Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/e2GGk_DPiJ_d00Oms9fzOGl1A1I.roa
File:                     e2GGk_DPiJ_d00Oms9fzOGl1A1I.roa (raw, json)
Hash identifier:          9PKtiJl7E5ub2X2ZV0YYvB8zvejV5nzIn2SbqQ1zqw0=
Subject key identifier:   7B:61:86:93:F0:CF:88:9F:DD:D3:43:A6:B3:D7:F3:38:69:75:03:52
Certificate issuer:       /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial:       2CA29C0A
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/e2GGk_DPiJ_d00Oms9fzOGl1A1I.roa
Signing time:             Sat 01 Jan 2022 04:59:35 +0000
ROA not before:           Sat 01 Jan 2022 04:59:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35491
IP address blocks:        2001:1a68:15::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748854282 (0x2ca29c0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
        Validity
            Not Before: Jan  1 04:59:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b618693f0cf889fddd343a6b3d7f33869750352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:60:7f:c3:c2:68:f0:9a:d0:34:8a:2e:9c:b6:
                    80:4d:cb:c3:d9:aa:48:17:39:ec:6d:ca:4f:3d:7e:
                    2a:d3:2c:2e:0e:b1:f7:9a:f5:bc:86:96:51:6a:8b:
                    ee:c4:c9:fd:b9:5d:80:6b:90:13:1d:c6:ce:40:be:
                    b7:c1:e0:ae:c0:c0:c3:ec:d8:13:ef:0a:f6:a1:37:
                    28:a8:c5:26:26:79:55:39:34:72:b0:73:65:6b:dc:
                    c1:2e:b7:26:34:4a:29:49:d1:f4:6b:16:77:99:89:
                    a1:82:95:5a:51:6d:e5:59:fe:92:16:b0:68:db:7c:
                    97:cc:a8:bd:09:ca:e0:6a:70:d1:fa:3d:13:0a:ed:
                    b9:3a:8c:23:f7:86:94:f1:4e:82:67:df:94:57:b3:
                    c0:3a:3d:f2:29:45:45:c9:d7:13:0f:83:ce:11:0d:
                    27:e5:de:ad:3a:f7:0c:24:9a:fd:1c:7d:6d:0e:4e:
                    ef:8b:35:d1:45:18:63:45:66:d5:ca:e0:7b:e0:0f:
                    2e:fc:63:18:10:ef:d0:66:6c:dd:84:45:19:bc:c1:
                    f5:36:83:60:4d:8d:48:12:99:05:b9:d9:f9:f0:4f:
                    a9:22:a0:19:fb:e5:4d:87:8a:41:30:9e:30:1a:0c:
                    f6:88:14:23:75:7c:2b:2a:31:fd:f4:33:1b:8f:ca:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:61:86:93:F0:CF:88:9F:DD:D3:43:A6:B3:D7:F3:38:69:75:03:52
            X509v3 Authority Key Identifier:
                keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/e2GGk_DPiJ_d00Oms9fzOGl1A1I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1a68:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:07:bd:99:fd:d4:4f:8f:6f:7c:e2:6c:39:bc:3e:83:00:d1:
         ee:18:0d:9d:5b:53:2e:07:fb:f7:c5:d6:0f:7b:26:91:9c:1d:
         d9:4d:0e:0e:11:af:98:d2:f6:c6:34:8a:4b:35:1d:98:08:64:
         62:e8:5a:05:e7:f3:c4:1d:3b:ef:3b:c6:38:f1:3c:52:77:e1:
         df:87:58:ca:4f:40:89:2a:1a:ad:ae:79:56:b6:30:40:08:79:
         2e:1f:19:9e:b8:82:28:32:82:67:c2:e9:f0:c9:eb:93:9b:99:
         85:1e:a0:36:d5:c4:8d:49:bb:f2:67:d3:5a:61:74:58:4a:2b:
         9b:81:8a:5a:c8:19:58:b6:eb:56:b9:25:2c:3a:97:a9:76:f9:
         81:33:48:69:62:9c:33:39:fa:c8:13:e9:57:02:1d:78:c6:23:
         74:3c:02:a6:ab:88:07:93:af:1b:b5:d5:f2:ba:5f:ff:74:96:
         bc:4b:48:e9:91:8a:db:7b:da:f5:e0:5d:d8:3a:33:a2:46:bb:
         43:3e:dc:6e:bf:a6:b1:49:51:b0:8c:db:54:71:01:8d:75:21:
         6f:4c:81:b4:7e:7d:81:97:25:07:6e:59:e6:5b:06:e8:83:7b:
         2f:a0:8b:e3:35:a4:44:10:24:7a:51:55:7d:6e:5c:53:a9:55:
         f0:69:05:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----