Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/sRpRdAzdAP9T04G52AP9c7KCeeo.roa
File:                     sRpRdAzdAP9T04G52AP9c7KCeeo.roa (raw, json)
Hash identifier:          S8XIdGFJyApjYSHJ7W1N4E7NWClphoQKfE/dbCgw1XY=
Subject key identifier:   B1:1A:51:74:0C:DD:00:FF:53:D3:81:B9:D8:03:FD:73:B2:82:79:EA
Certificate issuer:       /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial:       04D65EC4
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/sRpRdAzdAP9T04G52AP9c7KCeeo.roa
Signing time:             Wed 08 Jun 2022 13:51:02 +0000
ROA not before:           Wed 08 Jun 2022 13:51:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206436
IP address blocks:        2a10:8580::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81157828 (0x4d65ec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
        Validity
            Not Before: Jun  8 13:51:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b11a51740cdd00ff53d381b9d803fd73b28279ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:50:a3:54:88:61:12:5b:db:12:5a:f1:e2:3e:
                    60:20:11:8c:9c:c7:2e:01:4c:22:ba:0a:f6:7d:33:
                    2f:90:a5:b1:2b:75:8c:bf:84:60:ac:79:c8:fa:43:
                    31:c6:87:8c:f2:ed:e9:68:c2:0d:aa:18:37:22:cc:
                    02:fe:b3:ca:48:79:5e:98:ce:f6:54:09:45:ca:92:
                    81:30:6b:f8:de:dd:52:3f:04:d1:e3:9e:2c:34:c7:
                    84:ba:be:76:a0:06:4a:c5:83:8d:f9:aa:4e:08:c0:
                    bf:e5:b4:b9:e0:3e:b5:23:e8:0b:4c:ed:e1:7c:b3:
                    9f:a9:d0:85:df:d9:2d:54:27:40:4a:a8:a5:ed:33:
                    a2:e3:ae:60:43:29:d2:db:26:32:0d:9d:b5:05:0c:
                    a8:8e:d5:1e:e7:08:a3:31:bd:62:78:90:b5:1e:d9:
                    16:da:63:a5:0c:3c:48:0b:d8:01:13:70:7a:66:ca:
                    80:7f:b8:38:48:76:31:80:4d:df:0a:0d:12:85:20:
                    90:13:0b:7b:34:3a:40:e2:74:cc:3a:5a:50:8f:f3:
                    87:92:2c:f7:f4:f0:71:ff:ee:84:87:cc:03:42:7f:
                    b2:db:41:3a:ee:f2:40:20:37:be:bb:fc:aa:ca:91:
                    a8:2f:fc:1a:03:88:1c:39:71:ad:11:b7:ed:79:69:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1A:51:74:0C:DD:00:FF:53:D3:81:B9:D8:03:FD:73:B2:82:79:EA
            X509v3 Authority Key Identifier:
                keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/sRpRdAzdAP9T04G52AP9c7KCeeo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:8580::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:a3:de:12:f4:96:fa:e6:4d:05:ae:c6:af:18:70:9c:7f:55:
         1e:6e:b4:ca:e8:5e:d3:6e:b2:23:68:c7:31:cb:37:3c:71:0e:
         2c:59:08:bf:ff:c1:6c:a3:e1:4b:20:a8:20:fd:64:fc:3f:d5:
         0b:f8:0d:7d:05:4b:81:95:b7:ef:da:15:66:7f:5d:76:2e:0d:
         0b:0a:87:a9:5b:90:cf:30:25:2a:e6:e7:81:7a:70:86:06:35:
         75:1f:b2:cd:98:d4:b7:16:da:2a:2f:98:76:44:35:cc:22:55:
         76:c2:03:95:30:a7:61:19:3f:d6:1e:53:19:63:e0:a4:7d:e6:
         67:3c:49:2f:c5:d2:6c:1b:24:8d:56:ba:9f:fd:59:c4:2d:22:
         de:29:29:01:f7:20:3f:45:38:fe:1b:d7:62:e4:5a:41:e7:a7:
         cb:14:e3:4e:57:95:6f:d8:0e:61:0a:d0:4a:4f:3b:27:e6:9d:
         ee:1b:b0:1d:9b:cd:0e:54:b9:1f:e8:e5:87:75:bb:5a:49:b4:
         44:7f:97:21:d4:9f:12:bb:47:a6:e6:43:39:9c:d1:99:b9:af:
         d0:b8:f8:d4:89:b2:7e:91:7f:3e:15:ca:8e:16:94:61:93:d3:
         b5:38:9d:f5:f6:a9:6e:d4:15:93:0c:14:0d:68:71:ec:e8:50:
         bf:18:83:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----