Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aYqC10NG0t9DGvWiKZilS2uhIkQ.roa
File:                     aYqC10NG0t9DGvWiKZilS2uhIkQ.roa (raw, json)
Hash identifier:          +vwbltDESykKqX6MxX4hd4pK9Sbo9KBgpWKDwi/m3+M=
Subject key identifier:   69:8A:82:D7:43:46:D2:DF:43:1A:F5:A2:29:98:A5:4B:6B:A1:22:44
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       0184569C25EE319180FCC06416BA21BB883F
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aYqC10NG0t9DGvWiKZilS2uhIkQ.roa
Signing time:             Tue 08 Nov 2022 09:39:44 +0000
ROA not before:           Tue 08 Nov 2022 09:39:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205920
IP address blocks:        2001:67c:8dc::/48 maxlen: 48
                          2a10:a500::/32 maxlen: 32
                          2a10:a500:20::/48 maxlen: 48
                          2a10:a500::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:56:9c:25:ee:31:91:80:fc:c0:64:16:ba:21:bb:88:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Nov  8 09:39:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=698a82d74346d2df431af5a22998a54b6ba12244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:41:cf:39:86:16:15:df:7a:73:aa:59:9d:
                    8f:32:75:98:fa:37:c4:a8:12:36:82:eb:c3:33:a1:
                    79:5f:3f:1a:d6:21:ee:68:03:51:25:b7:74:bc:fa:
                    9a:ac:03:19:61:6d:06:6a:c9:4a:62:56:fa:9c:b3:
                    08:34:72:ff:02:6a:e4:9c:a7:a5:06:54:d4:33:d3:
                    7b:33:0f:c2:b3:55:2f:99:47:5b:1f:dc:3f:12:e4:
                    65:74:b6:20:a2:4b:83:10:ba:0b:56:c6:2d:7b:3f:
                    35:60:cd:58:de:ac:30:eb:c3:5c:53:66:be:49:6a:
                    d3:20:b6:b7:75:c3:d6:a9:67:ef:43:98:4c:f0:19:
                    8d:03:97:90:9d:64:97:2a:e0:fa:1f:02:1c:ba:79:
                    b1:c6:4c:53:31:e6:63:2f:80:8a:83:f8:93:6b:b6:
                    b1:db:bb:48:a6:d5:1c:a2:79:22:3a:56:28:c5:bc:
                    45:53:75:41:dc:e6:9b:e9:c3:34:ba:1b:62:bd:94:
                    e6:ee:18:d8:f7:a1:7c:fc:87:17:54:47:40:36:c7:
                    0b:1b:ab:86:a2:f3:da:e9:06:bf:c1:03:19:d2:c4:
                    d0:f1:a5:05:7e:ff:2e:d0:44:bd:b5:4a:63:e5:b1:
                    09:9c:76:46:80:9f:d8:27:4c:8d:bf:26:91:f2:1b:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8A:82:D7:43:46:D2:DF:43:1A:F5:A2:29:98:A5:4B:6B:A1:22:44
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/aYqC10NG0t9DGvWiKZilS2uhIkQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:8dc::/48
                  2a10:a500::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:11:11:c6:a1:b2:94:bb:c2:99:5f:5b:da:f5:78:da:dc:ac:
         6e:34:81:07:78:26:ab:01:05:d4:56:e6:e7:38:f1:01:3d:c3:
         62:8c:79:e7:a7:1b:7d:f3:03:90:53:aa:ac:0a:14:57:d7:df:
         57:07:e3:8f:3a:7e:ab:3b:31:cf:bd:37:1a:cd:af:1f:a4:ea:
         24:19:1a:54:f6:78:b9:47:df:db:e5:46:7e:51:7d:53:96:47:
         f7:38:02:ce:80:5e:43:f8:a9:3e:7e:99:af:ab:d0:d7:5e:72:
         d7:c9:cb:4e:a0:f5:eb:8e:0e:57:a7:7c:a7:ec:1a:85:59:b7:
         aa:7c:59:2a:de:f4:c8:23:b6:41:41:57:40:54:9e:ed:09:e2:
         ff:1c:8d:d1:8d:55:ea:7b:37:04:02:7e:07:5c:9a:9b:55:55:
         d6:dc:b8:a8:07:a7:4d:de:0a:b7:1e:49:29:77:15:73:ff:a3:
         12:ee:32:88:b2:93:dd:0e:e0:fe:2d:da:d7:8b:67:fd:48:0f:
         35:8a:4f:98:53:2b:cf:cd:71:e3:4b:72:02:55:24:3a:54:d8:
         ae:d0:eb:3b:91:2c:43:9a:1b:de:5b:4d:d0:7b:77:38:75:40:
         32:09:9b:72:f8:fa:0f:03:f0:34:cf:e4:61:9f:fc:c9:d8:4c:
         93:32:14:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----