd7Xw+kE81c4aEfVkC0=
Subject key identifier:   56:C4:C9:7E:D2:2E:AF:A4:42:2E:84:DE:C5:86:DA:23:81:70:16:03
Certificate issuer:       /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
Certificate serial:       0183C18FA937D6BC379EEC27962D6ECDAF0C
Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/VsTJftIur6RCLoTexYbaI4FwFgM.roa
Signing time:             Mon 10 Oct 2022 11:02:41 +0000
ROA not before:           Mon 10 Oct 2022 11:02:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3274
IP address blocks:        81.20.224.0/20 maxlen: 24
                          2001:67c:110::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c1:8f:a9:37:d6:bc:37:9e:ec:27:96:2d:6e:cd:af:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362
        Validity
            Not Before: Oct 10 11:02:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=56c4c97ed22eafa4422e84dec586da2381701603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3e:4e:63:2f:b5:a2:ad:69:c9:60:b8:11:cf:
                    d6:e6:6f:f5:ad:48:fe:10:6d:68:da:de:6f:d1:00:
                    ae:7c:14:08:85:a8:e8:d6:bc:7a:aa:02:c3:9e:2a:
                    b9:3a:95:f4:7f:0e:32:79:84:e9:9a:a9:e6:13:9b:
                    63:86:b8:d3:10:42:e4:95:47:49:e2:4d:55:a5:d6:
                    f2:3a:df:82:27:e0:8f:15:61:03:23:06:a7:9e:4b:
                    1f:97:14:86:aa:f1:3d:33:e5:5e:59:6f:70:07:d1:
                    8e:eb:bc:2b:0e:46:ea:7b:48:c3:b8:ee:8c:d8:f9:
                    af:35:3f:6f:1a:19:a1:a9:70:e3:62:29:96:9d:37:
                    e6:29:f4:50:f0:3d:ee:c4:e0:f4:b4:db:8c:8f:f6:
                    53:f7:4c:e1:a6:34:b1:22:b6:e1:f7:dc:91:62:ad:
                    0d:04:e0:6e:92:5a:85:4f:74:ff:d4:b0:cf:9a:4a:
                    30:92:50:4c:5a:fa:54:8f:ef:ab:5c:3f:b1:5c:74:
                    0a:cb:1c:97:81:e2:8c:87:de:61:ad:58:93:64:d6:
                    55:e6:c5:ba:39:6b:37:e9:63:3c:ab:f4:a3:0a:ea:
                    97:3e:53:60:e8:d1:2b:d7:6b:0a:a0:f9:2b:1c:cd:
                    db:d4:ad:1e:ef:d3:24:d2:3b:54:84:af:b2:1c:17:
                    b3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C4:C9:7E:D2:2E:AF:A4:42:2E:84:DE:C5:86:DA:23:81:70:16:03
            X509v3 Authority Key Identifier:
                keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/VsTJftIur6RCLoTexYbaI4FwFgM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.20.224.0/20
                IPv6:
                  2001:67c:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:76:3b:84:77:b5:bd:6c:b2:3c:88:fd:51:6b:f9:c7:30:7f:
         fb:3f:7e:71:c1:c3:3f:ad:94:66:46:ae:74:07:cd:90:c7:b1:
         0d:63:bf:fe:41:93:1d:c0:f2:08:6b:42:e8:f0:ce:73:79:58:
         87:e4:78:19:2c:4c:8a:4a:d3:d3:c3:9f:a9:83:c6:a3:6e:be:
         57:5a:93:bd:16:a9:c0:61:44:05:ae:26:85:9e:04:a3:8d:3f:
         d3:1e:07:3b:b7:a5:26:88:ae:b0:f8:0b:07:34:6d:a9:ce:03:
         06:92:03:64:7e:dd:bb:57:0b:a8:d3:93:4a:c7:5e:f1:66:3e:
         a7:40:29:f2:23:5e:73:2d:43:02:06:9f:7e:29:69:6e:6d:c5:
         fe:71:23:87:ad:89:1c:8a:7e:32:29:7c:56:87:c9:c4:7a:bc:
         df:68:11:ee:f1:97:d5:4c:80:7e:2e:29:70:4f:10:3c:e2:fc:
         8b:ed:1e:cc:9b:fe:ee:48:b2:f4:eb:1a:31:cd:c8:52:1d:0e:
         f9:81:8d:a1:d3:81:cf:11:5a:d7:07:24:72:d3:6e:c0:4e:d0:
         ce:a0:8a:0e:b6:ce:21:b1:1c:3d:fc:64:54:c2:21:ab:66:9c:
         8c:99:92:f2:fe:01:30:63:e6:68:9d:b9:b6:a9:98:0f:7d:79:
         d3:55:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----