Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/5eRkAmKJbI1OQHKAB1hHfklJk-4.roa
File:                     5eRkAmKJbI1OQHKAB1hHfklJk-4.roa (raw, json)
Hash identifier:          6G8l9jysUYojcu1oK2NVNjRNT46Icovdqd98+/qvA9I=
Subject key identifier:   E5:E4:64:02:62:89:6C:8D:4E:40:72:80:07:58:47:7E:49:49:93:EE
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       02DF11FE
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/5eRkAmKJbI1OQHKAB1hHfklJk-4.roa
Signing time:             Thu 24 Feb 2022 18:58:48 +0000
ROA not before:           Thu 24 Feb 2022 18:58:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212271
IP address blocks:        2a05:4143::/32 maxlen: 48
                          2a05:4144::/32 maxlen: 32
                          2a05:4140:400::/40 maxlen: 48
                          2a05:4140:300::/40 maxlen: 40
                          2a05:4140:600::/40 maxlen: 40
                          2a05:4140:3::/48 maxlen: 48
                          2a05:4140:16::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48173566 (0x2df11fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Feb 24 18:58:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e5e4640262896c8d4e4072800758477e494993ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:39:3c:00:fb:5d:62:f0:34:8f:84:12:70:48:
                    28:06:3b:6f:5a:23:c1:cc:2a:da:9a:d1:7e:0c:43:
                    72:7c:e9:70:be:fd:a4:be:3a:33:ed:7e:eb:2b:3f:
                    15:ff:e4:46:4c:7f:b5:52:ad:e9:62:49:60:93:ad:
                    e6:a8:78:68:fc:c8:29:24:4c:db:58:f5:af:9b:9f:
                    8a:55:33:96:5c:3b:07:5e:2a:0c:e4:6a:e0:32:b4:
                    b1:43:03:66:35:2f:4b:32:65:e9:50:d3:1c:69:c2:
                    10:b2:1e:da:8d:58:a7:ce:82:ee:aa:c0:78:3e:cc:
                    3d:a4:67:90:42:5b:18:dd:15:62:f8:72:68:ae:44:
                    1b:c1:1c:0d:01:f3:d5:1b:d3:95:5b:4e:c8:6f:25:
                    ec:75:0a:6c:aa:57:bd:df:33:6e:e0:45:ca:86:17:
                    a0:b3:d3:4c:1d:79:03:fc:ad:37:bc:1b:2a:b0:29:
                    eb:e3:1f:a4:6b:20:32:e2:b5:43:39:35:80:47:fa:
                    6f:9e:11:11:e6:62:3f:77:03:9f:bc:30:9c:fe:1b:
                    5c:74:12:d0:65:50:6e:80:9f:f4:55:73:80:50:b1:
                    3f:43:bc:5a:c3:e1:97:4a:db:d1:ea:be:df:85:ba:
                    42:f6:9e:22:96:27:af:65:1e:43:19:e2:4d:5b:7b:
                    09:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E4:64:02:62:89:6C:8D:4E:40:72:80:07:58:47:7E:49:49:93:EE
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/5eRkAmKJbI1OQHKAB1hHfklJk-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:3::/48
                  2a05:4140:16::/48
                  2a05:4140:300::-2a05:4140:4ff:ffff:ffff:ffff:ffff:ffff
                  2a05:4140:600::/40
                  2a05:4143::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         75:5c:fd:d5:de:cc:57:2c:a6:96:43:64:41:80:90:d9:c4:41:
         e3:f7:97:d0:54:bf:a3:f7:ae:d7:00:14:dd:4d:91:77:dd:f6:
         b4:51:84:fa:ca:40:75:c7:82:f1:43:4b:4e:ad:9b:b8:96:ba:
         d1:32:38:a3:af:99:12:80:1f:52:ca:9d:cc:1b:28:25:e7:13:
         1a:85:6f:c8:06:9c:0d:2c:4b:67:36:65:4c:ba:a2:7d:8d:64:
         e7:f9:22:96:87:ff:0d:14:5b:9a:bc:6a:7d:c6:9b:11:30:f8:
         6a:93:47:25:22:b5:04:22:c4:74:5e:d6:1f:e3:d4:fc:4e:24:
         93:2e:00:6c:7f:7a:58:df:4f:ed:31:27:42:95:1c:af:66:7e:
         84:87:18:32:cd:38:54:46:af:1e:ef:32:b6:ce:44:8f:5c:77:
         21:08:cb:c2:e3:d6:77:b2:9f:ad:84:03:b0:5b:86:b3:66:27:
         b9:04:ea:64:a1:22:8d:13:4d:b5:b4:79:aa:bf:a8:f4:ab:bc:
         ee:36:40:06:4b:b5:97:3e:ab:e6:2b:b0:cb:02:4b:db:05:55:
         a7:2f:36:e3:a7:93:6f:6b:eb:b5:93:36:c1:05:ee:86:7d:40:
         d9:64:40:ef:4d:23:b1:74:76:ae:6c:82:2d:da:c4:c9:a3:9b:
         41:33:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----