Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/Gq7NC1upp-ToYpqd1xRYKcW_bWY.roa
File:                     Gq7NC1upp-ToYpqd1xRYKcW_bWY.roa (raw, json)
Hash identifier:          McDByS4WMiW1ORiXV67UYQSPTeC5xnrYSVF5JgPhyqU=
Subject key identifier:   1A:AE:CD:0B:5B:A9:A7:E4:E8:62:9A:9D:D7:14:58:29:C5:BF:6D:66
Certificate issuer:       /CN=110aaf9016a68752fc9132149b91e8fab16e24be
Certificate serial:       06902C85
Authority key identifier: 11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/Gq7NC1upp-ToYpqd1xRYKcW_bWY.roa
Signing time:             Sat 01 Jan 2022 10:04:35 +0000
ROA not before:           Sat 01 Jan 2022 10:04:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47755
IP address blocks:        45.90.164.0/22 maxlen: 24
                          2a0e:2c0::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110111877 (0x6902c85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110aaf9016a68752fc9132149b91e8fab16e24be
        Validity
            Not Before: Jan  1 10:04:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1aaecd0b5ba9a7e4e8629a9dd7145829c5bf6d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:92:48:51:5f:fd:61:c1:72:4b:07:9d:4d:56:
                    0b:d9:e6:93:ef:52:74:99:eb:47:12:13:2d:eb:36:
                    3a:72:ad:ef:e9:3c:3f:40:17:5c:15:7f:e6:07:24:
                    85:32:72:8d:2c:da:fb:27:de:5e:96:10:6d:37:f1:
                    cd:6a:8c:c4:89:c0:b3:49:a9:df:14:9f:a4:01:7b:
                    ce:4d:44:ee:a6:76:58:72:58:0f:31:10:33:13:cc:
                    21:f2:5b:6f:e7:14:27:ee:a5:e0:1b:26:84:0a:d3:
                    7d:28:e0:e3:c3:b6:be:17:ec:dc:23:ef:bd:d4:53:
                    0e:7f:07:5d:01:f6:01:82:f1:97:7e:b9:a3:d4:e9:
                    5e:22:be:7d:d0:75:3c:60:cd:22:a6:c5:73:66:28:
                    5f:40:ad:1a:c1:ef:04:f4:9d:d5:58:c7:19:c8:c7:
                    e7:4b:fe:03:ae:b4:f5:e4:5e:f2:14:38:f2:e3:f5:
                    78:35:d8:d5:cf:9e:b5:7a:51:69:1b:60:ed:24:07:
                    03:05:dd:4a:b5:55:0e:84:b0:d5:f6:de:32:67:79:
                    68:89:ac:5a:8e:78:e6:83:5c:a7:4c:c3:53:73:e6:
                    04:a2:2c:9c:de:17:cc:f8:81:99:cc:fc:0b:c6:1c:
                    6b:29:ee:26:a8:fb:4f:61:4a:3a:39:8c:a7:ae:64:
                    fc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AE:CD:0B:5B:A9:A7:E4:E8:62:9A:9D:D7:14:58:29:C5:BF:6D:66
            X509v3 Authority Key Identifier:
                keyid:11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/Gq7NC1upp-ToYpqd1xRYKcW_bWY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.164.0/22
                IPv6:
                  2a0e:2c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         cf:24:e5:ea:91:db:78:3b:d8:55:de:39:6e:2b:90:7f:f7:60:
         a2:8f:6f:18:c3:42:8b:dd:37:4e:c8:84:53:5a:a9:10:91:0e:
         06:6d:ce:13:ff:7d:ad:6e:11:1d:4b:01:1f:b7:d7:0b:e1:63:
         87:a4:10:79:02:c9:e3:4e:41:b3:59:14:90:b8:1c:46:fe:63:
         3f:23:69:1b:78:e6:18:df:c2:21:51:d5:23:ef:e4:66:73:50:
         31:0b:90:fc:91:d9:d4:55:03:c6:e1:9d:f5:4a:1a:4b:8f:ac:
         fc:9c:f7:15:73:00:2c:65:73:82:18:6e:ef:aa:b8:4a:1f:0c:
         cf:22:c9:76:9f:80:ab:01:79:16:0b:d7:2f:e6:bd:99:7c:4e:
         74:62:9c:28:2f:3c:72:15:d7:2a:35:97:1b:53:28:af:5e:17:
         5d:e6:3a:ee:e4:84:cd:bf:18:a3:67:8b:9b:b4:c7:04:1e:f7:
         66:45:4b:b4:96:05:e6:40:3d:c4:5a:37:12:10:03:49:b9:fa:
         99:f3:d6:8a:41:6b:47:3a:fd:4b:0b:d8:41:3f:0a:4b:95:1a:
         0b:32:57:0d:2c:6e:3d:fc:30:e8:7d:a1:27:7c:49:f5:c7:31:
         d7:fb:d9:f9:ec:b6:eb:0a:12:c8:e8:56:fe:7c:b9:38:84:3c:
         15:b3:cc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----