Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/9JxEOT7vBfSpDubhpXcAaPj-MBE.roa
File:                     9JxEOT7vBfSpDubhpXcAaPj-MBE.roa (raw, json)
Hash identifier:          gv8NwogLjra5vmGEBAXVqZJpM3vBXssglrxEw0jrA84=
Subject key identifier:   F4:9C:44:39:3E:EF:05:F4:A9:0E:E6:E1:A5:77:00:68:F8:FE:30:11
Certificate issuer:       /CN=951664521d503959212f55b2a59aec6d207b0a28
Certificate serial:       063F0501
Authority key identifier: 95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/9JxEOT7vBfSpDubhpXcAaPj-MBE.roa
Signing time:             Sat 01 Jan 2022 15:57:59 +0000
ROA not before:           Sat 01 Jan 2022 15:57:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6883
IP address blocks:        161.110.0.0/16 maxlen: 16
                          2a0a:f500::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104793345 (0x63f0501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951664521d503959212f55b2a59aec6d207b0a28
        Validity
            Not Before: Jan  1 15:57:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f49c44393eef05f4a90ee6e1a5770068f8fe3011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e7:4d:8f:f0:0c:1c:c5:17:7a:85:2c:f6:d7:
                    c3:0d:64:2d:89:90:c0:03:d0:03:df:e9:97:b6:86:
                    96:6c:c2:3c:d9:98:58:73:55:16:35:73:c7:49:66:
                    2c:8d:93:8c:2b:7f:f9:37:c9:64:e7:a5:bb:2b:7b:
                    25:b0:64:f1:f9:64:db:89:01:98:f6:9e:b7:eb:c9:
                    19:7a:8c:99:46:b9:98:6f:ec:38:55:ef:9f:4b:da:
                    c8:83:89:32:cb:78:0a:45:4d:19:d5:ed:f4:4e:4f:
                    37:05:16:d2:a5:65:9b:d1:5b:52:9f:05:3f:7b:49:
                    ef:55:f1:2b:89:63:33:54:13:66:27:f2:dd:92:35:
                    e8:d9:59:60:9d:39:ea:d8:90:e4:2c:94:34:d1:ec:
                    02:2e:c6:18:07:de:88:d7:21:fc:a5:d8:2d:3c:5f:
                    7d:cc:4d:50:b4:26:cc:0e:4a:0b:d7:4d:05:a0:6e:
                    2f:20:2c:ed:65:7b:90:a1:54:35:f1:7e:a4:2b:2e:
                    18:08:b4:4f:61:8f:48:bc:07:aa:15:29:d6:3e:58:
                    51:0f:19:d9:b0:b2:a5:c2:61:34:4d:4e:f2:af:6b:
                    d6:3d:f6:b3:61:5d:7c:6a:4f:6e:0b:bc:df:0c:93:
                    c4:17:d4:f6:6b:46:28:e8:e5:5e:8e:8a:5b:84:60:
                    26:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9C:44:39:3E:EF:05:F4:A9:0E:E6:E1:A5:77:00:68:F8:FE:30:11
            X509v3 Authority Key Identifier:
                keyid:95:16:64:52:1D:50:39:59:21:2F:55:B2:A5:9A:EC:6D:20:7B:0A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRZkUh1QOVkhL1WypZrsbSB7Cig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/9JxEOT7vBfSpDubhpXcAaPj-MBE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/2c3619-2c59-46d2-aaae-ef7453ad099f/1/lRZkUh1QOVkhL1WypZrsbSB7Cig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.110.0.0/16
                IPv6:
                  2a0a:f500::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:d1:0a:d2:2c:20:f0:f8:65:73:f9:ec:75:68:77:d8:7f:f9:
         78:3c:46:3a:b3:a7:a9:83:6b:1c:18:cb:6c:b0:90:82:7e:10:
         52:57:3a:fe:b3:0e:14:88:f3:3a:c1:e4:cb:80:78:eb:43:96:
         53:35:f3:97:70:1d:53:6d:ac:96:1b:41:8d:eb:48:dc:2c:9e:
         65:5c:b8:c3:ad:66:54:f6:f5:3a:02:fa:a0:0d:d5:3c:69:f5:
         7e:3c:e6:47:4d:90:db:32:de:88:5c:74:c6:36:11:57:58:cf:
         84:15:7d:17:ce:4f:ba:c5:32:2e:ca:b3:0f:ca:bf:3f:37:88:
         2d:ab:6e:10:e7:16:68:8c:2e:b9:53:8e:86:c1:c8:90:22:5d:
         e2:fa:c4:bf:54:92:74:b0:a0:a2:f6:0e:f4:cb:f8:49:15:72:
         19:fd:47:d6:6d:2c:d9:7a:19:55:28:e4:50:31:00:0e:2a:9f:
         e2:da:77:96:ff:01:8f:db:f9:e6:d0:59:cd:ef:29:71:19:7f:
         8e:a3:a9:24:16:71:a6:c6:5b:60:4a:55:e0:89:b5:ba:d4:7b:
         5e:35:a9:22:96:f5:9a:dc:a2:c2:0f:99:9c:33:20:2d:58:01:
         9f:20:88:92:8c:a1:25:5c:e0:f8:d0:c1:2d:b6:1e:5e:62:83:
         d2:86:39:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----