Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/vZZI8UHhgvEgINw7hNzYzASZOIk.roa
File:                     vZZI8UHhgvEgINw7hNzYzASZOIk.roa (raw, json)
Hash identifier:          eFEHV5tecMdP3j+ekokNcyJraoubsOSaZTn/c6aWy3M=
Subject key identifier:   BD:96:48:F1:41:E1:82:F1:20:20:DC:3B:84:DC:D8:CC:04:99:38:89
Certificate issuer:       /CN=476334619b14945dfbc064d4ae1f576b0e1deca7
Certificate serial:       6B5C
Authority key identifier: 47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/vZZI8UHhgvEgINw7hNzYzASZOIk.roa
Signing time:             Wed 02 Feb 2022 15:56:37 +0000
ROA not before:           Wed 02 Feb 2022 15:56:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210858
IP address blocks:        45.142.14.0/24 maxlen: 24
                          2a0b:100::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27484 (0x6b5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476334619b14945dfbc064d4ae1f576b0e1deca7
        Validity
            Not Before: Feb  2 15:56:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd9648f141e182f12020dc3b84dcd8cc04993889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b7:fe:61:02:7e:06:45:ec:f1:c0:ff:77:cd:
                    40:a8:34:ba:03:34:ca:27:11:65:0d:21:76:7a:2f:
                    c0:ca:0d:96:39:40:9f:90:03:e5:11:82:da:5a:64:
                    32:dc:13:62:08:35:8d:b2:7b:da:b7:0c:50:96:f9:
                    79:1f:ea:8c:a3:a6:e9:ae:c4:7f:44:a0:34:9c:93:
                    26:76:1c:9c:01:bd:5b:e6:f7:74:ad:5f:99:fe:76:
                    2c:38:20:f0:3b:3e:0e:14:25:c4:c6:c2:ae:ba:9e:
                    85:bf:09:33:a5:b2:8e:86:90:2d:1f:d4:24:9f:11:
                    c0:a4:9b:4b:47:b0:d6:fe:2b:83:00:f2:5f:48:84:
                    62:70:31:7e:2d:6f:41:15:86:ba:4c:2b:a6:3e:eb:
                    99:7f:d3:f1:be:2d:c7:de:f9:aa:bc:6c:fb:3a:12:
                    3d:b1:58:2c:70:60:38:13:75:09:43:2d:19:e2:9d:
                    c7:83:88:3f:c9:ef:bd:a6:e8:c4:28:6b:d3:3c:09:
                    46:bc:2f:e5:24:a6:7d:d7:a7:27:c2:30:6a:d8:dc:
                    ed:49:3d:c2:c6:46:9c:bc:72:e5:9b:d8:1e:f7:60:
                    17:2f:f5:b0:b1:cd:b8:5b:63:bd:8a:a3:4d:72:b0:
                    20:ec:b8:62:a8:df:f1:3e:59:a1:b3:58:e3:7a:e3:
                    e8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:96:48:F1:41:E1:82:F1:20:20:DC:3B:84:DC:D8:CC:04:99:38:89
            X509v3 Authority Key Identifier:
                keyid:47:63:34:61:9B:14:94:5D:FB:C0:64:D4:AE:1F:57:6B:0E:1D:EC:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/vZZI8UHhgvEgINw7hNzYzASZOIk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/f154b2-b124-4532-9707-dbfcd11c3303/1/R2M0YZsUlF37wGTUrh9Xaw4d7Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.14.0/24
                IPv6:
                  2a0b:100::/29

    Signature Algorithm: sha256WithRSAEncryption
         6b:35:c1:eb:b0:30:48:69:d0:c4:8c:95:8d:4a:6b:b2:b9:56:
         67:5a:31:4b:ba:69:22:c8:e6:15:80:4f:9c:c2:46:ad:c3:1e:
         22:6a:df:dd:10:f3:cb:10:73:1f:e5:2f:e5:1e:da:7a:8f:78:
         6f:5d:18:6e:99:eb:d9:4b:f5:b6:c5:f6:9b:53:5a:67:45:bc:
         a5:53:1d:07:db:bf:07:a0:5c:e4:b7:63:12:f8:7c:78:4d:ca:
         85:31:15:7a:97:7d:9e:e5:20:5b:1b:c3:f6:3c:1d:7e:cd:56:
         92:9a:d9:b2:2d:a2:57:02:bb:c0:db:86:64:ce:51:14:d7:bf:
         9a:c0:a4:2a:71:a6:1f:88:95:52:d9:77:b0:93:eb:f6:81:99:
         01:c7:d8:cd:ff:42:d9:a4:e5:ce:50:ce:7e:15:a1:c1:b8:4c:
         db:f3:fa:64:87:63:6a:01:32:e8:5d:65:8f:9b:ae:e9:f8:aa:
         71:32:41:b9:9c:a9:c4:d4:11:23:9f:68:68:7b:5e:8c:ed:3f:
         60:6e:ef:79:f0:c2:49:a2:2a:02:50:c3:f0:19:1a:f3:f4:17:
         f6:70:ee:51:6b:b2:39:0d:ec:4d:5e:16:db:96:b3:0a:36:ee:
         34:c5:30:f1:36:c1:44:85:4c:0a:2f:3f:d1:e7:97:1d:48:6e:
         32:3c:40:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----