Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/4XSHKdFAh8BGRX_ashzFAakbZCA.roa
File:                     4XSHKdFAh8BGRX_ashzFAakbZCA.roa (raw, json)
Hash identifier:          Z6+aK4RLIZ8qBCLTZK+eqmQ54S2MjZ5rONqqNaX09yw=
Subject key identifier:   E1:74:87:29:D1:40:87:C0:46:45:7F:DA:B2:1C:C5:01:A9:1B:64:20
Certificate issuer:       /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial:       433BBEC7
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/4XSHKdFAh8BGRX_ashzFAakbZCA.roa
Signing time:             Sat 01 Jan 2022 07:59:49 +0000
ROA not before:           Sat 01 Jan 2022 07:59:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16265
IP address blocks:        2a03:f85:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127988935 (0x433bbec7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
        Validity
            Not Before: Jan  1 07:59:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e1748729d14087c046457fdab21cc501a91b6420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e0:67:28:9d:4a:67:84:2a:da:4c:14:eb:47:
                    51:f9:a3:c0:b2:cb:5e:20:40:0b:5d:d7:8f:b1:5d:
                    64:ab:d3:62:44:a1:84:2c:52:33:dd:d6:6d:56:2d:
                    67:94:16:98:a5:c8:2e:c6:a4:55:90:02:b9:2e:1f:
                    fa:70:c2:10:81:38:fe:57:b7:bd:95:4b:96:72:54:
                    c4:49:f2:db:dd:fb:08:0b:59:26:09:30:76:c1:16:
                    ce:70:a2:93:a6:41:62:93:d5:87:36:92:07:76:9c:
                    01:69:bd:03:1b:7a:6f:bd:bf:f7:fc:0c:be:39:5d:
                    3b:30:f0:2f:22:7b:83:d0:57:f9:11:c4:b6:10:b8:
                    36:26:02:05:27:4b:97:e5:69:36:2e:df:17:54:b2:
                    7c:72:d5:e4:a8:fd:4d:06:07:7f:85:f9:b9:e4:92:
                    7d:d2:16:80:3b:47:9c:55:7b:c8:6c:08:65:88:56:
                    3a:b1:c2:4e:04:7e:70:e5:b1:b9:09:ec:a1:bb:6b:
                    16:96:36:8e:9f:86:88:88:3e:24:bd:ee:6c:be:75:
                    51:30:7c:73:51:22:1c:a9:ae:de:26:97:05:96:fc:
                    ea:f5:57:7c:16:15:36:01:4e:14:e8:8e:13:dd:63:
                    a4:59:e2:0f:95:bb:fd:74:fb:5b:ae:b9:6c:ae:7a:
                    6f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:74:87:29:D1:40:87:C0:46:45:7F:DA:B2:1C:C5:01:A9:1B:64:20
            X509v3 Authority Key Identifier:
                keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/4XSHKdFAh8BGRX_ashzFAakbZCA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:f85:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:59:30:3b:70:5d:88:a6:26:29:f3:17:d9:04:9b:71:cf:b1:
         cb:9d:61:44:51:53:38:f1:bc:22:cf:ae:c7:42:fd:3a:07:7d:
         80:a1:a0:1e:e7:8b:7e:83:b4:53:7c:9e:57:3f:cd:8c:bd:02:
         8e:3f:ea:d4:fa:a9:77:ee:47:a0:2b:04:9d:63:ad:1d:2f:92:
         e3:3c:25:5c:a4:32:fb:33:25:96:50:67:ac:b2:2d:80:17:d2:
         c6:8f:2d:af:32:c0:a4:06:8f:96:1f:a6:4d:57:92:f2:03:72:
         e5:5e:8d:ca:65:ab:25:00:79:f0:f4:d3:24:c8:1c:65:3e:7b:
         cc:28:5b:ec:a7:c0:6b:ac:04:9f:79:26:49:c3:29:31:17:c0:
         fd:99:6f:27:93:42:76:f5:14:e3:83:c7:db:d5:b4:99:2a:88:
         76:46:d1:29:c6:46:db:c1:48:f4:70:e8:85:6b:af:3e:db:3a:
         94:0e:4a:d2:b1:ee:13:da:cf:6f:53:08:b9:74:22:7a:93:e4:
         79:d2:3e:29:53:34:c3:18:0a:4a:8f:2d:20:07:57:0b:e0:ed:
         53:35:f9:4e:50:fc:da:66:cd:0d:7d:ad:7a:8f:3e:a1:a1:73:
         98:40:dc:6d:dd:c3:1f:6f:88:c3:e5:f1:a8:30:0f:97:85:0b:
         06:41:36:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----