Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/CLwTG63LLmDe4zisCvrW0NjXLNQ.roa
File:                     CLwTG63LLmDe4zisCvrW0NjXLNQ.roa (raw, json)
Hash identifier:          cGlPLro0GhlT0lMI/YBEl/55gn6K2qFoZCD6y7Dn0Z0=
Subject key identifier:   08:BC:13:1B:AD:CB:2E:60:DE:E3:38:AC:0A:FA:D6:D0:D8:D7:2C:D4
Certificate issuer:       /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial:       04B35087
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/CLwTG63LLmDe4zisCvrW0NjXLNQ.roa
Signing time:             Thu 26 May 2022 13:08:13 +0000
ROA not before:           Thu 26 May 2022 13:08:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     268581
IP address blocks:        45.140.192.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78860423 (0x4b35087)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
        Validity
            Not Before: May 26 13:08:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=08bc131badcb2e60dee338ac0afad6d0d8d72cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bc:88:14:43:7e:ae:c1:85:a2:d7:f1:a8:50:
                    4c:c9:1c:70:b4:74:28:1d:9b:8c:85:e1:c8:34:37:
                    6c:2f:e4:b4:f2:ab:aa:ff:5a:e8:63:fe:af:10:b7:
                    29:d4:7c:24:94:84:a6:6d:e0:25:9e:58:30:f2:7d:
                    ee:3a:b1:f4:ed:8b:07:3d:78:7a:fe:99:43:17:18:
                    ec:62:a4:df:a9:d5:19:7c:95:b3:92:89:7f:a7:b1:
                    bb:7e:5e:91:44:20:4d:79:57:ef:7a:9f:88:74:c3:
                    a9:ae:d0:47:5a:ee:f0:af:92:b4:ee:ce:90:c3:a0:
                    05:cb:5a:62:2f:36:c7:b6:79:c7:b0:26:da:ea:87:
                    0e:b6:3b:d6:ac:ee:7c:ef:c2:07:8e:48:3b:de:11:
                    03:49:6e:78:b3:99:07:8e:e3:d6:80:aa:b8:5e:8f:
                    5e:e6:1e:09:c3:3f:8a:12:42:d7:16:ce:68:03:70:
                    59:a1:1b:c2:2a:43:be:00:66:67:06:8f:40:05:f2:
                    fd:27:52:1c:c3:aa:51:b5:ee:a8:d0:1f:b5:8e:c2:
                    6e:ec:bc:29:2a:d1:95:c9:64:3a:bb:fb:5b:0a:6f:
                    4b:b0:9e:1d:5c:3a:7f:38:f1:d5:4c:f6:f5:d9:75:
                    f5:cc:d0:ad:af:12:cb:42:7b:7f:9f:f2:6e:99:08:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BC:13:1B:AD:CB:2E:60:DE:E3:38:AC:0A:FA:D6:D0:D8:D7:2C:D4
            X509v3 Authority Key Identifier:
                keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/CLwTG63LLmDe4zisCvrW0NjXLNQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:45:43:82:33:23:af:96:0f:eb:c2:22:72:e0:59:67:a7:5d:
         3f:82:25:84:44:64:84:79:c3:b2:04:7e:12:5c:37:c0:b1:61:
         e9:14:ca:06:51:77:fa:d1:eb:38:eb:6d:22:de:e9:c5:8f:5e:
         f4:31:8e:c1:31:a9:54:6f:ca:9a:05:7c:0e:bf:d2:00:24:07:
         aa:ec:df:61:a1:6c:1b:f2:52:4c:6c:cb:2d:4e:12:2d:d1:f5:
         c7:c5:a6:c9:52:cd:53:73:10:a4:d5:c8:02:2d:39:18:17:74:
         fe:a9:5f:04:5b:25:f8:ed:22:a6:cd:fc:8b:e8:d3:3c:7f:d3:
         ab:e2:8a:a3:82:f2:0b:a0:d6:60:09:b3:c5:f6:83:ff:2e:db:
         02:6f:4e:65:43:c6:3c:81:df:25:ff:00:aa:c2:c1:a0:06:08:
         72:b3:85:d7:84:3f:d6:2d:f3:80:57:a3:a8:16:ee:39:d4:b7:
         ab:a1:e3:1f:ea:0f:d6:9e:d2:48:06:e7:c2:ca:ec:32:a8:c4:
         c7:8b:d5:ff:68:af:65:04:95:53:13:58:d8:f3:c5:e7:de:0e:
         dd:22:7d:f4:09:b9:46:d7:1c:cc:78:6c:e8:c8:76:fa:74:f2:
         30:77:d8:ca:9f:6d:98:c4:96:84:05:4b:c6:70:21:b3:8c:c5:
         29:1c:07:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----