Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/p4FROfE3bDVDuyXJdXG5PlSholA.roa
File:                     p4FROfE3bDVDuyXJdXG5PlSholA.roa (raw, json)
Hash identifier:          sj7PUm0re02bm78AKVRtRKJjeBAx9WqTbqEsaCIZ+YA=
Subject key identifier:   A7:81:51:39:F1:37:6C:35:43:BB:25:C9:75:71:B9:3E:54:A1:A2:50
Certificate issuer:       /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial:       0183EA1C11B58EC52E3EF6480DD1081D14B0
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/p4FROfE3bDVDuyXJdXG5PlSholA.roa
Signing time:             Tue 18 Oct 2022 08:00:51 +0000
ROA not before:           Tue 18 Oct 2022 08:00:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147049
IP address blocks:        2a13:240::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:ea:1c:11:b5:8e:c5:2e:3e:f6:48:0d:d1:08:1d:14:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
        Validity
            Not Before: Oct 18 08:00:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a7815139f1376c3543bb25c97571b93e54a1a250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:08:b8:1f:53:59:9a:2d:55:15:e5:5d:7d:31:
                    b5:f2:8e:58:ff:69:37:61:6f:43:a6:b7:9d:db:52:
                    38:3d:40:3f:cc:9a:3a:6f:db:62:c5:89:11:4e:82:
                    0e:66:24:22:2e:fd:e8:b3:4f:8a:ad:2b:0f:b0:32:
                    2c:09:f2:d0:1e:47:b5:89:a4:71:70:54:2c:5d:83:
                    39:fa:81:8b:13:c0:c5:0c:ff:ea:cb:44:f0:ce:94:
                    27:cb:d2:5c:9e:d3:29:9e:0c:3c:6d:0c:36:3e:e9:
                    b4:4d:45:93:fc:c5:26:37:67:f4:a8:3c:b4:41:0d:
                    bc:6a:df:a2:11:27:58:95:5e:e3:07:cc:92:22:f5:
                    55:44:c7:77:95:0d:d1:48:4c:b2:7c:94:c6:a3:75:
                    8b:bc:9f:30:51:5b:bd:7c:43:be:5b:8c:92:a4:5e:
                    1f:75:a5:7f:6c:c6:7e:03:35:bb:5c:ac:91:9d:8f:
                    87:47:80:23:20:56:da:65:a4:3b:44:7d:d1:25:cf:
                    b1:ea:38:50:47:67:59:b7:1d:77:98:b1:0a:9a:cb:
                    f0:23:4e:03:5c:52:35:e7:b3:46:c7:cd:86:bc:83:
                    91:bd:fd:3b:15:1e:24:32:79:17:0d:f9:9c:cf:c8:
                    68:7f:b5:3d:7d:53:26:22:aa:37:ba:f5:85:77:d3:
                    c3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:81:51:39:F1:37:6C:35:43:BB:25:C9:75:71:B9:3E:54:A1:A2:50
            X509v3 Authority Key Identifier:
                keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/p4FROfE3bDVDuyXJdXG5PlSholA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:240::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:60:1b:04:32:73:92:5a:9d:6a:cb:bb:f8:18:8c:50:c5:10:
         c9:0e:5d:9c:b3:39:58:38:59:9e:96:b2:2a:e8:cc:ba:89:b6:
         02:03:12:c0:03:7c:2c:b2:ab:68:4e:c7:3f:f4:b2:ed:31:47:
         c7:ed:a8:49:80:23:f9:33:10:e6:29:aa:2c:3d:01:72:bd:20:
         ea:0b:8b:ec:37:eb:bd:a2:50:5e:e8:e2:9d:68:84:7e:47:6e:
         c2:cb:65:a5:30:b4:34:b8:f8:bf:06:2b:35:6d:97:83:02:84:
         b1:d4:f9:ac:4e:a6:1e:d7:24:e2:8d:77:23:9c:7f:e5:9e:da:
         bc:d8:de:27:5d:f0:8a:e5:41:e4:a0:7c:13:c7:ae:7d:86:ae:
         37:5e:e3:56:b6:ff:79:d4:ae:4f:80:5e:61:6f:dc:13:fb:8d:
         41:15:b0:f9:a2:ae:fb:82:a7:96:1e:29:3b:8d:80:2b:49:fe:
         fb:81:92:0d:15:0a:9f:41:89:fd:b6:92:a2:d7:0b:b8:b3:d8:
         80:bf:31:0c:30:e0:c3:ee:2d:a9:de:22:86:ed:0a:87:e1:54:
         29:2e:fe:40:70:0b:4b:ea:bd:a0:77:bf:4e:9e:cb:7c:8b:38:
         84:df:22:36:01:2a:67:7a:45:02:c9:8b:b6:a6:04:63:f8:3a:
         27:c4:5b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----