Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/gDirvfkvIA1NtCgdiljVcV7CfRQ.roa
File:                     gDirvfkvIA1NtCgdiljVcV7CfRQ.roa (raw, json)
Hash identifier:          Ax6c0N9Olvr3fb2k2C1/IFFtXmZYX6mEUSeQ65hPePc=
Subject key identifier:   80:38:AB:BD:F9:2F:20:0D:4D:B4:28:1D:8A:58:D5:71:5E:C2:7D:14
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       116BF215
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/gDirvfkvIA1NtCgdiljVcV7CfRQ.roa
Signing time:             Mon 30 May 2022 09:34:13 +0000
ROA not before:           Mon 30 May 2022 09:34:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        2a06:e881:73ff::/48 maxlen: 48
                          2a06:e881:9200::/48 maxlen: 48
                          2a06:e881:9201::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292286997 (0x116bf215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: May 30 09:34:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8038abbdf92f200d4db4281d8a58d5715ec27d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:73:87:21:79:12:c4:83:a1:07:ce:d8:79:
                    71:e6:0f:5f:19:0d:a9:b0:30:3f:43:fb:45:ee:f7:
                    5b:61:6e:ec:89:04:62:a4:b0:c7:42:3c:9f:09:a9:
                    26:33:63:fe:c6:92:8b:5d:32:9d:bc:d7:cf:68:9a:
                    a6:28:73:bc:dd:bb:f4:15:41:99:aa:26:fa:42:07:
                    cf:91:e0:2d:1b:5d:1d:82:6d:45:e2:b7:92:f4:46:
                    d4:ed:18:90:7b:03:31:71:04:22:74:95:2a:ec:d5:
                    da:93:3e:aa:80:60:d5:9d:68:ac:b4:a9:ca:ca:fd:
                    50:98:29:55:2e:50:b6:b7:f5:36:87:ca:c0:dc:6d:
                    c2:d8:5b:be:99:7a:01:a1:69:bf:ee:b5:b2:64:e7:
                    b2:28:48:29:e4:17:6a:53:6d:63:e6:a1:83:44:ef:
                    74:e4:d4:b3:90:e9:37:b3:7a:d7:f1:00:aa:a6:c5:
                    ef:21:3a:7c:a1:83:49:47:8c:a5:80:53:4d:c5:53:
                    eb:65:8b:85:ed:8b:bf:32:ae:9c:7e:2a:e5:01:0b:
                    c2:04:9f:55:70:c0:5d:4c:c7:77:ef:65:21:72:a0:
                    60:5f:3f:a5:36:b7:84:95:b9:5b:6e:35:d3:1f:3a:
                    01:fd:af:2c:36:26:52:3a:d3:16:6d:93:49:9f:50:
                    b8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:38:AB:BD:F9:2F:20:0D:4D:B4:28:1D:8A:58:D5:71:5E:C2:7D:14
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/gDirvfkvIA1NtCgdiljVcV7CfRQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:73ff::/48
                  2a06:e881:9200::/47

    Signature Algorithm: sha256WithRSAEncryption
         83:81:52:a9:aa:a5:b6:5c:e0:de:94:05:11:4d:9b:ba:c3:43:
         f6:c0:42:32:05:d2:b2:b5:56:0f:c2:1a:c1:30:03:6d:08:26:
         28:45:ef:55:e9:a4:1f:c2:81:18:80:f5:9e:cd:6a:55:82:8e:
         d1:16:28:d7:4e:e9:92:51:e6:72:10:fc:78:86:b8:a4:a9:8f:
         ba:69:2d:d1:0f:68:58:cb:73:ca:43:10:68:a5:a3:a5:3d:3e:
         53:0b:66:a6:7e:59:72:77:51:63:c8:84:3b:ad:b0:ce:77:24:
         45:da:27:24:f8:2a:94:b0:61:65:06:c2:da:f8:41:04:78:cd:
         b9:da:4e:ea:dd:5e:b0:23:cc:e1:a2:f2:d6:54:6a:1d:34:0f:
         5b:d6:1d:ed:b2:c9:3c:16:b6:16:2e:95:e9:70:0a:85:a3:ab:
         9d:9e:14:14:fd:d3:cb:9e:72:df:61:19:4d:5f:8d:b1:aa:31:
         f0:2a:8f:b5:a4:73:56:32:e8:0b:8e:e7:cf:90:1f:29:da:41:
         df:3b:1c:ec:b0:60:1a:3a:df:21:d0:0a:cb:cf:c8:74:98:b0:
         e6:10:99:ed:35:1a:d9:cc:35:6e:45:99:3a:2e:d0:7e:01:ab:
         3d:b2:da:b4:0a:0a:01:83:e3:bf:28:84:63:70:fb:a3:33:e2:
         e2:09:db:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----