Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/gEIf39GNHZ2qcLj7WW7Um93a-mY.roa
File:                     gEIf39GNHZ2qcLj7WW7Um93a-mY.roa (raw, json)
Hash identifier:          WN8mWZ5bfH2oA9AvdhIOIKWXvrFpE0hZkfJ1VmS++vs=
Subject key identifier:   80:42:1F:DF:D1:8D:1D:9D:AA:70:B8:FB:59:6E:D4:9B:DD:DA:FA:66
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       0184A13FB01CD556B94BC4BF8DF2E873FC9E
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/gEIf39GNHZ2qcLj7WW7Um93a-mY.roa
Signing time:             Tue 22 Nov 2022 21:30:16 +0000
ROA not before:           Tue 22 Nov 2022 21:30:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202726
IP address blocks:        2a05:4140:1f80::/43 maxlen: 43

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:a1:3f:b0:1c:d5:56:b9:4b:c4:bf:8d:f2:e8:73:fc:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Nov 22 21:30:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80421fdfd18d1d9daa70b8fb596ed49bdddafa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4d:cf:c9:c3:02:7d:7a:90:5e:82:b9:99:38:
                    07:57:3d:72:5a:f1:a9:75:fd:81:9e:6e:9c:aa:48:
                    db:32:14:91:27:96:c1:f0:98:22:27:25:4e:a5:ac:
                    c8:77:a5:71:aa:bf:d4:b6:c5:15:10:7c:00:c2:97:
                    a0:10:d3:a4:52:68:ae:48:49:16:65:e1:80:e4:82:
                    d1:c6:7f:5b:79:c4:00:ce:1f:e2:ee:1a:51:6f:b9:
                    e7:ea:0d:1e:a1:69:17:d8:5c:87:82:06:e5:2c:86:
                    89:58:9a:d7:4b:21:58:e3:8b:2c:84:ff:bc:89:e4:
                    7a:96:32:1d:ac:0f:47:05:a9:d7:83:03:33:88:62:
                    6d:de:3b:a8:98:e0:42:95:03:65:77:7e:6f:5d:ea:
                    d1:68:f9:6c:a5:4b:08:b8:9b:04:95:98:87:c4:7e:
                    fc:ea:c7:25:ed:45:2b:41:4a:2e:4b:49:97:c7:4d:
                    15:3f:b4:a8:17:ef:97:67:85:23:44:c0:9a:ab:45:
                    d6:22:f1:85:33:5b:06:3b:f7:f9:37:f7:8d:9f:4d:
                    86:28:31:a7:94:12:fe:33:6b:5d:56:f6:f9:26:35:
                    d6:d6:e0:83:09:28:da:0b:3e:00:31:82:e9:15:4e:
                    e8:c1:20:e5:75:f6:71:ed:f7:72:b3:2a:b7:3a:13:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:42:1F:DF:D1:8D:1D:9D:AA:70:B8:FB:59:6E:D4:9B:DD:DA:FA:66
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/gEIf39GNHZ2qcLj7WW7Um93a-mY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:1f80::/43

    Signature Algorithm: sha256WithRSAEncryption
         3f:3e:53:04:50:aa:75:43:d0:01:cf:a6:db:90:1f:66:38:69:
         5f:73:ed:38:a1:b3:9e:4a:2c:7b:a5:d8:04:fe:22:de:b9:33:
         4c:87:2e:ec:d3:be:bc:71:e4:dc:cf:da:d3:67:85:09:23:12:
         27:4a:73:e2:01:f9:91:43:a9:63:9a:0a:3a:91:61:71:bc:f3:
         82:2d:b8:7f:2f:75:27:57:de:d6:6e:c7:7a:0f:38:8e:77:f4:
         5f:39:38:c1:8e:8f:3a:de:29:bc:14:3b:a1:af:94:ef:c5:60:
         a9:d1:f5:12:26:dd:1d:90:f2:0b:cc:72:b5:27:ff:d2:da:63:
         a2:8b:60:b5:98:25:62:92:55:79:32:1f:67:55:55:9d:dd:7a:
         46:fb:e8:0c:2b:e0:e7:8f:cf:3c:5d:82:5e:fc:4b:9a:b8:75:
         11:0a:94:3a:27:f7:02:30:72:07:a2:18:3a:b2:30:de:a4:e0:
         ea:04:ce:06:c5:46:c1:22:ca:61:fe:fd:7a:c5:5e:53:a0:1c:
         b0:b8:61:fa:c6:25:b9:48:02:cf:f2:ed:50:6d:cf:72:c6:5f:
         80:ee:b9:56:70:14:df:20:6d:38:2e:6d:e1:3c:96:35:0d:a4:
         7d:08:4f:39:ab:30:b6:d9:24:fe:f1:d3:8c:74:51:e5:f6:2a:
         62:74:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----