Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/EfNHFXplIlosGJO55tuoV3ZKdzw.roa
File:                     EfNHFXplIlosGJO55tuoV3ZKdzw.roa (raw, json)
Hash identifier:          Ys56HIEGg780uHq1MCq1ZQdIhfqNfizx/mtRvMWwVio=
Subject key identifier:   11:F3:47:15:7A:65:22:5A:2C:18:93:B9:E6:DB:A8:57:76:4A:77:3C
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       0937760E
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/EfNHFXplIlosGJO55tuoV3ZKdzw.roa
Signing time:             Sat 01 Jan 2022 16:01:01 +0000
ROA not before:           Sat 01 Jan 2022 16:01:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212647
IP address blocks:        2a0b:b87:ffa0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154629646 (0x937760e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 16:01:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11f347157a65225a2c1893b9e6dba857764a773c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3e:2f:45:11:26:23:3a:51:14:5e:af:09:a3:
                    18:45:63:f6:a9:26:57:3b:bb:ed:61:9d:17:68:21:
                    7a:94:01:fa:33:87:1f:49:d6:51:76:75:39:9c:8e:
                    9f:58:ba:3f:02:82:82:10:35:63:c3:89:c2:70:5e:
                    66:cd:47:b1:21:01:32:00:95:8b:28:29:b4:c5:2d:
                    ca:8b:c2:d7:9c:21:e2:36:69:f5:2f:02:90:aa:db:
                    d6:c0:c9:8b:c6:8e:c7:d6:f6:2d:b6:a7:de:09:9a:
                    c6:ad:8f:6f:23:dc:a5:bf:f2:74:88:68:21:0d:35:
                    e1:d2:4c:03:18:ae:22:ee:1d:36:ef:05:2d:0d:d9:
                    30:17:da:df:ba:fb:5c:c4:fc:c3:51:57:7d:c5:ed:
                    5f:f1:f2:16:b5:3a:f7:d6:56:50:02:8e:61:27:a9:
                    a6:c4:1c:42:f2:b5:e5:79:79:97:ef:e0:85:3b:df:
                    fe:0a:aa:a9:ab:05:d8:26:15:2f:a3:40:62:5a:f3:
                    fb:74:80:6e:32:f2:0b:14:22:87:d6:ef:c4:da:64:
                    7a:9d:40:3d:19:10:0b:39:d6:4b:f8:61:95:03:d6:
                    14:dd:88:fe:b2:92:9e:28:28:36:29:cc:2d:f2:ff:
                    ad:05:65:59:c1:84:99:d9:c5:3a:b8:80:1c:19:ef:
                    e8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F3:47:15:7A:65:22:5A:2C:18:93:B9:E6:DB:A8:57:76:4A:77:3C
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/EfNHFXplIlosGJO55tuoV3ZKdzw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:b87:ffa0::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:4d:4a:f8:63:4a:7f:fc:e4:79:d8:9b:ac:a8:18:bf:64:c0:
         c1:89:68:ed:22:4f:74:34:00:98:b0:90:86:e5:81:47:9b:04:
         e7:de:1c:4f:6a:e4:78:2d:98:a1:4e:d4:64:49:92:63:b3:65:
         e0:ea:71:25:7c:7c:09:5d:d4:0f:b4:d8:c3:2d:fe:4f:4c:e3:
         26:17:e1:1e:bd:26:81:e0:ff:f3:db:89:d8:81:59:de:39:53:
         d6:de:a3:48:43:2f:c7:6a:0e:fa:69:07:21:77:fb:db:57:31:
         e3:20:b9:cf:96:41:7d:5a:3b:fc:1f:e1:fb:11:e4:85:92:8f:
         d7:4f:62:d1:bc:d9:a8:a9:82:72:26:e3:78:ad:98:75:cc:2b:
         f4:54:b2:2d:80:7a:60:7c:a2:8b:1f:18:a6:e3:89:e9:45:6e:
         d3:37:2b:c2:42:cf:50:fd:7b:a6:c7:ae:39:02:11:d7:9a:16:
         d6:c9:eb:c5:05:b6:77:b5:c0:b6:ad:12:21:5e:2f:47:67:0e:
         3b:f1:eb:52:b3:15:ab:d4:f6:7b:6d:53:e6:89:8f:0d:f2:83:
         59:49:a4:0d:a8:d7:b2:f4:e5:4c:82:1b:2a:76:ad:b4:2c:90:
         f7:c7:44:b5:67:8e:5d:9b:47:d6:5e:0e:55:aa:5e:8e:31:62:
         06:cb:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----