Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/J6BefBiwudm06tzYGnAmlg5b3Q4.roa
File:                     J6BefBiwudm06tzYGnAmlg5b3Q4.roa (raw, json)
Hash identifier:          cVHdprgqSarxu1GDEH0HyYVOyqefZWvID9IGzTnODFw=
Subject key identifier:   27:A0:5E:7C:18:B0:B9:D9:B4:EA:DC:D8:1A:70:26:96:0E:5B:DD:0E
Certificate issuer:       /CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Certificate serial:       03294ACA
Authority key identifier: A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/J6BefBiwudm06tzYGnAmlg5b3Q4.roa
Signing time:             Sat 01 Jan 2022 16:03:33 +0000
ROA not before:           Sat 01 Jan 2022 16:03:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212125
IP address blocks:        2001:67c:2904::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53037770 (0x3294aca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
        Validity
            Not Before: Jan  1 16:03:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=27a05e7c18b0b9d9b4eadcd81a7026960e5bdd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:0e:d7:62:a4:cb:7c:3f:16:5a:b0:26:9a:
                    87:71:4e:d6:f7:f7:9a:bc:3c:01:61:50:e7:f3:89:
                    95:71:1c:d8:41:33:c5:e1:ec:75:5f:df:fa:05:4e:
                    e8:c1:a7:ad:ca:37:7d:0d:cd:12:10:bc:56:25:9e:
                    d8:4a:b4:c2:ce:89:55:7d:25:a7:5b:a7:31:d0:94:
                    1e:cc:6e:29:0b:8e:f3:cf:2f:8c:fc:d0:7a:08:51:
                    90:71:50:16:12:fa:bf:58:7b:66:0f:28:ef:38:cd:
                    bb:84:db:8c:b7:bc:a6:c6:f5:8a:4f:c8:a4:e9:68:
                    a2:f9:a6:be:43:b0:a4:fa:dd:17:57:b8:6f:0c:3c:
                    5b:98:ff:47:c4:b1:27:d5:41:b8:7a:d8:1b:d2:dd:
                    cb:d4:f5:c0:fb:6d:56:2b:ae:d5:a3:e0:ae:6d:4e:
                    fa:4d:fe:c6:94:89:69:45:71:3b:69:7c:2a:d4:e4:
                    04:16:25:95:0d:c0:d2:ba:24:e4:34:3d:dc:fc:50:
                    5e:99:a5:36:45:47:22:4e:d4:0b:17:ce:ab:c6:d5:
                    13:5a:b6:ea:e5:65:89:f9:e0:b4:99:e8:f7:02:5a:
                    9c:14:09:e2:a9:eb:34:53:af:f8:db:74:ea:40:69:
                    1a:9e:82:48:1b:a6:03:c8:e4:ca:57:9b:52:e5:fc:
                    c1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A0:5E:7C:18:B0:B9:D9:B4:EA:DC:D8:1A:70:26:96:0E:5B:DD:0E
            X509v3 Authority Key Identifier:
                keyid:A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/J6BefBiwudm06tzYGnAmlg5b3Q4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2904::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:28:5b:08:bd:22:31:69:a7:0d:b3:ca:08:6d:07:23:95:0b:
         e4:d5:53:6e:98:4d:1d:d6:a0:92:89:01:ce:d5:62:d0:64:28:
         d4:ce:1d:07:41:5d:ce:f0:5a:10:26:c8:38:38:88:e8:0a:5c:
         3f:5e:a1:ad:91:a8:9e:c8:11:3f:d7:56:f8:bf:b7:71:da:da:
         58:b2:3e:02:3f:60:6a:19:57:c1:89:82:d4:4d:72:ac:04:65:
         50:23:0d:a1:d3:a8:23:5f:a0:e0:f3:87:97:4a:0a:b6:72:1c:
         0d:ac:fc:1a:98:54:30:5a:9b:48:17:1d:e7:a4:7f:25:27:b2:
         50:f9:ef:a9:2c:5b:9a:96:7e:23:04:69:47:f1:ff:bd:a4:1c:
         79:08:71:1e:7c:0c:c5:42:3a:ac:60:65:fe:a1:ab:4d:12:fc:
         d4:e6:d9:56:65:d5:00:b4:bf:4d:13:8f:15:2d:86:d5:c9:fa:
         83:d4:a0:af:7f:2a:1d:db:e8:23:ad:6d:9c:f5:d7:87:0e:5c:
         c3:33:b9:8d:7d:61:7b:06:4a:3c:d3:65:1f:af:20:2b:c6:04:
         0c:a5:a6:b7:f4:0a:62:8c:f5:84:c0:46:6b:0b:b3:3d:10:d6:
         e0:63:31:19:bd:29:4a:17:22:43:26:37:24:39:c4:82:44:cf:
         94:00:9f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----