Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/fmyzRuLpPBagwWaKRdtO3J2oUH4.roa
File:                     fmyzRuLpPBagwWaKRdtO3J2oUH4.roa (raw, json)
Hash identifier:          0/WRRt+piTpmAMtN+A+cKUNEI9grUepFZZ3kyR0kXd8=
Subject key identifier:   7E:6C:B3:46:E2:E9:3C:16:A0:C1:66:8A:45:DB:4E:DC:9D:A8:50:7E
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       025A7522
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/fmyzRuLpPBagwWaKRdtO3J2oUH4.roa
Signing time:             Sat 01 Jan 2022 11:01:41 +0000
ROA not before:           Sat 01 Jan 2022 11:01:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211072
IP address blocks:        2a05:4140:30::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39482658 (0x25a7522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jan  1 11:01:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e6cb346e2e93c16a0c1668a45db4edc9da8507e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:41:33:e6:40:84:d6:5b:a7:77:62:20:33:65:
                    0e:f7:84:e5:7d:af:95:42:44:aa:c9:be:d8:8f:49:
                    e6:22:90:93:11:1e:97:af:58:1e:c6:a9:74:5a:13:
                    a7:1e:21:e8:e4:25:39:a1:f4:7f:69:f1:d2:4a:6a:
                    a5:6f:68:b8:76:12:7d:58:f4:c9:b3:ec:08:0e:b0:
                    27:f3:35:5e:91:b4:62:f9:a8:4d:ab:82:e9:b3:9d:
                    cd:4a:c1:6a:c2:e5:f7:24:9b:89:56:0e:b5:3c:8d:
                    bf:f9:3d:a0:e7:ec:c2:93:30:de:31:84:a1:02:27:
                    9c:c7:1b:4c:65:6d:bc:24:f9:62:4f:01:c9:e5:d3:
                    1f:b7:46:ac:82:59:7f:90:4e:b0:fc:32:b9:c0:ba:
                    e8:e5:c8:1b:11:a7:11:d8:9d:03:2c:31:74:4c:f1:
                    e3:c3:39:a5:b4:cc:ae:57:30:0b:da:1c:e7:01:46:
                    d5:cd:dd:6a:29:1e:6a:75:9e:7e:db:cc:9b:88:3f:
                    41:c6:9c:67:09:53:0e:53:55:67:41:14:ea:12:1b:
                    73:b8:6c:69:db:ab:9d:63:df:2f:50:7a:77:2d:a4:
                    d9:be:f4:5a:e7:21:75:6e:25:15:47:15:6c:45:7d:
                    94:a6:4d:7b:33:28:ab:9d:44:be:e3:3a:19:86:1d:
                    c2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6C:B3:46:E2:E9:3C:16:A0:C1:66:8A:45:DB:4E:DC:9D:A8:50:7E
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/fmyzRuLpPBagwWaKRdtO3J2oUH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:e0:bf:6c:4d:47:22:90:d8:f1:20:bc:a7:51:df:54:c1:75:
         44:b4:33:17:85:9d:8a:54:ac:2b:bb:da:90:d2:db:8d:cc:ef:
         f3:d2:fd:ab:ec:c5:a8:5f:5c:a6:58:3f:55:39:e5:6d:2a:6e:
         13:9a:99:bb:c7:45:99:1e:f1:3b:df:a1:0b:c3:61:ee:ab:76:
         61:e0:95:78:d4:c2:47:25:63:d7:03:41:7d:42:7a:23:19:d4:
         16:f8:68:7d:e4:23:df:6a:1e:fc:34:24:72:70:82:0a:21:fd:
         f8:76:25:e7:58:c7:81:88:89:ae:3c:f1:13:71:5d:86:fe:d5:
         77:9a:17:b9:82:f6:f1:ff:f2:eb:c0:c8:36:f2:c3:b2:30:d3:
         a6:7b:c6:97:84:dd:25:09:38:00:83:23:32:56:59:ff:87:52:
         f0:d2:d6:c6:74:e0:92:be:34:78:f5:c5:88:30:06:8d:f2:b8:
         c5:f1:cc:a4:fc:1d:12:87:51:f9:90:c5:5b:0e:b4:77:e1:dd:
         a6:3f:d2:2b:b5:6d:71:bb:66:d3:ee:b4:ff:ef:b3:33:0a:87:
         46:26:41:49:6f:84:b2:72:f4:e2:fc:f8:c4:46:78:b5:eb:1b:
         84:c2:97:68:3d:17:6c:b7:60:1f:ed:7f:34:ea:a9:61:a8:a5:
         78:3b:c7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----