Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/tprUZ-_UOED3HvGTnIFryK9cLa4.roa
File:                     tprUZ-_UOED3HvGTnIFryK9cLa4.roa (raw, json)
Hash identifier:          vF5eOBFCiwoyvfXcbzMbzQROvlALHJzoJy1TBIGmha0=
Subject key identifier:   B6:9A:D4:67:EF:D4:38:40:F7:1E:F1:93:9C:81:6B:C8:AF:5C:2D:AE
Certificate issuer:       /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial:       058CA30D
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/tprUZ-_UOED3HvGTnIFryK9cLa4.roa
Signing time:             Sat 01 Jan 2022 08:55:15 +0000
ROA not before:           Sat 01 Jan 2022 08:55:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62321
IP address blocks:        45.89.8.0/22 maxlen: 22
                          2a0e:b40::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93102861 (0x58ca30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
        Validity
            Not Before: Jan  1 08:55:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b69ad467efd43840f71ef1939c816bc8af5c2dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:c6:bd:71:8b:b5:c8:d6:ec:b2:06:b2:85:
                    8a:9c:c6:d9:bf:f6:39:0a:b6:3e:d0:1b:1a:eb:47:
                    c1:33:43:ce:4b:2e:da:b5:1b:b2:c4:27:32:fc:78:
                    63:cf:76:24:72:4d:97:dd:1d:44:9a:a3:e8:e1:e3:
                    53:6c:d3:10:3f:a0:ee:60:2e:3b:77:3c:bd:81:6a:
                    fb:8f:b2:9f:c9:ad:45:3b:e9:82:d2:de:7b:1d:96:
                    6c:19:0a:d1:6d:ea:8e:fa:bc:7a:f8:b2:66:e9:c7:
                    10:f4:2e:7e:8e:af:d8:85:8c:f0:49:b4:ce:41:41:
                    35:ad:1d:eb:0e:16:f3:ee:2e:91:6e:b0:82:d0:1e:
                    ca:21:84:f9:2a:0d:d0:32:7d:08:3c:ce:6c:29:56:
                    d5:55:34:3d:be:8e:0b:7b:fa:1d:f4:72:b7:3f:75:
                    b9:bf:c1:22:88:77:3d:76:26:2e:86:bf:ee:81:16:
                    8a:07:13:ff:8c:14:94:64:f3:b8:8e:be:50:96:86:
                    a6:0f:5a:5d:4a:56:ed:95:c6:c2:e1:9e:92:96:d0:
                    2b:e6:a2:50:9f:90:42:54:9a:c0:fd:1e:72:fd:88:
                    03:08:47:79:81:35:8c:b3:90:de:1b:c1:92:b3:dc:
                    83:f6:3a:15:bd:37:41:7f:27:aa:99:ee:1d:bb:0c:
                    9a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9A:D4:67:EF:D4:38:40:F7:1E:F1:93:9C:81:6B:C8:AF:5C:2D:AE
            X509v3 Authority Key Identifier:
                keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/tprUZ-_UOED3HvGTnIFryK9cLa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.89.8.0/22
                IPv6:
                  2a0e:b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:8c:48:9c:d1:ef:11:2a:7e:9e:58:66:f0:fc:78:2a:7f:cd:
         64:c6:5e:ac:d2:38:1f:17:76:4a:46:c4:38:0e:b0:e2:78:d6:
         5f:ef:14:18:fd:70:f2:96:09:ec:18:97:b6:4c:ed:2c:62:3b:
         ac:cd:a6:b1:8d:d9:3c:71:f4:aa:40:31:2f:36:f9:5c:32:53:
         c7:b2:b7:52:35:ed:31:20:b5:10:38:ec:e0:b5:c5:a0:80:5a:
         9a:8e:55:32:41:b4:b6:87:64:11:b0:7e:6b:ed:8a:ab:3d:d8:
         60:7d:fa:ef:2a:d1:9e:05:c4:76:15:23:e5:85:49:f0:ea:4d:
         f4:78:ea:26:70:e3:c2:bd:60:d1:58:1c:07:89:29:3f:a2:98:
         55:a8:31:cf:ac:00:ac:e4:52:11:1d:a1:39:f2:4c:45:f0:60:
         3f:bd:22:66:fe:f5:b3:3b:78:14:de:5f:9c:52:26:e4:ee:6e:
         93:78:28:46:fe:a0:64:a1:9d:1e:52:78:0e:2d:34:50:87:21:
         47:2e:e0:db:0c:d7:d8:45:be:1c:1f:9a:2e:17:46:84:4a:9c:
         73:05:c4:1c:fa:cd:d9:81:db:b0:ab:76:d5:30:fd:89:72:63:
         14:11:e1:54:ad:80:e2:e9:fd:dd:61:0b:77:1b:10:f4:cf:0f:
         55:b4:73:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----