Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/VfVmh2p28P4C13eoPClwirs7Mt8.roa
File:                     VfVmh2p28P4C13eoPClwirs7Mt8.roa (raw, json)
Hash identifier:          JmaHAWVK5Q14hIVGYzriiCymIn0ODMNgXSBjZUOiKuc=
Subject key identifier:   55:F5:66:87:6A:76:F0:FE:02:D7:77:A8:3C:29:70:8A:BB:3B:32:DF
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       0183557E66168DF33ED4C5A461BC72C1E376
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/VfVmh2p28P4C13eoPClwirs7Mt8.roa
Signing time:             Mon 19 Sep 2022 11:24:50 +0000
ROA not before:           Mon 19 Sep 2022 11:24:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34549
IP address blocks:        45.156.44.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:55:7e:66:16:8d:f3:3e:d4:c5:a4:61:bc:72:c1:e3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Sep 19 11:24:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55f566876a76f0fe02d777a83c29708abb3b32df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:9b:ed:7a:cf:9f:84:4b:35:3a:3c:50:93:
                    0f:1a:59:94:f0:b5:27:45:16:e2:0f:99:cc:b9:83:
                    ef:9c:fe:42:6b:05:3d:3a:51:cc:c6:d3:18:fb:30:
                    db:90:c1:6d:ff:09:5a:b3:03:d0:05:14:cf:30:21:
                    27:0f:a4:48:2e:ef:fb:67:f1:3a:cd:0e:b8:a2:1f:
                    10:80:83:03:7a:6c:d3:ab:91:b4:6f:5a:4c:ed:7e:
                    a6:1e:1e:b1:f1:33:5a:2c:81:e5:d0:88:05:8e:29:
                    1b:14:92:84:e0:98:8e:60:d7:0e:0f:f8:79:64:24:
                    6e:07:a2:d4:9f:73:74:14:c1:c1:ff:00:42:22:94:
                    c9:23:67:e2:09:29:36:99:83:33:b0:92:b9:f3:77:
                    08:22:24:f4:ed:46:37:03:bd:04:2c:18:a9:87:dc:
                    4e:98:6b:95:35:62:00:85:c7:a7:38:44:67:bc:f5:
                    cc:7f:15:2d:ea:0b:f5:00:91:e6:a0:46:3f:b4:56:
                    b5:fc:f7:c8:ea:80:49:1e:29:9c:91:5a:97:a0:fe:
                    f6:8c:50:63:f5:39:f0:6d:99:d6:9b:1a:ba:d3:14:
                    f9:e2:38:20:20:63:2c:f7:dc:6d:d5:13:f1:55:cf:
                    53:a6:cd:d3:d3:fa:56:d5:e2:e5:bb:7a:4a:b6:45:
                    a6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F5:66:87:6A:76:F0:FE:02:D7:77:A8:3C:29:70:8A:BB:3B:32:DF
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/VfVmh2p28P4C13eoPClwirs7Mt8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:b9:17:95:0d:70:56:51:a7:33:3b:49:5d:18:2e:10:b9:6c:
         46:51:46:9f:ad:20:59:c2:71:3c:7a:7a:2a:92:50:a4:a9:bc:
         98:d5:a4:1d:9b:e6:e2:3a:1e:41:1d:72:fe:a2:64:43:e0:a7:
         d9:09:19:34:5d:e2:95:2b:42:99:5a:5d:f9:25:d6:b1:3c:84:
         d6:d9:84:c6:b4:5b:28:32:1f:5c:93:cc:8b:de:9c:22:80:45:
         b5:9e:eb:04:fa:b8:2d:15:20:50:fd:b6:8f:43:d1:7d:32:ed:
         13:d7:1c:68:68:ca:a6:9a:10:2f:26:3f:fb:75:8d:bd:d2:b4:
         12:95:f8:8d:cf:6f:c9:1b:58:99:8c:d1:27:c4:66:4e:6a:2a:
         6c:ea:87:07:ae:ac:8c:e7:9f:55:99:79:c1:52:25:16:bf:d9:
         87:26:64:d5:73:32:9b:79:ff:23:e8:6b:f1:1d:ef:2a:40:46:
         b2:05:7d:06:da:f9:9a:e4:87:cb:64:21:38:9c:eb:0d:47:6a:
         86:44:a7:b2:2e:b9:c9:4e:02:cd:dc:9c:2c:3f:a4:04:b9:a4:
         c8:4b:5d:7b:bf:ae:82:80:9e:69:c6:a6:37:f0:6a:58:ff:42:
         86:41:67:4d:59:54:56:a6:12:7e:af:a4:6d:9f:ee:8e:cf:2b:
         89:f8:8b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----