Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_dxstiyM3tsmK3whjhex8Znfwjw.roa
File:                     _dxstiyM3tsmK3whjhex8Znfwjw.roa (raw, json)
Hash identifier:          /Kf91CBJACUFpPQJDn5d/lDNzRfIXF1HKZBaLDJXUlk=
Subject key identifier:   FD:DC:6C:B6:2C:8C:DE:DB:26:2B:7C:21:8E:17:B1:F1:99:DF:C2:3C
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       091ACB7A
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_dxstiyM3tsmK3whjhex8Znfwjw.roa
Signing time:             Sat 01 Jan 2022 16:00:39 +0000
ROA not before:           Sat 01 Jan 2022 16:00:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204893
IP address blocks:        2a0b:b87:ffd2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152750970 (0x91acb7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 16:00:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fddc6cb62c8cdedb262b7c218e17b1f199dfc23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a1:16:58:a1:e6:d7:5a:76:d4:61:d4:13:b4:
                    af:62:1e:25:81:06:74:81:45:d2:6a:b7:71:b1:b0:
                    00:82:d6:34:0a:ad:8e:14:59:6d:11:e1:b4:03:ed:
                    bd:a7:bb:52:bc:46:5f:36:99:c5:a9:71:f7:d5:61:
                    6c:6d:ea:0f:94:08:d5:75:4a:70:5f:78:92:41:8b:
                    a2:f8:8d:3f:2b:c4:44:2d:02:b9:ef:5d:48:7e:b9:
                    bd:a4:6e:05:29:83:44:a5:08:be:69:cd:09:48:2e:
                    d3:4f:dd:3d:5e:ec:5b:b8:4b:df:a3:0f:a3:3c:3f:
                    06:50:4d:8f:10:b9:6e:0a:73:0c:d2:0c:d5:c0:5c:
                    43:b9:1d:3c:25:4d:7a:c7:6c:f0:bb:19:16:48:85:
                    e3:87:9c:8b:34:4d:fc:34:10:6a:68:a0:b8:63:41:
                    0f:71:3c:7d:b0:1f:7b:94:0a:3c:25:0a:e1:e6:c2:
                    10:02:ac:78:62:06:47:11:0e:21:ef:af:17:14:97:
                    b4:ca:32:1e:32:30:c8:27:4b:3d:53:3f:08:13:6d:
                    8c:d2:50:4c:4e:71:4f:2e:6b:7a:f3:be:99:c7:de:
                    90:79:0f:c5:8e:db:ad:9b:95:1e:30:37:0a:83:17:
                    b2:7a:7f:2d:e8:3c:93:6b:b7:66:ee:38:40:86:da:
                    be:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DC:6C:B6:2C:8C:DE:DB:26:2B:7C:21:8E:17:B1:F1:99:DF:C2:3C
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/_dxstiyM3tsmK3whjhex8Znfwjw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:b87:ffd2::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:34:e8:52:bc:6b:27:64:a3:27:85:b3:93:d3:03:6c:8c:17:
         e2:a3:18:9a:0f:ad:9c:fd:e9:81:fd:15:ff:d9:b4:8a:ac:16:
         ce:2d:34:fa:cc:87:05:e3:78:34:8e:2a:a7:b6:39:02:be:21:
         fc:97:d1:c9:95:95:a7:26:17:c2:9a:49:e0:69:7e:66:98:c8:
         76:18:e8:6e:74:5b:e7:19:dd:c2:f9:72:88:0f:db:2f:6c:8e:
         1d:ca:b1:97:c1:1b:f9:2e:bc:56:cb:57:90:34:60:54:56:f1:
         5c:d7:d1:59:b8:56:1c:0c:f9:4f:e6:ca:26:7a:7c:a4:47:51:
         2b:b9:db:d3:37:8d:ca:d5:d9:66:f3:26:4b:c3:aa:50:5a:06:
         98:15:93:ba:68:08:a9:75:4e:9e:a6:d5:dd:77:4e:ec:8e:7a:
         a5:45:0a:08:24:ca:0a:36:9d:4b:c5:ef:55:16:72:1d:6f:de:
         75:ad:7e:c7:77:97:25:1e:02:fa:d2:55:09:85:08:1d:b5:57:
         5a:3c:94:01:46:db:cc:60:5f:b7:67:93:b8:37:95:55:56:b0:
         fd:93:82:22:e3:fa:dd:10:50:5b:f2:34:cc:56:38:99:2f:06:
         22:a1:e7:cf:3a:f0:f2:29:b1:d7:10:6d:ea:b1:3e:ed:59:da:
         e2:c3:54:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----