Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fZWKfxQXrvxwwXFHNOtV2BvaBcs.roa
File:                     fZWKfxQXrvxwwXFHNOtV2BvaBcs.roa (raw, json)
Hash identifier:          W34t8D2tXrv8N3BJ21HRHinQqbYHf96lS0s3r+uHHgw=
Subject key identifier:   7D:95:8A:7F:14:17:AE:FC:70:C1:71:47:34:EB:55:D8:1B:DA:05:CB
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       0BEA7EAA
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fZWKfxQXrvxwwXFHNOtV2BvaBcs.roa
Signing time:             Sat 01 Jan 2022 12:55:04 +0000
ROA not before:           Sat 01 Jan 2022 12:55:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209833
IP address blocks:        2a0c:9a40:8130::/44 maxlen: 48
                          2a0c:9a40:8130::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199917226 (0xbea7eaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  1 12:55:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d958a7f1417aefc70c1714734eb55d81bda05cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:01:ca:92:dd:9e:34:1c:51:70:5e:20:0d:b1:
                    5a:a6:46:71:33:62:fe:16:31:82:16:58:b9:d8:f3:
                    3b:44:c1:34:64:50:14:f0:15:bc:3c:61:62:a3:b4:
                    a8:79:94:c9:1f:08:41:60:a8:1d:99:3c:f8:ec:4f:
                    f0:ac:b7:f9:30:5c:18:8d:23:3a:8f:f5:8a:45:26:
                    47:1e:f1:07:d9:0d:69:76:6b:ee:75:79:7e:75:4d:
                    9f:83:0b:81:e6:e9:0a:be:a7:51:44:88:ca:21:8f:
                    e5:6a:22:90:32:32:d1:47:22:b3:dd:7e:de:3e:43:
                    38:28:23:de:34:8f:3c:aa:19:d0:45:74:3f:6b:20:
                    75:67:33:d5:aa:53:8f:94:f8:71:a1:78:4c:d3:ce:
                    96:14:0c:8d:58:3e:1c:2b:ca:40:39:42:bb:ca:58:
                    ea:0d:8f:37:47:39:15:5d:a5:0f:e8:36:95:a9:b0:
                    b5:6b:84:9f:a0:7f:ba:28:d7:ff:bd:3a:01:d2:05:
                    9c:18:24:c0:f2:5e:c6:bb:38:e6:8f:49:c4:9d:22:
                    d3:8e:20:e0:e3:88:51:b2:fd:c0:63:4c:8a:7c:64:
                    3e:9b:01:84:3e:99:63:ff:e3:55:e5:40:8e:ba:00:
                    80:57:32:c0:cc:c1:bf:e6:5a:82:c4:b0:a8:3a:c8:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:95:8A:7F:14:17:AE:FC:70:C1:71:47:34:EB:55:D8:1B:DA:05:CB
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fZWKfxQXrvxwwXFHNOtV2BvaBcs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8130::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:e3:e2:c8:d3:6b:c1:a7:0e:b1:bc:7d:8e:a2:85:0d:6b:b7:
         8f:95:6b:8f:4a:35:fc:2c:cb:83:9c:06:6c:f9:9f:c9:60:8e:
         40:93:24:48:1f:5a:1c:4c:06:f0:5c:c5:d5:25:28:17:cc:18:
         36:d0:92:49:3a:90:30:7f:38:18:c0:30:55:96:36:a5:3e:f7:
         b4:dc:07:17:aa:63:56:2d:77:e8:04:6d:fb:0d:c6:ae:67:1c:
         43:6f:4d:b6:3c:c5:18:1c:35:02:90:54:8d:94:18:c9:77:c5:
         83:9e:bf:15:ea:7a:4e:74:97:61:6e:54:7d:05:42:b9:84:3e:
         26:ec:d3:93:4e:18:b9:fc:ed:a4:43:61:65:12:2b:de:a4:e1:
         e0:f5:95:f3:d5:0d:fa:c6:9b:2d:77:0b:cb:8f:4f:80:dc:c8:
         38:b1:0a:a1:bf:78:11:8f:5d:d4:03:cb:65:fe:41:db:15:88:
         d6:88:d1:10:ee:4c:1c:43:32:ed:25:7a:b0:ce:20:b6:11:f4:
         e7:4e:37:f2:73:1f:cd:88:96:e8:d8:e9:06:31:47:c0:9b:5b:
         64:b4:68:06:5e:76:67:fb:09:21:84:91:ad:96:1e:2a:29:11:
         19:4b:6c:4d:2e:24:72:e5:8d:96:c7:66:f9:4d:ae:7a:6e:64:
         ad:ff:7d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----