Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/aBBRyGNs_ciek-qYljs8rM6ULsw.roa
File:                     aBBRyGNs_ciek-qYljs8rM6ULsw.roa (raw, json)
Hash identifier:          vzelBeOlxBxWc/bupcHSnpiEFuDleCURrMv2jJMkQRc=
Subject key identifier:   68:10:51:C8:63:6C:FD:C8:9E:93:EA:98:96:3B:3C:AC:CE:94:2E:CC
Certificate issuer:       /CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
Certificate serial:       0657F811
Authority key identifier: 0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/aBBRyGNs_ciek-qYljs8rM6ULsw.roa
Signing time:             Sat 01 Jan 2022 09:02:37 +0000
ROA not before:           Sat 01 Jan 2022 09:02:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207632
IP address blocks:        2001:678:be0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106428433 (0x657f811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fabeb6ef820d3d52f05372233c541ee4b14f361
        Validity
            Not Before: Jan  1 09:02:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=681051c8636cfdc89e93ea98963b3cacce942ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:67:22:03:78:bb:b1:65:c4:bb:58:8e:37:
                    ac:46:ca:e7:a3:c3:3c:59:f5:a9:92:12:8a:c7:94:
                    64:0d:3f:de:93:9b:0c:b9:95:d1:b5:79:b1:eb:8b:
                    d3:41:33:48:36:c9:37:40:34:81:5f:47:de:0e:55:
                    62:75:4b:47:f1:00:6b:f0:e4:08:8b:3e:39:8a:65:
                    cd:d9:57:dd:09:2b:04:f0:33:a4:fc:e9:41:6c:7c:
                    e6:48:0a:0e:79:25:6d:3d:85:d0:c7:3e:41:f7:7b:
                    f4:1b:c8:96:5d:f8:fa:a3:e0:16:e9:6e:6b:06:3a:
                    27:30:04:fe:73:f9:c8:39:83:ff:e6:b2:aa:56:10:
                    54:4e:26:43:ab:75:be:e8:85:a0:48:fe:a8:0f:60:
                    17:7f:8a:a9:5e:8a:3d:57:c5:15:4f:27:0d:dc:71:
                    27:98:cb:d9:75:38:77:45:da:b0:f4:7a:6e:78:f7:
                    94:ba:a0:19:9f:d4:71:17:db:95:ab:0f:e4:34:ed:
                    f3:61:94:16:57:b1:74:3e:75:64:5c:4e:65:8f:d7:
                    08:a7:a7:a7:ce:01:c7:4e:82:85:fd:bd:85:05:a5:
                    e6:63:79:16:fb:60:25:29:04:e0:83:ad:ce:fe:5c:
                    b6:2f:2b:03:45:e4:38:73:f9:8d:c3:be:84:43:c0:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:10:51:C8:63:6C:FD:C8:9E:93:EA:98:96:3B:3C:AC:CE:94:2E:CC
            X509v3 Authority Key Identifier:
                keyid:0F:AB:EB:6E:F8:20:D3:D5:2F:05:37:22:33:C5:41:EE:4B:14:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D6vrbvgg09UvBTciM8VB7ksU82E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/aBBRyGNs_ciek-qYljs8rM6ULsw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3d834-ceed-4bbd-abe1-5a37126705ad/1/D6vrbvgg09UvBTciM8VB7ksU82E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:be0::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:95:d9:12:c6:d5:6c:6f:0b:9a:75:3c:e8:0a:ac:51:bc:97:
         6b:74:d4:86:f2:88:3e:e8:42:37:8b:32:38:f4:8c:a4:1d:fb:
         4d:29:da:a8:64:55:1d:2e:84:f0:fa:12:0a:b9:97:19:01:b8:
         85:9e:2b:5f:b5:30:1a:00:22:b0:45:5d:67:69:b6:ac:3a:90:
         56:2b:5d:95:3b:ed:7c:e5:e4:ea:b0:62:e7:12:37:0f:43:93:
         d3:0d:22:2a:b3:3c:1a:4f:19:78:0b:cd:d7:d4:50:f2:71:88:
         b1:28:83:6b:de:84:9c:ef:38:58:68:b5:43:18:cf:0a:d3:c1:
         86:e1:fb:18:6b:f6:79:8d:ff:da:36:2e:98:5d:2f:20:a1:64:
         8e:af:ec:38:31:02:70:77:29:52:7a:e0:d3:f4:9f:20:bb:69:
         18:f2:44:73:ba:a6:62:93:70:61:0a:cb:f6:c8:97:bf:45:2c:
         0f:3f:f6:79:f2:24:2d:09:29:c7:24:72:35:8c:d7:0c:10:31:
         3a:e5:46:de:97:c3:1d:b9:2b:ce:a5:bb:61:01:ec:ec:68:e7:
         65:ea:82:34:98:5f:e9:76:93:21:ab:0f:7d:f5:13:a3:1e:46:
         b7:0f:fc:6f:29:39:c2:68:08:f5:81:72:48:36:27:fb:28:7f:
         6e:0d:0d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----