Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1KDAyEAXJ_BBB1zSSWA5IwU6MhQ.roa
File:                     1KDAyEAXJ_BBB1zSSWA5IwU6MhQ.roa (raw, json)
Hash identifier:          QTWH/EqYpaxcIXIQgb4K210A3KAF6FQPKjju579C9W4=
Subject key identifier:   D4:A0:C0:C8:40:17:27:F0:41:07:5C:D2:49:60:39:23:05:3A:32:14
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       0185627DAF6F6359F81EF6E7F02D48F4CE23
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1KDAyEAXJ_BBB1zSSWA5IwU6MhQ.roa
Signing time:             Fri 30 Dec 2022 10:04:41 +0000
ROA not before:           Fri 30 Dec 2022 10:04:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212704
IP address blocks:        2a0c:9a40:8078::/45 maxlen: 48
                          2a0c:9a40:8070::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:62:7d:af:6f:63:59:f8:1e:f6:e7:f0:2d:48:f4:ce:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Dec 30 10:04:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d4a0c0c8401727f041075cd249603923053a3214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1a:c9:61:1e:b6:b3:e7:5c:4f:5e:0f:b1:74:
                    a3:1d:20:5d:f4:32:84:67:00:63:fc:75:15:b0:c6:
                    db:33:2d:5d:80:df:44:3f:da:fc:70:6d:43:e6:e6:
                    d8:f9:22:d0:cb:b7:71:9d:96:46:9d:6b:e1:eb:d2:
                    36:7b:2d:da:43:9f:68:03:7b:b4:c5:36:35:4c:1f:
                    b4:85:d5:d5:20:64:78:dc:23:6c:72:2f:48:a7:94:
                    2e:1b:79:13:2a:d8:96:f3:37:54:9c:ca:53:9f:94:
                    1a:2b:3d:55:1f:ab:7f:9a:8d:4f:ba:45:cf:e1:e8:
                    4a:e1:9e:2d:84:a1:b4:6c:d9:6b:d1:d9:56:c0:15:
                    f1:0c:c7:ae:1d:b7:34:b8:9e:47:07:4c:92:00:a3:
                    f6:99:81:32:55:27:97:51:74:c4:e5:fd:95:a9:16:
                    ec:3c:5d:b9:31:0c:33:b2:22:0e:8c:5a:e2:3a:d7:
                    c7:af:35:da:aa:f3:e4:0d:2e:13:8e:28:ce:cc:60:
                    62:66:1c:64:0a:f0:1b:46:f8:ba:f8:52:c6:92:b7:
                    1a:a7:cc:09:45:33:a4:45:27:16:eb:4e:f1:f1:d7:
                    db:29:de:79:4c:d5:95:7e:ef:6d:98:0e:63:ef:27:
                    7c:7e:78:95:26:03:02:4b:7e:8a:d3:11:31:9b:88:
                    87:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A0:C0:C8:40:17:27:F0:41:07:5C:D2:49:60:39:23:05:3A:32:14
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/1KDAyEAXJ_BBB1zSSWA5IwU6MhQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8070::/44

    Signature Algorithm: sha256WithRSAEncryption
         8d:01:4b:5e:e7:bd:c4:56:3d:06:6c:b8:be:c7:9e:08:40:a9:
         19:2a:b5:8a:59:4a:eb:15:8d:92:a2:4d:a6:97:62:cc:dd:1a:
         79:ff:54:f0:63:f2:6f:98:3b:e4:5e:0a:64:9e:6b:95:4c:af:
         03:e4:b5:f1:02:e2:b8:29:e5:51:bc:2a:ec:2b:5b:31:36:16:
         ad:8b:e8:92:cd:02:65:6c:14:a8:ab:e9:44:f7:bf:97:0e:56:
         63:55:31:f5:dd:a3:58:46:88:5b:ab:b8:1e:92:a7:33:d9:63:
         3d:e6:1f:44:81:4a:9e:1a:82:90:b3:8e:b2:c3:48:5f:6b:97:
         76:ca:3c:01:25:f0:2d:d9:45:1e:59:3b:17:09:f3:0b:f9:4c:
         34:b9:c5:c8:a1:0b:fd:1a:92:10:4b:d1:d1:f3:5e:f2:56:38:
         78:74:87:8a:d9:c6:82:a1:98:bc:f1:48:0f:ca:64:5f:12:1d:
         df:df:35:a8:bf:34:8d:9e:d2:5f:2d:26:97:12:ad:fb:cb:bc:
         b3:79:00:6b:59:c9:f1:0c:e6:aa:d0:df:e4:5d:87:4e:86:f0:
         d3:06:6c:05:b9:00:a9:68:7a:c5:f5:98:73:ab:65:54:b5:6a:
         ba:75:ed:fa:c8:75:c6:f3:63:4c:0b:bb:b2:ce:c5:f7:5a:9b:
         cc:09:70:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----