Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/8dSNuLJhEHYiJrWKkPQ9TgnuKi4.roa
File:                     8dSNuLJhEHYiJrWKkPQ9TgnuKi4.roa (raw, json)
Hash identifier:          LCzsVQfTjwFKiSjulZk/pWBzhYYyqyToZ7rPB0hfQ44=
Subject key identifier:   F1:D4:8D:B8:B2:61:10:76:22:26:B5:8A:90:F4:3D:4E:09:EE:2A:2E
Certificate issuer:       /CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
Certificate serial:       0192E5FC
Authority key identifier: 4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/8dSNuLJhEHYiJrWKkPQ9TgnuKi4.roa
Signing time:             Sat 01 Jan 2022 15:03:05 +0000
ROA not before:           Sat 01 Jan 2022 15:03:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206516
IP address blocks:        45.8.140.0/22 maxlen: 24
                          2a0e:8200::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26404348 (0x192e5fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6df6838d03380141eb7e4ee55dc05d87061dc9
        Validity
            Not Before: Jan  1 15:03:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f1d48db8b26110762226b58a90f43d4e09ee2a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:2a:b1:13:c2:cb:44:1d:6a:f5:f9:c7:71:
                    ea:d7:fe:cd:73:4b:79:4b:58:91:47:a5:f6:84:71:
                    2f:d6:86:72:6d:28:3b:88:59:34:04:e7:8e:5f:06:
                    9e:5d:bd:af:e7:8b:17:d2:83:8f:14:ce:40:a0:d7:
                    c4:3e:16:49:07:11:67:d8:f9:41:50:38:1e:66:42:
                    ae:0a:29:a0:5e:0d:71:ee:97:77:00:6a:52:e3:2a:
                    22:28:8a:86:96:66:f5:17:f5:c2:ac:ab:a1:78:c3:
                    e1:21:17:2c:bf:14:12:7d:ae:a2:8b:53:d0:3f:e4:
                    da:6b:e1:c2:0f:31:35:57:b9:dd:11:b6:33:bb:41:
                    3c:26:e8:dc:46:7a:5a:18:f8:35:2b:76:31:dd:ae:
                    8c:2a:3a:78:ed:0d:fd:22:db:b0:ec:dc:d8:e9:bd:
                    e7:88:a6:69:a4:b8:62:8b:9e:ba:15:f8:05:f0:5f:
                    7d:07:50:54:57:b0:2b:68:8f:08:2e:00:69:64:cf:
                    62:81:f3:3d:4c:68:b8:3a:a3:84:06:ca:46:c5:de:
                    cb:2b:41:a3:65:6d:48:66:37:18:e5:91:09:26:08:
                    9d:c6:7d:65:1d:e0:ac:31:61:61:12:f0:46:4a:58:
                    27:2a:68:47:ea:a2:30:c5:5e:4b:3c:03:7f:2c:8a:
                    fd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D4:8D:B8:B2:61:10:76:22:26:B5:8A:90:F4:3D:4E:09:EE:2A:2E
            X509v3 Authority Key Identifier:
                keyid:4E:6D:F6:83:8D:03:38:01:41:EB:7E:4E:E5:5D:C0:5D:87:06:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tm32g40DOAFB635O5V3AXYcGHck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/8dSNuLJhEHYiJrWKkPQ9TgnuKi4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/6eeb5c-d251-470a-a7cd-318362004e8a/1/Tm32g40DOAFB635O5V3AXYcGHck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.140.0/22
                IPv6:
                  2a0e:8200::/29

    Signature Algorithm: sha256WithRSAEncryption
         1f:09:70:84:b2:73:96:9c:59:81:7a:cc:b5:d6:f9:3a:20:cc:
         d5:39:fd:e4:d6:b2:d7:22:fb:c7:91:2b:e4:8c:19:ea:8f:d4:
         89:d5:1c:56:b7:b1:07:60:32:ad:e1:93:49:f2:67:38:e7:5d:
         ff:b3:4f:03:fe:ed:e1:63:62:37:dd:26:c1:1c:38:ea:02:7f:
         b3:56:1c:2f:8e:35:27:31:90:f9:ab:81:d5:0d:ed:f7:d6:b3:
         d7:b0:c1:83:23:cb:71:cd:c8:bc:6a:ad:4b:69:7c:2d:ea:3f:
         cd:9d:72:61:5f:0a:00:7c:1c:1c:87:d7:90:a5:8c:7a:fe:f0:
         08:cd:09:ec:e8:04:a0:ba:33:cc:fd:c9:27:73:df:e8:c3:7a:
         09:d5:03:ff:92:5f:89:b4:d3:06:9c:a4:79:5e:2a:76:b1:6a:
         31:71:f8:01:df:58:76:bc:37:5f:18:99:c1:3f:15:10:0d:b5:
         64:10:99:c7:52:f1:68:31:27:9b:26:03:b5:e8:64:03:67:f5:
         8e:0a:14:8a:a4:84:f2:b7:9f:d1:94:d2:0c:01:83:87:25:37:
         33:fd:a6:04:6e:30:e3:97:62:9a:74:45:aa:8f:25:20:b0:f3:
         32:0a:79:be:76:8f:4b:1b:ff:f9:5c:ba:99:05:ff:c5:28:5a:
         bf:e4:74:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----