Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6-J84NDsIVl78ixmwgVlctcbZIQ.roa
File:                     6-J84NDsIVl78ixmwgVlctcbZIQ.roa (raw, json)
Hash identifier:          cBqB6OKGaGOfL4z4Y0udjATDKb/kKUXpiJQv3yFn4FE=
Subject key identifier:   EB:E2:7C:E0:D0:EC:21:59:7B:F2:2C:66:C2:05:65:72:D7:1B:64:84
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       0182E80225982DCC306304A9C865ED80AD98
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6-J84NDsIVl78ixmwgVlctcbZIQ.roa
Signing time:             Mon 29 Aug 2022 05:10:30 +0000
ROA not before:           Mon 29 Aug 2022 05:10:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     400177
IP address blocks:        2a0f:34c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:e8:02:25:98:2d:cc:30:63:04:a9:c8:65:ed:80:ad:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Aug 29 05:10:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ebe27ce0d0ec21597bf22c66c2056572d71b6484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:35:ca:05:50:d2:69:65:bc:2d:81:ca:60:b7:
                    70:96:27:2a:03:ee:45:fe:c4:b3:f4:b1:a7:1f:78:
                    ba:42:33:7d:7d:30:e9:a5:b0:c2:be:07:cd:45:8b:
                    7a:f3:67:7b:01:57:a6:7a:57:64:c7:e9:eb:6d:ac:
                    6c:39:1c:55:11:c0:03:33:8f:71:15:88:c7:7a:39:
                    52:fc:0e:00:ce:44:15:11:40:d9:62:ad:c4:9e:c6:
                    ee:96:5f:59:e2:7f:4c:5b:21:33:ed:73:97:f1:af:
                    44:d2:71:b6:83:4d:9a:95:85:a0:96:1a:40:08:3c:
                    d6:58:0d:56:3a:ff:11:e0:d1:dc:b0:3f:cf:d6:6a:
                    b8:e5:0c:2b:de:d4:62:99:a7:77:8d:eb:7d:d7:6f:
                    61:df:c1:8b:a5:e6:90:98:16:1a:e6:89:a2:9c:e8:
                    f9:43:49:8c:f2:a0:0a:de:11:b2:1f:c9:d9:e8:b8:
                    95:4d:bc:44:46:33:5b:9a:81:a8:1e:85:ce:fd:ce:
                    bd:54:24:ea:d5:c9:a7:5d:b7:d4:1d:7d:97:12:78:
                    24:92:51:a0:ed:ad:51:00:aa:71:40:15:03:11:9f:
                    2c:2b:f0:2e:cc:10:65:25:94:26:e5:2f:68:ec:f9:
                    3a:cf:ed:d3:dc:6c:a1:68:1e:16:9e:4a:16:e1:09:
                    68:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E2:7C:E0:D0:EC:21:59:7B:F2:2C:66:C2:05:65:72:D7:1B:64:84
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/6-J84NDsIVl78ixmwgVlctcbZIQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:34c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         bb:6d:ff:4e:3c:cb:88:98:64:d0:9b:c0:24:9e:57:74:99:59:
         86:26:42:6c:e4:ae:bb:c9:42:99:db:c8:40:50:8b:37:6a:08:
         07:2d:0b:5c:8e:59:e8:2e:bb:18:76:a8:7a:8a:04:0d:ca:34:
         21:c1:5d:71:79:57:74:d3:87:8d:cb:6d:d4:73:2f:5c:0f:26:
         a9:dd:5d:7e:ed:54:d0:9e:ed:a1:74:39:81:8d:61:c2:fd:60:
         27:46:de:11:c4:84:6d:a1:7d:53:cc:3e:51:21:8f:82:1e:d0:
         de:d5:46:d2:57:e7:bf:ff:0f:df:eb:c1:d0:8d:89:2c:24:62:
         0a:e8:89:0c:b9:30:f6:1c:11:7b:0d:16:7e:2d:1e:67:88:2e:
         7a:e1:80:ea:04:82:67:72:a6:cc:cc:a3:54:18:27:74:1b:91:
         ac:c0:8b:07:4f:0b:0d:6a:4c:cd:9a:b2:e9:0e:00:0f:29:b8:
         b9:6d:e6:63:0a:95:b2:bf:3e:03:32:61:6c:b1:05:5c:9b:1b:
         b7:3d:37:d7:ad:ce:c5:1b:eb:38:6f:1c:97:82:9b:15:a2:5a:
         9a:d2:ad:af:87:dc:ce:57:d9:55:1e:81:bf:ba:29:a2:e2:86:
         05:bf:35:59:2a:55:07:6d:6c:e1:95:28:56:87:22:8d:e2:d3:
         02:28:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----