Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/PQDsU9HefEDAppBQtoSnYQIatg0.roa
File:                     PQDsU9HefEDAppBQtoSnYQIatg0.roa (raw, json)
Hash identifier:          J+9W0f5KZF0tjhuWMLNjOI6RlWmIWSRm23/jXrSu/gA=
Subject key identifier:   3D:00:EC:53:D1:DE:7C:40:C0:A6:90:50:B6:84:A7:61:02:1A:B6:0D
Certificate issuer:       /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial:       43397511
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/PQDsU9HefEDAppBQtoSnYQIatg0.roa
Signing time:             Sat 01 Jan 2022 07:59:48 +0000
ROA not before:           Sat 01 Jan 2022 07:59:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     5541
IP address blocks:        2a03:f80:40::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127838993 (0x43397511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
        Validity
            Not Before: Jan  1 07:59:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3d00ec53d1de7c40c0a69050b684a761021ab60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:06:5e:c2:f7:ac:85:71:c3:0a:3c:0f:ff:
                    1a:67:d8:20:66:3f:3f:c2:2c:fc:5a:81:c4:07:cf:
                    20:03:b7:e3:7c:86:51:14:ba:5b:5d:77:ee:eb:2b:
                    42:a5:81:6b:d3:73:91:c5:e0:62:e7:c5:54:6d:43:
                    de:83:11:2d:ed:6a:cc:ab:db:8b:ad:27:c0:79:0e:
                    a7:9f:b2:94:fd:08:a4:7d:b7:d1:dd:d4:aa:d7:35:
                    8c:75:5b:4d:1a:10:2c:54:44:45:1a:6e:ff:60:64:
                    00:6d:bd:70:74:45:57:2d:70:3f:8c:a5:8d:fd:38:
                    26:de:0f:92:a4:e6:be:52:f1:ac:8d:3d:2f:27:9a:
                    e0:48:f9:85:56:fd:13:36:62:0e:2c:8c:ed:6e:81:
                    f4:96:59:46:d3:80:c9:14:f2:94:c9:53:2f:76:0a:
                    9f:81:e5:4c:0a:43:51:3c:73:a6:3d:bc:7a:b8:8d:
                    9f:7d:77:4a:c6:7e:05:8f:78:0a:cc:24:19:72:dd:
                    3f:02:3c:6a:f6:5d:da:c2:f5:c3:d1:6f:bd:95:7e:
                    a4:e0:ee:3d:2c:50:26:de:d9:05:4a:d9:32:77:18:
                    14:85:17:64:0d:52:6b:8a:3c:48:eb:d8:ee:05:87:
                    e5:6a:3c:8d:5a:bc:15:45:d7:40:9f:9d:bb:91:ca:
                    78:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:00:EC:53:D1:DE:7C:40:C0:A6:90:50:B6:84:A7:61:02:1A:B6:0D
            X509v3 Authority Key Identifier:
                keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/PQDsU9HefEDAppBQtoSnYQIatg0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:f80:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:f1:7c:d7:93:45:20:fc:d7:40:b6:f3:d3:9a:cd:e6:43:06:
         d8:96:42:80:13:1e:bc:2d:86:cc:74:8a:a1:ad:e2:a1:c8:06:
         c6:75:4e:80:2d:6f:35:c1:1e:c4:37:37:bf:f7:69:23:33:ac:
         b1:b0:b5:be:5a:0c:95:b0:f8:39:f7:0f:46:68:3e:f7:e1:42:
         b6:4d:7a:65:ee:5d:80:fd:4d:85:29:d2:eb:85:5b:f2:0a:5b:
         37:e1:c6:4a:15:72:60:16:53:1c:38:6a:02:39:87:82:c2:96:
         4b:f7:b6:85:f1:81:31:a7:be:77:10:ab:9b:38:91:12:91:e1:
         b6:c9:39:89:a8:73:e9:5c:41:59:17:67:89:76:49:70:34:37:
         0f:bb:85:0b:90:ad:ec:60:7c:48:35:57:3d:22:4b:a3:7f:03:
         d1:41:d9:9f:26:94:97:8c:6b:8a:ba:ab:f6:35:a4:6c:5a:6c:
         36:2e:a1:1a:bf:bf:e3:31:0c:b7:02:f3:65:1b:7d:f6:d0:d7:
         77:a9:10:ef:3a:1e:75:64:09:be:e0:9d:65:d1:df:4c:1a:f9:
         b5:f0:9d:e3:5d:16:61:90:2b:d8:4e:1f:52:ec:92:58:98:67:
         af:5d:fd:4a:eb:bc:ca:a7:16:24:5a:56:49:f3:1f:ba:e2:58:
         02:41:82:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----