Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/v-N7XVjBibIUtoP6fEhWUMVg4Ak.roa
File:                     v-N7XVjBibIUtoP6fEhWUMVg4Ak.roa (raw, json)
Hash identifier:          23igtjtCGjzktccpV2Uc8QbmXRa8oGbCo7OKXt5mfvk=
Subject key identifier:   BF:E3:7B:5D:58:C1:89:B2:14:B6:83:FA:7C:48:56:50:C5:60:E0:09
Certificate issuer:       /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial:       04D83C
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/v-N7XVjBibIUtoP6fEhWUMVg4Ak.roa
Signing time:             Sat 15 Jan 2022 10:13:14 +0000
ROA not before:           Sat 15 Jan 2022 10:13:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204272
IP address blocks:        45.155.144.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317500 (0x4d83c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
        Validity
            Not Before: Jan 15 10:13:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bfe37b5d58c189b214b683fa7c485650c560e009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:59:82:77:88:39:b2:06:f8:74:5a:1e:a8:
                    92:92:b1:8f:af:81:4d:a6:69:f7:45:f9:47:82:6d:
                    c1:a5:f0:60:ed:e8:30:33:e9:d4:55:48:5c:27:8a:
                    65:70:e4:4e:f5:e7:24:b9:24:ce:f0:1d:06:01:53:
                    ca:08:a2:70:0a:d8:ea:58:38:d4:63:f8:b2:68:a1:
                    49:33:cb:b8:6e:2a:02:ee:1b:a1:3b:e1:3b:20:f5:
                    7a:79:ff:c6:28:e8:9b:4f:e3:41:bd:a7:d5:5f:2c:
                    2a:64:71:d9:c5:e9:a0:47:10:48:ef:90:86:1e:23:
                    e0:42:2e:46:31:d8:d5:d2:a8:40:4d:90:ef:77:9e:
                    41:60:4b:0a:2c:d6:f5:dc:90:67:87:75:94:8a:45:
                    6e:38:1e:dc:81:aa:1a:c5:5d:7d:cd:90:a7:02:cf:
                    ef:79:13:ee:40:21:98:74:39:81:95:b4:a9:86:21:
                    54:05:9b:29:c3:11:9e:23:bf:c8:b6:38:e8:b8:8b:
                    b0:e5:bf:54:eb:89:c1:28:e4:71:94:b8:90:6e:f3:
                    ce:34:cf:d1:b5:ea:48:8c:9a:b8:c0:b0:67:4d:f2:
                    6f:cf:6c:0f:54:ca:da:64:06:e9:32:6a:82:1e:91:
                    e1:c8:43:02:c3:53:52:f5:38:99:9a:dc:9e:e1:83:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E3:7B:5D:58:C1:89:B2:14:B6:83:FA:7C:48:56:50:C5:60:E0:09
            X509v3 Authority Key Identifier:
                keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/v-N7XVjBibIUtoP6fEhWUMVg4Ak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:11:68:f7:ae:7c:c6:1f:13:8e:fd:98:bd:4f:c0:2e:52:71:
         2f:a9:86:2b:79:8c:12:b2:a4:cb:aa:93:19:03:45:4d:53:21:
         16:e9:b5:d2:60:5a:14:7c:60:9b:3e:af:df:4f:fa:28:ff:10:
         e1:d6:95:94:50:e2:a7:f8:c5:c3:aa:7d:b9:40:15:07:78:d6:
         4f:f7:84:c1:cf:eb:4b:9b:06:3f:63:80:00:d0:9c:c8:44:b1:
         f5:37:09:33:3b:c8:c9:c2:6b:67:1e:5d:f0:19:50:2b:43:f5:
         a8:16:af:99:6d:b7:25:96:83:6a:50:58:a2:3d:77:3b:06:cb:
         2b:3a:f9:4c:4e:03:d6:a1:c5:5a:86:32:0c:69:eb:07:4a:3c:
         82:91:bf:95:68:30:3e:2e:86:f7:16:91:a9:15:ba:07:e2:8e:
         86:dc:a8:0f:0a:26:d8:88:1a:19:89:fe:e6:e9:73:74:3b:31:
         46:92:40:41:87:92:92:19:bc:84:d4:90:92:b0:7f:4d:8e:9c:
         59:28:f8:94:0b:cb:b2:95:ef:51:88:85:88:fc:8e:0f:2c:55:
         22:c1:2d:2e:ae:a8:62:4d:2d:9c:c3:4a:8b:b1:d3:78:6d:16:
         20:88:66:b7:c7:a6:17:21:f5:3d:52:cc:d6:51:fe:ce:89:64:
         3b:60:9f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----