Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/WvaHTwWb0LtK8thRVrlZEKUEB0s.roa
File:                     WvaHTwWb0LtK8thRVrlZEKUEB0s.roa (raw, json)
Hash identifier:          i6ha42MGzir+l9rIBtbo6Ee0ua8l04hkGYK4ZoNjT5s=
Subject key identifier:   5A:F6:87:4F:05:9B:D0:BB:4A:F2:D8:51:56:B9:59:10:A5:04:07:4B
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       486501D8
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/WvaHTwWb0LtK8thRVrlZEKUEB0s.roa
Signing time:             Sat 01 Jan 2022 03:00:27 +0000
ROA not before:           Sat 01 Jan 2022 03:00:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44068
IP address blocks:        94.26.128.0/18 maxlen: 24
                          2a02:2510::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1214579160 (0x486501d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Jan  1 03:00:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5af6874f059bd0bb4af2d85156b95910a504074b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a7:d1:95:15:4a:8d:dc:5a:6f:9d:7f:5f:a5:
                    df:7b:dd:4c:8b:09:cd:0f:d0:c4:76:bb:32:41:85:
                    31:3b:3a:75:3d:c3:fd:15:0b:80:60:16:7c:6a:f8:
                    92:24:2f:cd:2c:c2:94:0b:a0:b3:02:83:fd:a2:a4:
                    31:4b:55:9b:79:85:a7:a4:44:a4:15:cd:17:b1:c4:
                    14:68:15:ac:08:f6:84:f7:25:b6:ce:ea:28:fc:b9:
                    73:30:e9:cf:c0:a3:e3:36:fb:3c:07:3b:51:e0:0e:
                    27:9a:e3:77:f1:91:53:15:8a:c1:5a:2a:b4:a3:af:
                    94:48:07:c9:08:02:57:bb:a2:d2:18:07:24:0c:b2:
                    53:0e:d4:9a:61:0d:dc:76:0e:78:48:26:e7:1e:a2:
                    72:35:64:3f:a0:5c:69:50:47:02:24:5e:5f:d5:f2:
                    5d:cd:a6:50:f5:cc:24:0a:5d:bf:49:34:4e:72:35:
                    70:03:ad:3a:7b:a7:82:39:f9:72:7d:5a:3c:ba:29:
                    16:29:79:29:47:dc:3c:9d:f4:ed:69:e5:ee:e0:70:
                    66:82:24:18:1a:fd:f2:12:8f:19:c1:53:9a:81:b4:
                    db:a1:c6:45:63:88:88:87:7f:a2:51:87:b1:00:37:
                    f3:fc:a2:de:9a:ea:7f:1f:93:3b:35:8e:26:bb:1a:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F6:87:4F:05:9B:D0:BB:4A:F2:D8:51:56:B9:59:10:A5:04:07:4B
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/WvaHTwWb0LtK8thRVrlZEKUEB0s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.26.128.0/18
                IPv6:
                  2a02:2510::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:60:58:40:ab:eb:2a:95:ff:28:58:c7:22:17:27:bf:14:79:
         45:9b:05:52:d3:e6:ea:e7:90:b1:17:26:df:98:ba:4b:4b:9e:
         52:47:04:53:58:97:74:8b:d7:55:5a:df:c4:73:aa:fd:2f:bf:
         8d:76:5f:4b:aa:47:54:d6:a9:89:7f:81:b2:29:09:f9:c8:e2:
         13:34:33:19:df:f8:be:f7:15:d1:93:90:46:ef:ea:a8:e6:90:
         ae:74:97:ba:3f:9f:e1:82:c7:cb:95:cf:84:fd:7f:40:e1:8d:
         87:b7:e6:81:c3:20:1d:1f:f7:c7:23:b4:ff:5c:10:e6:06:79:
         74:a3:18:88:93:2e:66:53:92:41:69:9b:73:e5:11:5f:27:86:
         08:62:51:16:f5:5f:53:07:9b:e3:6c:97:fb:8d:68:a2:64:78:
         e5:36:39:a4:10:61:e1:9f:17:e8:ab:3d:c8:fb:fa:56:5b:d3:
         10:72:c4:a6:67:5f:5b:5e:3d:d9:66:1b:e7:46:20:52:db:84:
         31:1f:f2:d3:21:3a:6a:42:72:2c:71:50:ba:1e:4b:21:10:cb:
         8c:86:5f:1c:d5:36:85:5d:4f:97:cf:60:db:40:1a:bb:de:3b:
         50:5e:8b:0f:18:ab:f5:43:8c:86:ce:e1:25:d7:e8:fe:5e:6d:
         53:55:5f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----