Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/9DCL2rtWEv5j88T3ASfBqpzN-1A.roa
File:                     9DCL2rtWEv5j88T3ASfBqpzN-1A.roa (raw, json)
Hash identifier:          re/vEd3pafVGPrEkmLmwkKgi+boluwf9Arhsg0cXHw0=
Subject key identifier:   F4:30:8B:DA:BB:56:12:FE:63:F3:C4:F7:01:27:C1:AA:9C:CD:FB:50
Certificate issuer:       /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial:       0184400049ADE1FD0A15C6D45741EE37C702
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/9DCL2rtWEv5j88T3ASfBqpzN-1A.roa
Signing time:             Fri 04 Nov 2022 00:17:51 +0000
ROA not before:           Fri 04 Nov 2022 00:17:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6939
IP address blocks:        45.93.21.0/24 maxlen: 24
                          2a12:a080::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:40:00:49:ad:e1:fd:0a:15:c6:d4:57:41:ee:37:c7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
        Validity
            Not Before: Nov  4 00:17:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f4308bdabb5612fe63f3c4f70127c1aa9ccdfb50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f8:8d:c5:a0:d9:3e:67:0b:5c:1e:53:a1:07:
                    8c:27:3f:99:55:02:41:be:2c:5a:47:50:42:81:5d:
                    9c:1a:7b:75:f0:b4:20:57:e1:28:71:a9:ea:7b:df:
                    8d:b8:65:b8:c2:4b:73:12:43:e6:dd:7f:1b:ae:9c:
                    85:67:82:18:65:19:51:85:bd:18:30:e6:71:c1:b4:
                    3b:f8:cd:9b:71:e8:91:67:30:00:af:80:72:a0:99:
                    ea:ae:e2:0a:b6:21:b7:31:4b:76:ae:ad:c8:e2:94:
                    00:a9:51:45:39:6b:34:5a:0c:2e:2c:19:fb:2f:63:
                    02:38:04:f7:d9:0c:e1:4c:d9:7b:fe:e1:29:53:89:
                    2b:cf:83:a2:8c:d6:22:1f:f2:c0:f2:c6:8f:da:4d:
                    dc:cf:f3:cf:aa:03:95:63:ff:55:17:b5:7f:26:85:
                    f7:b2:55:05:ef:ab:37:f6:01:8a:2e:a9:cb:5c:64:
                    23:09:3f:95:f7:16:63:7f:34:5b:81:45:76:4b:24:
                    83:9f:18:7a:3b:3b:49:73:d3:0e:ae:16:fd:71:1e:
                    ec:d0:e1:5d:62:3b:02:1f:ba:a3:a3:e0:a9:6d:e7:
                    34:a5:2a:ce:63:38:b5:bd:88:83:be:46:1d:c5:04:
                    24:9b:16:52:5e:2e:24:40:6d:91:3d:d7:de:f3:d4:
                    80:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:30:8B:DA:BB:56:12:FE:63:F3:C4:F7:01:27:C1:AA:9C:CD:FB:50
            X509v3 Authority Key Identifier:
                keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/9DCL2rtWEv5j88T3ASfBqpzN-1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.21.0/24
                IPv6:
                  2a12:a080::/29

    Signature Algorithm: sha256WithRSAEncryption
         31:68:6e:4e:8d:63:b6:0d:07:8b:f1:1a:86:ff:3e:16:64:97:
         95:d6:72:17:51:b7:5d:c8:8f:90:99:4e:89:43:eb:28:65:18:
         02:90:5a:c6:a0:5c:a7:ae:ab:ae:57:f7:8c:6c:78:da:49:aa:
         6d:89:ec:81:79:cb:9e:42:26:c4:b4:4f:b7:05:e1:2f:94:80:
         60:aa:07:f9:31:5e:de:72:69:aa:12:58:eb:79:5f:34:6b:02:
         22:e8:a4:92:60:6a:ca:8f:10:e2:49:12:54:8f:f8:63:10:1e:
         5f:ad:02:ae:8f:12:3f:a4:7c:36:67:73:82:51:37:41:97:02:
         93:99:a0:6f:36:50:e4:dc:cf:5d:9e:2f:89:7b:67:64:c0:45:
         e7:80:8d:fb:73:d7:58:81:20:66:6c:fb:27:7c:e3:b0:53:8c:
         88:1d:3e:7f:7b:ac:88:a2:7b:7e:96:78:00:af:f8:8e:27:67:
         f8:44:a5:4f:de:0a:98:58:21:53:ee:de:1b:58:cb:ad:fc:f3:
         f0:53:f5:f3:3c:61:05:61:cd:73:1c:80:0b:e7:e1:c8:30:d6:
         69:19:7b:55:64:07:aa:b3:ac:77:a0:34:5a:c0:f6:d3:4c:34:
         b1:2e:40:cf:eb:d1:5a:a0:b4:b7:ee:16:e2:67:51:0a:98:a0:
         2b:11:dc:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----