Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/XR58fKsgNNrmQCJsEyrZ6jhOhv0.roa
File:                     XR58fKsgNNrmQCJsEyrZ6jhOhv0.roa (raw, json)
Hash identifier:          4j7LDAHvHYxP1llTbGLJVwWFG50uhacFeYTr1Y+UjLo=
Subject key identifier:   5D:1E:7C:7C:AB:20:34:DA:E6:40:22:6C:13:2A:D9:EA:38:4E:86:FD
Certificate issuer:       /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial:       43498837
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/XR58fKsgNNrmQCJsEyrZ6jhOhv0.roa
Signing time:             Sat 01 Jan 2022 07:59:56 +0000
ROA not before:           Sat 01 Jan 2022 07:59:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47172
IP address blocks:        2a03:f85:6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1128892471 (0x43498837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
        Validity
            Not Before: Jan  1 07:59:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5d1e7c7cab2034dae640226c132ad9ea384e86fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:d5:50:0e:03:57:78:7a:6f:6c:e1:61:05:
                    1b:97:45:19:c1:0d:ce:cf:11:5b:0b:e9:c5:39:12:
                    71:bf:b5:cb:59:c7:1f:a3:82:e3:89:c1:02:7c:41:
                    00:d7:6b:b4:a0:58:c3:8a:72:fd:29:84:e7:05:9d:
                    19:5d:3c:9b:b1:8e:13:44:fb:79:5a:62:a6:53:1f:
                    59:d1:eb:88:ad:d4:e2:6d:59:00:16:d5:a7:a9:f3:
                    bc:a8:5c:bd:45:0d:c6:b0:0d:31:2f:97:30:5e:07:
                    eb:2f:52:94:31:2b:bb:05:58:ac:45:2e:d9:30:4f:
                    56:b1:41:29:ae:09:58:6b:52:a5:5c:82:b6:aa:51:
                    a0:40:29:4e:8c:3a:65:e4:d3:d2:68:10:1e:be:de:
                    08:49:61:ef:46:f1:22:7a:4e:e1:66:48:fc:3b:d8:
                    b0:c3:a1:52:d5:43:c1:4a:e9:5b:d5:bf:41:44:d2:
                    72:63:44:46:4f:d8:7a:77:2a:59:05:bb:54:d5:ab:
                    39:36:dd:f8:c4:19:ac:b4:c4:96:e1:41:c4:de:fa:
                    56:f5:86:3f:6e:88:22:cd:d5:5d:73:6f:73:3e:75:
                    f9:ca:05:00:5d:12:f4:ca:19:13:fe:39:ef:15:58:
                    2f:b5:33:82:86:51:ed:b4:26:84:5e:1b:6f:f9:a3:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1E:7C:7C:AB:20:34:DA:E6:40:22:6C:13:2A:D9:EA:38:4E:86:FD
            X509v3 Authority Key Identifier:
                keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/XR58fKsgNNrmQCJsEyrZ6jhOhv0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:f85:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:e1:8f:23:e9:d0:21:44:b1:d9:13:fc:e3:89:0c:a2:10:47:
         e1:b0:94:b0:ea:51:50:e9:e5:e0:30:1f:fd:1c:f3:77:70:bc:
         f9:df:3b:e3:03:3b:b9:58:48:48:25:c3:45:b0:6b:69:00:d4:
         f9:12:b1:bb:cc:63:4d:96:6f:42:cc:99:cc:c3:e2:d3:8f:6a:
         63:5d:08:85:80:f9:1a:2f:f1:a1:7b:76:94:af:40:32:e5:63:
         36:c8:f3:6a:37:21:c4:2b:28:5a:da:75:86:ae:44:18:6e:85:
         27:ee:03:5c:7e:b0:51:60:e4:42:ab:9d:22:8f:83:03:00:31:
         f8:7f:b2:62:f4:30:b3:ce:f8:0d:f8:4e:0c:90:c6:de:0e:5c:
         fd:18:08:38:65:c4:e8:0a:ea:30:b5:1e:49:d7:09:f4:45:eb:
         46:dd:7e:b6:60:c5:eb:20:bb:16:00:79:8c:8c:3a:ef:aa:24:
         31:fc:9c:16:b7:d9:e4:fe:4e:fe:fa:ac:fe:02:e2:54:5c:5d:
         35:a5:4e:cc:e0:55:22:4c:a5:01:31:30:a5:fc:92:02:08:16:
         90:b9:41:99:a2:61:ad:c7:f6:cd:ac:b8:22:88:9c:4c:ef:d6:
         b4:56:e4:9c:a8:21:c4:3b:07:3c:de:3d:a6:37:c5:66:0c:e8:
         4e:98:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----