Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/B3eor4OYBFWmpKcNzAjR_YrHjsw.roa
File:                     B3eor4OYBFWmpKcNzAjR_YrHjsw.roa (raw, json)
Hash identifier:          LZ0hVxliGOC0rQvLuIcdiguJV57JkyLwEG1CZw1MyNw=
Subject key identifier:   07:77:A8:AF:83:98:04:55:A6:A4:A7:0D:CC:08:D1:FD:8A:C7:8E:CC
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       0BE16A70
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/B3eor4OYBFWmpKcNzAjR_YrHjsw.roa
Signing time:             Sat 01 Jan 2022 12:55:00 +0000
ROA not before:           Sat 01 Jan 2022 12:55:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     139311
IP address blocks:        2a0c:9a40:82e0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199322224 (0xbe16a70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  1 12:55:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0777a8af83980455a6a4a70dcc08d1fd8ac78ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:6b:dd:82:ad:d7:54:ac:71:7e:41:38:36:
                    5d:a1:de:5b:b5:b2:a7:7c:a4:79:52:c7:c3:1b:5d:
                    1b:d3:32:cd:20:d8:04:ca:e0:46:cb:c4:79:fd:ea:
                    95:a6:36:4a:b8:95:7b:41:31:de:78:3e:58:1b:6c:
                    02:66:bd:4c:9e:1c:6b:5b:f6:41:d7:15:00:b2:9f:
                    78:3a:7c:05:65:26:09:f8:7e:ed:8c:88:21:43:c0:
                    52:5f:75:14:fa:2e:15:d5:e9:5b:34:f4:57:2f:2f:
                    69:46:e7:d0:de:b6:d7:65:0b:0d:54:30:8c:b8:d6:
                    58:ed:71:9b:c8:02:57:f9:ba:a0:11:c6:54:55:e5:
                    0f:fe:36:aa:cf:82:94:d6:31:29:b6:5b:c4:43:9a:
                    53:b7:8a:27:7d:3b:bd:20:39:32:47:d4:d4:ca:ca:
                    52:46:14:73:53:eb:3f:33:2f:34:9f:50:28:67:7e:
                    b8:41:4d:0f:8a:bb:32:f8:b1:4d:7c:e9:76:ae:bb:
                    fa:2e:2c:c5:16:c2:8c:e0:65:de:16:d0:f4:2e:04:
                    06:5b:10:55:fe:c1:d0:ce:87:56:5e:44:3e:9b:9d:
                    0b:45:d0:d8:1d:cc:8b:a4:b6:7c:a3:95:28:09:5b:
                    fc:49:f1:21:df:66:63:06:1c:48:36:37:01:7e:f4:
                    db:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:77:A8:AF:83:98:04:55:A6:A4:A7:0D:CC:08:D1:FD:8A:C7:8E:CC
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/B3eor4OYBFWmpKcNzAjR_YrHjsw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:82e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3b:40:d3:ec:43:5b:de:6b:3d:04:27:7d:1c:93:8f:ea:96:6e:
         b1:7e:90:78:41:64:4e:13:fc:6d:8c:e0:1e:23:ad:14:32:ae:
         9e:e2:a5:e9:8e:6d:db:c9:19:2f:1d:8c:cc:d8:d4:6b:6e:28:
         44:93:e3:2a:c6:2a:82:f9:4e:12:cb:89:8e:92:a0:c7:9f:42:
         e7:44:7e:7a:00:b5:da:f5:fe:d6:6d:ed:7b:5a:9d:31:a3:9d:
         37:af:70:e5:39:aa:8e:82:03:d2:48:9f:db:ed:85:e1:87:50:
         ff:d1:a9:ba:90:9e:d4:85:2b:32:6b:11:b2:f0:f8:22:8b:fc:
         86:bf:45:ce:85:b3:f0:84:d5:32:48:a9:aa:9b:9c:57:1b:80:
         14:a8:89:44:d3:cf:7e:f2:1b:28:7f:7b:ad:db:45:22:f1:39:
         41:2f:1f:70:d5:a7:30:01:3e:fd:6f:d5:ea:90:bf:af:2b:70:
         23:9c:a5:55:c6:5a:36:5e:55:52:c4:a0:5f:95:3c:3f:13:4a:
         f1:e5:c7:a9:4d:c1:16:70:10:37:58:7a:f8:51:77:7a:9d:2f:
         e9:ba:0d:c1:d6:15:59:9f:ce:61:ae:1a:c4:3a:b9:1b:41:53:
         25:10:81:6a:ca:21:7a:ee:89:0b:2c:9e:5e:bf:f8:cf:ea:cf:
         6a:90:05:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----