Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/L-TbUCgz64pYYohXeYch-_FLTrI.roa
File:                     L-TbUCgz64pYYohXeYch-_FLTrI.roa (raw, json)
Hash identifier:          ky8Fd67oD+53zQPzbqdRBTJnxY+neukGUb7sxZ6UxlY=
Subject key identifier:   2F:E4:DB:50:28:33:EB:8A:58:62:88:57:79:87:21:FB:F1:4B:4E:B2
Certificate issuer:       /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial:       0939C7CC
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/L-TbUCgz64pYYohXeYch-_FLTrI.roa
Signing time:             Sat 01 Jan 2022 09:04:20 +0000
ROA not before:           Sat 01 Jan 2022 09:04:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209382
IP address blocks:        45.67.236.0/22 maxlen: 24
                          2a09:7d40::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154781644 (0x939c7cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
        Validity
            Not Before: Jan  1 09:04:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2fe4db502833eb8a58628857798721fbf14b4eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:33:8d:7b:9a:4b:c6:d2:c5:32:10:87:ac:
                    a0:60:25:56:40:02:6e:c8:93:2e:6a:3a:15:89:e4:
                    71:45:a1:05:15:b1:7b:be:ba:e8:68:53:5a:7b:52:
                    55:dc:b8:e7:12:7d:9f:c6:17:8f:b4:39:98:96:34:
                    26:34:e1:18:68:a9:f0:54:d9:41:0e:52:2e:62:31:
                    3d:6f:fc:eb:c3:6a:e2:75:74:72:15:8c:00:b8:95:
                    f6:a4:91:54:d4:59:ea:8a:ab:15:d4:01:53:0a:5a:
                    46:ee:d3:97:8c:96:60:35:a9:d3:fa:7e:a1:2d:44:
                    09:42:54:31:30:e7:52:5d:da:98:64:43:cb:2e:f8:
                    ca:17:42:16:85:01:bf:65:c2:e9:5f:f0:7b:6f:32:
                    eb:4e:e7:b7:54:51:f7:0f:51:ce:08:1f:d8:74:96:
                    e5:f9:3c:45:1c:10:ce:d2:0b:4c:96:05:0a:fd:7d:
                    6d:76:c7:ae:f4:40:4f:99:5d:95:4a:fe:fc:cd:21:
                    f8:ff:a0:ed:9f:bf:75:d3:b6:e6:18:12:6b:8e:08:
                    52:87:2a:8d:5b:52:9d:c8:16:ae:7e:97:39:c8:36:
                    9d:97:68:b1:75:2e:d9:52:12:84:5f:1a:ae:e0:0f:
                    ba:0b:7c:f5:eb:d6:6b:9e:6c:6f:36:6f:24:1a:d3:
                    f4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E4:DB:50:28:33:EB:8A:58:62:88:57:79:87:21:FB:F1:4B:4E:B2
            X509v3 Authority Key Identifier:
                keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/L-TbUCgz64pYYohXeYch-_FLTrI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.236.0/22
                IPv6:
                  2a09:7d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:33:7d:64:92:d9:67:80:fb:22:01:e4:56:9b:aa:3d:a8:f7:
         23:77:f6:4c:69:bc:b1:6a:9c:ec:9f:fb:c1:a4:28:1e:cd:a1:
         72:9e:35:b3:4a:82:b3:29:b8:9b:54:1c:97:68:1f:6b:c7:98:
         79:af:0f:d9:a1:29:f5:f5:9e:d9:4d:14:c6:c0:0d:96:5a:b4:
         25:9e:0f:d6:85:1e:f3:c8:b9:91:48:dd:7b:17:26:13:66:74:
         2a:bf:38:1b:c7:18:03:de:02:0c:9c:a2:70:e6:a2:a4:5c:50:
         4a:d3:2d:88:18:42:91:ff:d0:3f:63:31:43:73:cb:9c:4a:72:
         fd:01:77:d3:57:d3:e1:31:06:52:23:91:b0:bb:6e:4b:ae:c4:
         88:05:2c:d7:f9:28:5a:63:63:6a:91:bd:2d:90:20:30:ea:aa:
         96:8e:d2:37:12:83:49:68:11:72:24:53:53:a7:c4:0f:45:40:
         44:bc:1a:87:79:51:41:89:67:8d:db:4a:63:aa:47:df:ba:1b:
         cd:19:8d:6d:a7:9c:2e:61:73:e7:75:d3:73:b1:17:b8:3a:92:
         4d:60:e0:ac:ae:a4:0c:e6:34:95:b1:5d:ba:c7:ed:9e:67:e8:
         33:80:1d:32:ed:49:b3:55:24:1b:3c:f1:fb:d4:42:79:66:50:
         ef:82:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----