Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/RfrHhapjU3-0QznvmbGVeEEsrrw.roa
File:                     RfrHhapjU3-0QznvmbGVeEEsrrw.roa (raw, json)
Hash identifier:          5omNEVdm4UBTD0hlJTu0DMeuXmTOuOYfaX9BLnQ86Jw=
Subject key identifier:   45:FA:C7:85:AA:63:53:7F:B4:43:39:EF:99:B1:95:78:41:2C:AE:BC
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       CE0B3B
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/RfrHhapjU3-0QznvmbGVeEEsrrw.roa
Signing time:             Fri 03 Jun 2022 21:26:20 +0000
ROA not before:           Fri 03 Jun 2022 21:26:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        212.46.57.0/24 maxlen: 24
                          2a12:fc0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13503291 (0xce0b3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Jun  3 21:26:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=45fac785aa63537fb44339ef99b19578412caebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d8:2e:b2:2c:3d:05:e4:34:8e:ab:a6:41:63:
                    cb:0f:a7:e7:14:69:9c:99:2e:89:65:38:d0:a1:bd:
                    9d:0d:a6:38:ae:1e:e8:50:d9:32:2f:7c:f2:46:ba:
                    50:e4:2e:55:a9:b2:0f:13:59:3d:b5:db:c1:ea:d5:
                    fc:40:44:8a:c1:32:e2:f4:1e:b6:f2:7f:3e:02:1e:
                    6a:c5:9c:05:05:f9:ba:95:84:2a:a6:20:df:7d:94:
                    a6:30:7b:2d:51:23:2b:46:f9:1b:fb:e1:92:16:eb:
                    38:56:7e:ec:c3:53:88:bd:ae:7e:86:17:23:9c:60:
                    43:98:9a:e7:90:5a:c5:de:9b:15:4c:d6:79:8e:5c:
                    cc:c4:2c:00:d7:ea:6e:53:f9:e5:09:bf:c7:a5:bb:
                    f9:6a:f7:f9:e7:65:5d:33:d8:60:e6:91:ed:8f:7a:
                    43:ac:ce:6a:5c:1f:8a:36:d9:19:b5:87:ff:e1:45:
                    65:05:6d:bd:ba:73:7d:a6:cf:94:09:ab:ee:fd:2c:
                    44:c4:ac:4e:6c:45:69:b6:16:45:db:a1:51:3e:83:
                    64:1b:b1:c2:31:89:2b:b6:a6:0a:f0:8c:2f:42:3d:
                    9c:f1:3d:59:6c:1e:c1:50:75:e5:82:7f:7b:c5:00:
                    49:e6:20:bb:c1:85:43:29:3a:14:f5:cb:7e:50:d2:
                    a7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FA:C7:85:AA:63:53:7F:B4:43:39:EF:99:B1:95:78:41:2C:AE:BC
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/RfrHhapjU3-0QznvmbGVeEEsrrw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.57.0/24
                IPv6:
                  2a12:fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:0e:ad:23:09:f4:7c:d4:fb:eb:b4:f6:2d:9e:6f:18:83:9b:
         4a:90:7a:ca:88:15:35:e0:ff:7f:c5:4d:96:00:ab:17:4b:2e:
         30:61:dc:95:5f:d7:9d:fe:8d:c4:65:45:b5:1e:2e:51:9b:0d:
         f3:21:1b:50:2a:36:db:3e:96:34:60:76:05:9e:70:8d:70:32:
         35:3c:60:78:3e:d8:94:9c:29:4d:b5:a0:33:2e:0a:99:26:b8:
         06:91:80:1f:51:a1:07:d3:d9:3e:3f:6a:19:7e:a9:f9:17:99:
         94:c7:ed:79:28:9f:b8:01:b9:3a:85:4b:a1:6e:07:1a:03:3f:
         ef:36:39:19:3e:e5:99:87:af:bb:01:be:e4:57:e7:1e:95:af:
         1c:b1:90:6f:b2:b8:f2:34:9b:cd:50:8c:23:3e:d0:a4:d0:b7:
         4f:d0:48:c5:f2:4f:ff:a2:34:ae:0a:2e:ed:d3:3f:2c:ed:b8:
         30:e8:51:f0:e0:4b:eb:0a:6f:94:ea:fa:fd:1d:5e:d6:00:cf:
         5d:69:ca:a5:e8:e8:47:1d:03:20:b7:dd:13:e0:7e:d4:1e:5f:
         ca:fa:01:55:85:44:e0:dd:17:93:24:e9:6c:2b:da:82:66:0c:
         fd:71:f0:34:80:a1:af:a8:0e:db:60:9a:bf:5a:4c:5f:98:cb:
         48:86:e6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----