Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/kFspp-9OCHZkd_efMDq-O3HW1-c.roa
File:                     kFspp-9OCHZkd_efMDq-O3HW1-c.roa (raw, json)
Hash identifier:          MuLb/mpTLWP0JbpSs6ujlk7yzJgEuKkgLSqDVPmFYBY=
Subject key identifier:   90:5B:29:A7:EF:4E:08:76:64:77:F7:9F:30:3A:BE:3B:71:D6:D7:E7
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       03CAD9A8
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/kFspp-9OCHZkd_efMDq-O3HW1-c.roa
Signing time:             Thu 02 Jun 2022 20:11:20 +0000
ROA not before:           Thu 02 Jun 2022 20:11:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212271
IP address blocks:        2a05:4140:4::/48 maxlen: 48
                          2a05:4143::/32 maxlen: 48
                          2a05:4140:187::/48 maxlen: 48
                          2a05:4144::/32 maxlen: 32
                          2a05:4140:100::/40 maxlen: 48
                          2a05:4140:400::/40 maxlen: 48
                          2a05:4140:600::/40 maxlen: 40
                          2a05:4140:300::/40 maxlen: 40
                          2a05:4140:190::/48 maxlen: 48
                          2a05:4140:3::/48 maxlen: 48
                          2a05:4140:16::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63625640 (0x3cad9a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jun  2 20:11:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=905b29a7ef4e08766477f79f303abe3b71d6d7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:58:c3:52:64:fb:9d:ff:f0:67:43:85:70:b4:
                    29:1e:09:a1:8a:d5:eb:2a:b0:55:72:36:87:fb:36:
                    58:26:72:36:77:5f:91:e4:73:dd:3e:9a:70:d5:71:
                    42:77:00:23:a1:9f:1a:f1:7c:b4:03:6e:56:a1:09:
                    25:8f:75:1d:a8:5a:ab:82:d0:c6:99:17:95:0b:73:
                    4e:b3:ee:53:27:4a:77:e6:38:48:6f:88:ae:3b:24:
                    52:cf:d6:fd:f8:4a:d0:43:40:13:c0:06:b8:95:32:
                    bc:97:7f:a8:6c:a2:37:39:cf:e5:a7:81:87:7e:45:
                    c8:0f:ca:09:89:07:f4:23:70:c4:29:e5:23:aa:81:
                    fc:b6:75:6b:87:d6:ce:42:e3:75:f2:f6:e0:17:b2:
                    75:9b:07:3d:bf:57:07:6f:4f:59:48:36:26:ca:0c:
                    41:4a:1a:4d:15:5a:d0:53:21:3a:6b:e2:aa:4a:b6:
                    33:5e:d4:b8:19:4a:4b:79:49:d6:9e:00:b2:d0:9f:
                    13:d9:69:a5:fa:44:d5:b5:af:d5:04:28:62:61:89:
                    9b:d5:21:4d:0b:ec:55:5c:84:ff:97:68:23:04:e2:
                    1c:de:fe:17:d3:49:1b:9e:84:85:aa:3f:d9:40:81:
                    35:d9:9d:75:dc:16:50:13:cd:eb:47:3a:ab:00:8d:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5B:29:A7:EF:4E:08:76:64:77:F7:9F:30:3A:BE:3B:71:D6:D7:E7
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/kFspp-9OCHZkd_efMDq-O3HW1-c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:3::-2a05:4140:4:ffff:ffff:ffff:ffff:ffff
                  2a05:4140:16::/48
                  2a05:4140:100::/40
                  2a05:4140:300::-2a05:4140:4ff:ffff:ffff:ffff:ffff:ffff
                  2a05:4140:600::/40
                  2a05:4143::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5a:71:dc:4c:79:07:46:55:a5:19:d6:9a:17:09:4e:29:af:6b:
         24:f0:db:ad:c0:92:9e:31:c5:60:45:f3:b0:41:78:4e:ff:22:
         a5:53:b3:e6:02:e8:1d:f3:e2:a2:a2:71:4c:84:24:37:2e:02:
         7d:49:03:1f:17:1f:25:46:48:aa:7e:1d:57:97:f4:d7:85:78:
         c4:22:60:93:a3:61:10:43:03:cc:14:a1:fd:09:45:ee:4c:64:
         ee:9d:e7:4f:f6:0a:28:40:7e:e8:21:7c:ea:34:d4:be:63:11:
         96:d7:ef:5f:cc:13:52:cb:6b:d7:32:5c:48:34:77:a8:9c:d2:
         e5:40:c0:c7:1a:4d:3d:6e:6f:60:12:a3:7d:f7:41:5f:67:fd:
         0f:50:39:56:8d:2d:4c:0f:ca:8e:5e:ff:6b:f7:bc:e4:dc:dd:
         ac:60:7c:a0:61:90:5a:54:69:36:88:1b:a0:c8:49:1d:a9:3f:
         45:43:2f:5c:3e:ff:e5:e3:65:58:99:35:27:e2:8f:1e:7c:68:
         4d:5c:29:6e:45:a9:3a:5b:87:e6:36:1c:f0:aa:27:c9:c6:35:
         17:f4:0f:8b:e6:a4:fa:f9:39:f8:2b:30:a4:8d:7a:18:69:6b:
         a6:ae:90:56:86:10:60:06:df:94:3e:33:8c:94:a5:5a:db:77:
         5c:4c:b0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----