Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/QMYPkh24lPNdLQwaiRJ5Ahj5Kv4.roa
File:                     QMYPkh24lPNdLQwaiRJ5Ahj5Kv4.roa (raw, json)
Hash identifier:          CBCEuzwXeSqj1FsLT+ewcojx8iBJO/NkEzPrfCn4aKE=
Subject key identifier:   40:C6:0F:92:1D:B8:94:F3:5D:2D:0C:1A:89:12:79:02:18:F9:2A:FE
Certificate issuer:       /CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
Certificate serial:       09BDEFD7
Authority key identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/QMYPkh24lPNdLQwaiRJ5Ahj5Kv4.roa
Signing time:             Sat 01 Jan 2022 08:03:49 +0000
ROA not before:           Sat 01 Jan 2022 08:03:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61381
IP address blocks:        45.84.35.0/24 maxlen: 24
                          2a0e:9580::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163442647 (0x9bdefd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
        Validity
            Not Before: Jan  1 08:03:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=40c60f921db894f35d2d0c1a8912790218f92afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:26:ad:7a:f0:2c:40:32:0f:a3:9a:36:ee:
                    5e:05:3d:72:d7:fa:55:17:10:b1:1f:22:96:9b:bc:
                    41:33:13:41:c8:69:d6:5b:ce:70:52:a1:e9:ef:3c:
                    04:f6:9e:ba:3d:04:f1:4a:61:d9:3a:ed:28:c5:c4:
                    38:3e:00:f1:17:e5:58:b5:80:8e:33:3d:c5:4c:6d:
                    da:0a:4d:09:f8:46:71:31:8d:17:47:b7:8e:f7:91:
                    82:94:80:f4:05:13:4a:5c:a8:5d:9a:37:e3:c6:01:
                    85:c3:22:01:1f:28:27:bb:90:54:2c:ea:7e:b8:67:
                    7b:b7:7b:00:ad:55:82:58:df:86:b0:4e:8b:4c:94:
                    b4:9d:ee:3b:77:c4:de:f9:31:aa:eb:98:95:bd:74:
                    80:c1:91:57:28:5a:df:6b:88:d0:de:f3:86:05:a4:
                    eb:4f:80:8f:33:58:fc:19:0e:24:36:0a:01:99:ad:
                    b2:f1:cc:20:e7:72:d5:cf:87:4e:4f:04:78:ff:96:
                    6c:c2:6b:2f:d3:cd:57:03:6a:9e:b0:4f:06:c6:90:
                    e5:52:c3:a4:64:72:2f:db:d6:96:47:0b:5b:4f:21:
                    82:2d:dd:66:73:fb:e5:ae:dd:ec:96:7b:62:9a:01:
                    fb:e8:65:c0:c0:d2:0e:b3:e1:cf:ed:8f:80:30:11:
                    6e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C6:0F:92:1D:B8:94:F3:5D:2D:0C:1A:89:12:79:02:18:F9:2A:FE
            X509v3 Authority Key Identifier:
                keyid:59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/QMYPkh24lPNdLQwaiRJ5Ahj5Kv4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.35.0/24
                IPv6:
                  2a0e:9580::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:6a:e4:68:fd:2a:6f:39:f2:34:99:73:7a:5d:3d:80:e2:5f:
         14:9a:32:e9:11:08:a9:48:63:b3:69:8b:5d:d4:20:ed:19:b5:
         af:0b:c1:3c:f3:83:64:c9:f1:17:dc:b1:ab:6a:b6:e6:ac:22:
         31:f6:a0:c8:8a:1b:4d:d5:61:ae:ad:73:f7:c6:b2:19:c5:47:
         9d:57:8e:08:39:6d:f7:0e:31:0f:0e:80:ec:c5:74:6a:8e:c0:
         27:e8:d9:87:15:47:0c:04:ee:7f:22:84:3c:7f:d7:ed:17:e8:
         b6:cb:88:3a:8a:12:69:dd:66:08:e1:56:16:6f:9d:82:e4:cb:
         1d:38:57:8a:55:a7:ae:48:5d:47:73:28:cc:81:33:17:a3:36:
         e5:c9:b6:6f:2d:92:5d:a8:d0:3c:cb:fc:9d:4d:a2:75:01:b3:
         9b:45:36:1d:a9:12:b3:f1:fa:f8:24:bf:66:b7:2e:d8:d4:93:
         db:08:f1:10:ed:ec:be:59:1a:fa:dc:e6:71:2e:58:17:7d:41:
         1a:a5:30:75:54:91:a7:3e:c8:f1:51:2e:34:03:f9:37:75:27:
         f5:19:12:7c:67:d6:79:12:df:12:5a:54:c9:e9:66:05:a9:f2:
         d2:7c:26:94:b8:ab:2b:fd:1d:bf:ad:8b:2d:2e:f4:3a:ca:be:
         77:f6:e5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----