Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/466TB7Qv28K1EH6h7czTCxR6hRs.roa
File:                     466TB7Qv28K1EH6h7czTCxR6hRs.roa (raw, json)
Hash identifier:          XKB1XT3XdJPwRfECGh20LqTZgiDEsyYa8opTb8WtJiU=
Subject key identifier:   E3:AE:93:07:B4:2F:DB:C2:B5:10:7E:A1:ED:CC:D3:0B:14:7A:85:1B
Certificate issuer:       /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial:       0253ADA7
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/466TB7Qv28K1EH6h7czTCxR6hRs.roa
Signing time:             Sat 01 Jan 2022 03:56:51 +0000
ROA not before:           Sat 01 Jan 2022 03:56:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39591
IP address blocks:        45.84.4.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39038375 (0x253ada7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
        Validity
            Not Before: Jan  1 03:56:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e3ae9307b42fdbc2b5107ea1edccd30b147a851b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:d6:b1:77:1a:a9:06:5f:21:e5:f7:67:54:
                    3d:27:e6:7d:84:bf:2e:7e:f0:66:be:a0:f5:70:45:
                    ab:f7:57:62:e7:32:0a:d4:be:5b:3f:5f:06:54:a6:
                    bd:64:99:98:21:fc:20:e8:c4:3f:bf:5e:de:b1:80:
                    b5:26:d0:f7:d5:df:db:42:ec:8f:4e:86:47:cd:79:
                    c5:ea:f8:fd:2d:c0:90:98:c6:07:d5:89:6f:3a:f8:
                    4d:c2:b7:3d:cb:a3:72:97:01:32:b8:11:79:fc:6e:
                    0b:95:85:ca:a4:3b:b0:ea:69:4b:73:09:43:32:46:
                    4f:55:3b:d4:25:ac:db:de:95:3f:13:57:13:b3:b9:
                    d5:4b:a6:cd:6c:72:9d:c1:cf:20:8b:d2:db:35:d3:
                    65:0d:87:75:07:b7:5c:2f:62:e5:88:53:21:74:14:
                    c4:f9:7f:2f:e3:e1:2a:24:b5:97:f8:a0:9c:fa:82:
                    f5:c5:69:e1:78:65:7e:dd:55:1f:8f:79:4e:55:df:
                    16:8d:16:c5:01:67:58:93:82:86:ea:22:e3:5c:09:
                    6f:09:c9:d0:95:51:4d:39:ad:00:ea:0e:ac:ad:7e:
                    d6:fc:5b:5a:ef:fb:af:40:26:e9:c2:00:a8:29:8a:
                    92:49:94:bd:17:e9:5b:e4:c5:e0:94:13:ed:89:03:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AE:93:07:B4:2F:DB:C2:B5:10:7E:A1:ED:CC:D3:0B:14:7A:85:1B
            X509v3 Authority Key Identifier:
                keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/466TB7Qv28K1EH6h7czTCxR6hRs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:60:23:19:be:c5:ee:1d:e5:fb:97:36:38:e5:68:c6:a0:53:
         5a:6c:19:2c:b7:db:dd:97:8f:5d:52:28:c8:99:1c:26:5e:ed:
         4d:bb:34:2b:a8:3f:28:f6:87:42:96:0c:92:7c:c1:fe:d1:0b:
         9f:cf:1c:24:6d:50:ff:25:78:87:3e:0d:2e:44:6e:39:ef:a2:
         7c:83:e2:1d:d5:a3:80:2d:b8:8b:7e:68:49:a9:b6:96:86:25:
         33:78:3a:6b:4e:b1:d3:b7:94:08:e9:b8:08:fa:a3:32:bf:89:
         b6:da:56:8d:a8:d7:64:4c:a0:88:c4:8a:8a:3d:4a:5c:4b:d1:
         73:b9:d0:1f:50:28:b3:13:a0:7f:79:e3:8d:39:8f:3c:70:e7:
         f5:f8:ac:ac:6f:81:6a:e9:3d:15:3e:51:33:5e:48:8a:e6:77:
         45:50:8e:6b:94:1e:ff:05:bd:5b:89:77:8b:a2:72:a8:a5:91:
         00:c0:bf:16:e1:7d:5c:1a:f7:6e:51:f0:a9:37:ab:ed:d6:dd:
         d2:94:29:a8:cc:05:f9:37:51:c5:3a:3b:6f:ae:29:6e:a7:28:
         54:a7:35:19:86:ca:b0:6e:a9:d9:04:22:ac:69:f0:3b:ba:7e:
         55:5f:60:92:3e:06:95:da:65:9b:9e:86:3a:03:b9:b9:bf:0b:
         91:b7:eb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----