Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/nzC1OAqD4DgrJGdJbPEYa4AaZD4.roa
File:                     nzC1OAqD4DgrJGdJbPEYa4AaZD4.roa (raw, json)
Hash identifier:          9gLHjvEWgtlwRTNfUwsbb7vOLbZMLxrR9Izs3Sq7ifM=
Subject key identifier:   9F:30:B5:38:0A:83:E0:38:2B:24:67:49:6C:F1:18:6B:80:1A:64:3E
Certificate issuer:       /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial:       0408C94E
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/nzC1OAqD4DgrJGdJbPEYa4AaZD4.roa
Signing time:             Thu 17 Mar 2022 03:58:29 +0000
ROA not before:           Thu 17 Mar 2022 03:58:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6762
IP address blocks:        45.140.194.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67684686 (0x408c94e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
        Validity
            Not Before: Mar 17 03:58:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9f30b5380a83e0382b2467496cf1186b801a643e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b0:b9:51:ca:eb:93:4f:7c:cb:5a:00:ea:fa:
                    2f:37:0c:de:e0:f4:3c:b5:50:db:29:c4:83:0b:ff:
                    ed:93:d3:e5:6d:ad:41:46:ae:5e:1f:02:27:82:ff:
                    6f:cd:74:ca:6f:66:f8:e9:61:21:34:8a:89:ad:f5:
                    1f:da:d3:cd:67:cd:71:46:df:cb:7f:87:ae:41:ed:
                    e2:0f:34:0e:b9:e3:1c:41:2c:09:85:d4:56:46:3f:
                    ad:60:28:bc:c8:c9:d8:ca:4a:59:cd:56:15:d4:f2:
                    50:4f:69:d2:c4:41:15:ba:bd:bc:5b:04:95:1f:59:
                    25:77:3d:a4:24:c4:67:1d:48:e1:ba:3d:ff:50:34:
                    59:ae:cb:b5:61:c0:a5:0b:30:a7:3f:b0:f4:6d:47:
                    08:37:75:2b:ed:48:43:da:00:58:cd:2c:d4:5a:69:
                    41:89:fc:c0:a2:f0:12:1c:a9:dc:a7:e3:e8:94:1d:
                    2e:3c:bf:52:74:d0:e5:63:f1:ed:74:b1:11:99:47:
                    ba:7c:4d:30:84:47:b1:08:40:c7:b5:56:44:a5:ec:
                    7f:11:a6:89:6a:e4:dc:91:9d:1a:f3:15:0f:25:54:
                    72:c3:50:37:35:1e:2a:72:cf:d8:3c:92:da:0e:55:
                    7c:29:ef:30:92:81:03:80:42:8b:9d:e4:d9:a1:e6:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:30:B5:38:0A:83:E0:38:2B:24:67:49:6C:F1:18:6B:80:1A:64:3E
            X509v3 Authority Key Identifier:
                keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/nzC1OAqD4DgrJGdJbPEYa4AaZD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:2a:13:7a:47:33:c5:b4:6a:97:f7:d2:0a:88:5b:89:79:0c:
         da:1e:42:cd:84:d1:91:4c:f4:f3:d5:c1:9c:50:f5:08:b3:4f:
         59:03:5a:b8:cb:aa:a5:8e:4b:3c:e5:2a:3c:4d:6f:e7:75:64:
         e1:c1:a5:77:da:dd:19:ee:a5:bd:b4:97:6d:c2:26:28:15:76:
         04:bb:69:be:e6:fe:2c:0c:dd:9e:4f:ef:d5:a4:6c:74:b5:1b:
         bc:7d:b2:b8:56:fd:8e:fb:b4:61:ae:19:6b:a2:ef:22:cf:d1:
         d4:bc:21:47:f3:fd:dc:40:e5:d6:1e:c1:65:34:a0:c8:3b:0d:
         3e:05:2b:77:5d:21:28:82:b8:79:7f:22:f0:4b:72:71:c0:15:
         83:b2:f0:9d:db:a1:4e:7d:55:1c:cf:b2:d2:9f:d0:68:84:23:
         19:6e:90:18:7e:1c:58:c4:7b:00:8e:19:a4:c4:b7:42:3d:9e:
         73:bc:f4:ae:33:7a:1f:8b:03:1b:b3:35:e5:73:ef:61:9f:29:
         7c:b6:2c:52:c4:15:41:86:24:13:1f:02:40:6d:e8:ef:ca:e5:
         40:65:58:61:f1:ea:6f:2f:db:a7:66:4e:7f:a8:3a:76:0e:94:
         68:66:52:25:dd:e0:68:9e:75:e0:1c:a4:79:ae:e2:22:1e:55:
         9f:53:81:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----