Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Bcdakeaq4LRDFSS0SGzy81X5gtY.roa
File:                     Bcdakeaq4LRDFSS0SGzy81X5gtY.roa (raw, json)
Hash identifier:          ODyizeLelcghHkczOxv348hadpPKl0K+gdVVLAyBFp0=
Subject key identifier:   05:C7:5A:91:E6:AA:E0:B4:43:15:24:B4:48:6C:F2:F3:55:F9:82:D6
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       08BF3AFC
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Bcdakeaq4LRDFSS0SGzy81X5gtY.roa
Signing time:             Sat 01 Jan 2022 07:04:28 +0000
ROA not before:           Sat 01 Jan 2022 07:04:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     21100
IP address blocks:        2a0d:5a80::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146750204 (0x8bf3afc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Jan  1 07:04:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05c75a91e6aae0b4431524b4486cf2f355f982d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:38:28:93:46:d8:ad:38:79:25:81:d4:9c:
                    57:2c:cf:38:ac:97:ef:a0:d4:eb:b8:b2:b5:d7:13:
                    0f:00:a8:67:51:31:de:d7:2a:48:51:82:a3:24:8d:
                    0c:82:86:b2:c1:83:69:b0:f8:e4:58:73:8f:1e:43:
                    69:0a:41:91:8a:45:ac:1c:db:35:76:d3:9f:9f:b7:
                    d6:33:04:64:25:14:61:a2:69:65:1a:50:af:29:d2:
                    86:61:69:2c:48:f9:13:fc:0b:0c:6e:33:76:db:7b:
                    b9:4c:57:c6:a4:97:77:27:93:ea:41:a4:87:72:b5:
                    84:16:e1:c2:e0:01:41:ae:f7:ff:96:54:2d:9c:a4:
                    81:4f:34:65:74:bb:20:7a:70:ed:78:65:dc:95:32:
                    35:26:86:5b:e6:af:15:75:8f:87:5b:08:94:d6:dd:
                    1a:97:4d:b9:2b:30:be:89:a9:c6:72:9e:ca:26:4c:
                    74:78:a7:4d:b7:58:e3:f9:fa:dd:1a:b6:e9:a8:8f:
                    13:a8:65:a1:8e:0b:6d:7a:2c:9e:7e:c0:58:ed:96:
                    03:54:18:44:5c:72:c0:12:b9:0d:22:ba:c9:78:33:
                    96:27:1d:53:2f:2d:55:87:66:d0:76:9b:16:bc:c2:
                    e6:b2:fb:0a:e5:2f:c8:e9:14:e8:ab:dc:3f:19:82:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C7:5A:91:E6:AA:E0:B4:43:15:24:B4:48:6C:F2:F3:55:F9:82:D6
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Bcdakeaq4LRDFSS0SGzy81X5gtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:5a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         63:a5:e6:ec:7f:ba:ed:c6:8b:7a:49:f7:d3:8f:47:96:7f:2e:
         d4:ec:2a:c6:14:16:41:21:c1:7e:88:e0:e8:fc:d4:31:ba:2b:
         f7:b9:6f:f3:2a:c2:62:e2:82:28:f3:df:52:35:fb:d1:03:6e:
         15:81:82:9b:ee:70:a9:d9:4d:36:c3:cb:b1:a7:93:df:37:9c:
         80:99:63:2a:8f:4c:94:29:6c:95:f8:47:98:0b:d0:dc:8d:d3:
         f2:a7:ee:6c:cb:fe:22:ff:06:32:3a:66:35:51:31:a2:c2:04:
         4e:ef:b7:b0:ca:ca:40:8f:6d:c2:9e:8e:dd:4e:fd:55:21:f1:
         5f:f5:bd:d8:a2:59:ff:45:7a:a8:ef:20:2e:39:1c:cc:9a:ee:
         39:66:f9:33:31:fb:b5:cc:45:31:64:b1:66:1e:b0:22:c8:33:
         23:df:6f:4e:be:ae:73:2a:60:17:9e:c9:81:1c:e6:8a:ec:14:
         1a:fc:ce:49:91:01:4f:a1:5b:07:21:92:dd:b1:37:52:74:94:
         a7:f3:99:17:59:65:3e:e4:84:72:a5:11:ac:59:1c:53:a7:e9:
         7b:10:40:77:65:7d:25:1f:b9:2c:9e:87:d3:b3:94:6e:a8:c6:
         c0:c5:75:c5:0b:f0:ac:33:8b:55:2d:44:f8:00:27:2b:78:08:
         7d:12:c2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----