Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/A4zzPulZcr9Ph_LB4m4XOkvmqRM.roa
File:                     A4zzPulZcr9Ph_LB4m4XOkvmqRM.roa (raw, json)
Hash identifier:          mFthW50m/B7yZeRsGqLSQGTwZFFTUghc4T6OKvtuLkA=
Subject key identifier:   03:8C:F3:3E:E9:59:72:BF:4F:87:F2:C1:E2:6E:17:3A:4B:E6:A9:13
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       CF2A68
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/A4zzPulZcr9Ph_LB4m4XOkvmqRM.roa
Signing time:             Fri 03 Jun 2022 21:26:20 +0000
ROA not before:           Fri 03 Jun 2022 21:26:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        212.46.57.0/24 maxlen: 24
                          2a12:fc0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13576808 (0xcf2a68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Jun  3 21:26:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=038cf33ee95972bf4f87f2c1e26e173a4be6a913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:94:ab:f7:5c:85:72:a1:c4:c4:90:6b:54:
                    04:85:29:c5:d1:39:f2:fa:18:26:25:17:83:0b:ca:
                    3f:f3:56:98:74:8c:5d:7b:0e:ef:f5:ce:e4:4c:6b:
                    b6:22:28:99:a0:f6:df:66:03:50:e7:c0:ac:49:c3:
                    8e:0f:13:12:fa:50:20:ab:3a:c0:1f:b2:54:91:9f:
                    14:71:04:c3:30:d9:83:a0:0e:a1:67:ac:2f:8a:3c:
                    5a:a5:6e:45:d4:67:e7:93:17:d0:70:aa:4e:07:5a:
                    b1:c7:d9:1f:78:33:90:c3:90:6d:e2:8d:8e:95:38:
                    3d:2c:ea:20:96:06:b0:7d:74:cf:cf:c2:49:40:1b:
                    b9:60:ed:d0:c3:1f:55:cc:d8:30:5f:02:4c:f3:bf:
                    29:d7:b2:f1:01:6b:49:0c:d0:c0:7b:71:91:f6:35:
                    7c:99:0f:37:bf:85:56:d8:19:34:e1:47:2b:ec:71:
                    e4:f2:cf:53:4d:cb:82:d7:94:6a:e2:6f:f6:aa:68:
                    88:b1:8b:e5:b9:1e:0b:20:2c:ca:65:4f:71:12:52:
                    9b:15:45:f6:f1:51:5c:e9:f8:f6:d4:1c:b0:7a:d8:
                    e8:1a:74:03:21:8e:00:3e:e1:cc:bf:ba:0c:ab:c6:
                    06:25:44:aa:89:5c:20:fd:fa:f1:f1:44:e8:88:e2:
                    d0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8C:F3:3E:E9:59:72:BF:4F:87:F2:C1:E2:6E:17:3A:4B:E6:A9:13
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/A4zzPulZcr9Ph_LB4m4XOkvmqRM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.57.0/24
                IPv6:
                  2a12:fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:4a:40:b7:57:ec:c8:ae:10:42:8d:d8:72:5a:03:3f:32:32:
         c6:ad:94:8a:84:7e:82:89:40:f8:2e:ce:0d:15:b0:bc:de:86:
         41:da:2c:65:f8:c5:f9:90:37:58:d9:53:a1:0f:65:c4:a7:fb:
         4a:4b:db:36:06:af:e3:6f:c5:20:ea:0a:18:f3:2a:8d:ab:9a:
         1f:6c:79:86:6e:e8:4a:30:2f:2f:6e:b2:de:cd:01:90:23:d7:
         1c:ce:22:6f:d7:5e:40:21:6b:c5:a2:6a:97:64:32:13:c3:d6:
         34:c1:cc:0b:3e:a4:cc:ba:97:5f:30:a3:b2:00:a9:4a:0f:6a:
         4a:72:1f:09:8e:52:c5:fb:18:5a:e4:47:e3:d2:7b:f6:5b:dd:
         2f:f7:5c:94:a6:d2:a0:5b:64:9e:24:a6:d9:db:a7:17:8e:0c:
         16:42:61:c5:0e:7e:6f:f7:a7:26:fa:50:16:c6:db:55:d6:59:
         40:46:1b:18:98:68:10:79:7b:04:71:b5:e6:17:08:60:ef:b9:
         2b:d3:af:dd:3e:90:bd:a4:83:46:50:c0:77:32:d6:0a:f5:6f:
         a4:d8:6e:dd:c3:66:6b:03:d4:41:f6:ff:21:5d:85:32:cd:4c:
         07:41:15:0f:7c:7c:e6:ef:ad:e5:51:db:10:19:92:ac:b7:07:
         9f:71:09:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----