Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/_Bn7im0wiBpSWMhwuBsTF0kplqc.roa
File:                     _Bn7im0wiBpSWMhwuBsTF0kplqc.roa (raw, json)
Hash identifier:          ZVEyUOUZOl36p5RYzqpz6S9YZ/b7AGjJEw7aLa0DfxI=
Subject key identifier:   FC:19:FB:8A:6D:30:88:1A:52:58:C8:70:B8:1B:13:17:49:29:96:A7
Certificate issuer:       /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial:       07764F04
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/_Bn7im0wiBpSWMhwuBsTF0kplqc.roa
Signing time:             Sat 01 Jan 2022 02:59:41 +0000
ROA not before:           Sat 01 Jan 2022 02:59:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     553
IP address blocks:        45.90.132.0/22 maxlen: 22
                          2a0e:3c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125193988 (0x7764f04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
        Validity
            Not Before: Jan  1 02:59:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc19fb8a6d30881a5258c870b81b1317492996a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:9b:af:af:42:b2:90:52:49:c0:7c:59:18:
                    ec:4a:9f:39:f5:2c:c4:a9:2a:98:c7:a4:34:0d:2c:
                    d2:cd:5c:2b:13:22:7c:cc:b0:0e:e5:90:6e:12:9a:
                    b8:b5:c4:f2:35:16:cc:68:7a:26:17:9a:ea:82:b8:
                    62:cb:ec:5c:4d:1b:b6:4c:af:37:ad:b1:d1:76:eb:
                    2a:fe:74:75:d6:02:d5:6c:0e:45:0b:22:af:8d:e7:
                    c6:b3:77:fc:b0:77:85:3a:94:44:e1:8c:b6:f6:34:
                    33:66:db:2f:88:66:ea:4f:f5:5e:cc:7f:2c:4f:06:
                    77:ab:48:d5:72:3e:7a:00:00:af:90:63:44:bf:40:
                    e1:d8:b8:a1:18:2c:bd:1f:39:6c:01:73:de:dc:03:
                    ee:38:43:c6:61:fd:ed:25:50:7f:db:de:62:94:e6:
                    6d:72:c6:92:5c:0d:f5:50:21:b8:ff:7a:79:d8:23:
                    37:d4:16:f7:9d:4c:97:78:b5:4e:5f:c2:df:2c:2f:
                    4a:c2:28:dd:75:b3:8c:9b:9a:85:07:65:6f:df:0e:
                    c8:2c:7c:0e:b9:ff:f9:51:7e:a6:10:88:b1:aa:5e:
                    ab:7c:c8:72:94:ea:5a:bd:2c:33:48:c5:a2:13:5e:
                    90:f1:62:20:4b:0a:40:70:29:33:bf:05:64:3f:1e:
                    58:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:19:FB:8A:6D:30:88:1A:52:58:C8:70:B8:1B:13:17:49:29:96:A7
            X509v3 Authority Key Identifier:
                keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/_Bn7im0wiBpSWMhwuBsTF0kplqc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.132.0/22
                IPv6:
                  2a0e:3c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8d:f6:85:57:4d:ca:0a:1d:cc:d2:90:bf:2d:c4:77:7e:33:e2:
         81:65:46:c7:12:7c:e6:a6:6b:8f:1d:14:15:bc:b6:6b:22:cc:
         9c:9c:70:89:f4:db:1a:d6:b9:08:66:6d:61:6e:f1:b7:8e:da:
         01:3b:63:6e:26:bb:b4:6a:40:5a:0a:48:41:1d:fa:8d:84:c8:
         57:76:ec:ba:d9:0a:68:7e:5f:32:5b:75:eb:b9:a5:de:ae:72:
         71:1d:d9:31:ba:39:92:c7:12:b5:c3:f3:a7:99:3a:bc:8b:88:
         d0:bf:bc:4e:ce:7d:7e:84:ce:0a:f8:27:c0:23:ef:b4:10:e8:
         92:12:63:98:2b:b4:8d:4a:64:90:04:b0:01:ee:da:86:fa:c7:
         22:fc:40:07:9d:2e:62:40:52:f2:76:49:5a:5d:41:1d:55:43:
         d0:bd:04:1a:95:35:dd:40:e2:d0:02:ee:ca:25:b6:4f:d5:d5:
         32:f2:b7:eb:ae:57:e9:8c:fc:ed:69:55:d8:ca:0f:41:87:35:
         5b:f8:53:03:c1:b1:f5:48:ff:10:42:c8:1a:46:ee:8a:01:7b:
         bb:82:4e:ae:95:a5:96:3d:24:b0:7f:9a:63:5a:d5:de:3e:7c:
         f8:07:20:f2:60:dd:3c:46:b5:ad:b3:2d:88:cd:4a:a3:fd:11:
         5b:db:d8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----