Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/wD5aldbSZajv_eCDpX9fPw5xhDI.roa
File:                     wD5aldbSZajv_eCDpX9fPw5xhDI.roa (raw, json)
Hash identifier:          jgZmNWThgeW2FfAFZ/+hqPhfXBAglbHJ1X1V9mbMrrI=
Subject key identifier:   C0:3E:5A:95:D6:D2:65:A8:EF:FD:E0:83:A5:7F:5F:3F:0E:71:84:32
Certificate issuer:       /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial:       08B44F6E
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/wD5aldbSZajv_eCDpX9fPw5xhDI.roa
Signing time:             Sat 01 Jan 2022 06:03:46 +0000
ROA not before:           Sat 01 Jan 2022 06:03:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     378
IP address blocks:        132.66.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146034542 (0x8b44f6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
        Validity
            Not Before: Jan  1 06:03:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c03e5a95d6d265a8effde083a57f5f3f0e718432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:70:e0:a5:a7:ce:ec:63:12:20:2d:5e:36:de:
                    3f:e9:af:49:58:51:bf:be:74:77:d1:29:15:3a:44:
                    54:95:f5:f8:c5:22:04:5a:9c:69:7f:f0:f5:0d:db:
                    85:4b:04:b8:97:da:ef:6d:14:8e:26:c2:ee:16:bf:
                    a2:bf:bc:93:fd:7c:f2:ac:a3:a1:ef:11:3c:15:e8:
                    90:52:4d:ff:70:58:02:5e:04:38:b5:3d:bd:90:7c:
                    1e:9e:61:7d:6e:2e:4f:6b:d3:88:fa:68:a7:4c:39:
                    8c:bf:61:f7:4b:a5:74:49:2f:ee:7d:e6:7a:84:98:
                    06:3e:05:26:75:bf:b2:19:5e:e6:31:ec:1f:64:ea:
                    7e:8e:8c:06:f8:08:af:0d:e4:61:af:92:de:af:d9:
                    00:7e:65:1d:03:6e:0f:ec:b6:c7:d2:76:55:59:cc:
                    8e:15:b7:c8:64:2a:0e:06:33:8d:d1:d5:90:23:25:
                    fa:c4:b3:e3:2d:f2:c3:2c:45:cb:a0:5b:ba:df:31:
                    2a:c2:e8:bb:76:b3:ce:9e:3a:3c:f8:44:cc:ac:85:
                    dc:60:b2:e3:31:d3:c1:86:b1:51:be:0f:c7:49:ed:
                    eb:50:45:44:28:6b:1e:83:db:3a:83:66:b3:ed:d2:
                    7a:8c:14:51:1b:aa:93:3d:0e:68:bd:3e:12:00:a8:
                    fc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3E:5A:95:D6:D2:65:A8:EF:FD:E0:83:A5:7F:5F:3F:0E:71:84:32
            X509v3 Authority Key Identifier:
                keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/wD5aldbSZajv_eCDpX9fPw5xhDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.66.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a5:ec:fd:2b:6d:85:70:10:26:b8:7a:6a:6a:6d:c6:81:55:2f:
         e2:6b:93:74:29:b9:1c:3e:c7:2d:52:2b:b3:85:bb:aa:d5:b8:
         c7:f1:7a:fb:71:8d:41:02:81:fa:88:c6:0e:3e:b1:50:06:ce:
         d6:19:4a:bd:0c:76:f2:15:c2:6a:a2:f6:5b:63:4d:07:f8:d1:
         ba:20:28:62:a7:9e:43:a0:f3:81:08:57:e8:d2:98:17:ed:39:
         3a:d2:8f:b8:d6:7a:62:03:dc:75:28:e9:54:00:4e:dd:1a:8d:
         c5:38:d5:77:42:73:27:6f:1c:cf:f0:e6:b3:78:7b:53:52:46:
         65:b5:35:a5:c1:be:0b:30:14:b1:0e:40:e8:2d:9b:2b:77:c4:
         d0:a2:51:70:77:53:e9:e6:0f:79:93:ef:f1:45:a3:28:75:93:
         20:59:48:31:a4:8e:76:23:de:e5:f5:84:a0:f9:ec:ea:96:09:
         66:9a:ac:d3:b7:31:bc:2b:be:28:a9:bd:ba:9c:f9:91:20:d5:
         56:5a:d8:8d:46:b5:cc:3c:2d:1f:15:3b:ca:86:e3:e1:8f:1f:
         de:aa:9a:73:59:21:ee:60:12:31:f1:8e:af:cb:23:88:aa:3f:
         f5:74:11:78:5b:51:08:e0:ed:c5:6b:87:af:d9:60:aa:00:49:
         65:2e:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----