Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/y5fhhRI7U5SkWvw62-Sun-JUO8Y.roa
File:                     y5fhhRI7U5SkWvw62-Sun-JUO8Y.roa (raw, json)
Hash identifier:          oe33VGNRN1iK2ez2BSd9kgRTORtdK4C/UqK6MBrZPhU=
Subject key identifier:   CB:97:E1:85:12:3B:53:94:A4:5A:FC:3A:DB:E4:AE:9F:E2:54:3B:C6
Certificate issuer:       /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial:       0183C86182C12930AC473416D77EF953E2CB
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/y5fhhRI7U5SkWvw62-Sun-JUO8Y.roa
Signing time:             Tue 11 Oct 2022 18:49:37 +0000
ROA not before:           Tue 11 Oct 2022 18:49:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207027
IP address blocks:        45.142.216.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c8:61:82:c1:29:30:ac:47:34:16:d7:7e:f9:53:e2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
        Validity
            Not Before: Oct 11 18:49:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cb97e185123b5394a45afc3adbe4ae9fe2543bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9a:d9:2a:f9:19:75:56:9f:a9:e1:07:be:96:
                    73:29:d4:59:88:b2:82:3c:36:70:f2:a6:d3:1a:3d:
                    9e:ae:98:62:fb:0a:0d:0d:89:f5:38:b2:55:1b:ce:
                    86:c0:40:6e:90:d8:a5:7f:a8:f1:ba:c9:2c:90:ea:
                    8b:e2:fd:58:df:92:f0:cf:31:21:5a:09:7c:d4:f7:
                    a7:07:4f:bb:fe:37:d4:a3:7d:2c:03:92:9b:3f:a1:
                    42:cf:7e:e4:3c:3e:c7:e0:aa:fc:e9:e4:5a:25:d5:
                    cb:0b:19:4e:70:26:f5:b2:d9:6e:25:f6:fd:42:67:
                    99:e7:75:87:21:c3:55:b5:47:11:d9:40:17:26:24:
                    17:97:6a:53:91:ca:02:e5:5a:fa:bf:1c:af:54:8f:
                    c8:f0:a4:08:1a:93:cd:56:c1:91:f1:59:16:31:f3:
                    44:34:bb:6a:87:8b:5f:c1:32:ea:b3:92:50:57:34:
                    c8:98:9a:c3:e2:75:15:41:ee:69:88:48:4f:d0:05:
                    c1:97:99:65:27:04:1d:c8:48:61:a9:d4:43:a1:86:
                    0f:a6:75:fc:32:9a:95:13:95:7d:dc:3a:fa:40:09:
                    8a:fc:9d:3c:b4:8f:06:91:2b:84:fb:d7:ca:07:ac:
                    15:b3:59:51:31:bf:b5:fb:eb:f1:c7:08:6d:ee:af:
                    ad:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:97:E1:85:12:3B:53:94:A4:5A:FC:3A:DB:E4:AE:9F:E2:54:3B:C6
            X509v3 Authority Key Identifier:
                keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/y5fhhRI7U5SkWvw62-Sun-JUO8Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:ee:5d:49:70:2c:98:8a:a5:f8:0b:5a:b1:71:ef:1e:9e:8c:
         05:e4:c0:76:96:58:32:20:eb:14:6a:d5:23:5e:69:4b:e6:4d:
         60:e1:b6:d6:86:b0:34:dd:3f:8c:92:89:a6:aa:9d:5e:c4:b2:
         98:d3:af:18:57:77:d1:24:15:46:3e:56:9a:77:e8:99:61:e1:
         09:43:75:30:98:ea:da:1f:28:d3:39:de:c6:dc:64:e6:26:41:
         db:4d:e4:b1:cf:36:19:bb:1a:80:23:ef:fc:3e:8c:7a:09:1f:
         3f:c2:40:bd:c5:dd:2a:ec:e4:3b:f0:81:32:1c:3a:55:bb:24:
         64:cc:0c:b7:52:2b:de:d8:3d:b9:ef:c8:99:e6:e8:fc:46:10:
         02:f1:e9:1a:f5:81:b3:4e:d8:67:22:5a:c4:ce:b6:61:39:0b:
         d3:81:f3:08:f1:5f:76:40:5f:7a:fe:9f:c7:1d:5f:73:17:3f:
         99:7b:30:e2:40:a1:8d:04:1b:81:7d:47:93:83:8d:c3:5c:fe:
         13:58:91:75:a0:46:5e:01:92:88:9a:9c:05:23:50:b2:d6:97:
         33:2b:b1:89:d6:3f:89:39:0f:40:82:46:80:82:8d:bd:6f:7c:
         4c:bf:5d:8e:be:55:cb:06:83:1f:46:b7:a4:11:5c:00:98:86:
         98:70:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----