Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/n6DhVXLs7mdChpyTIPx54cnHcIs.roa
File:                     n6DhVXLs7mdChpyTIPx54cnHcIs.roa (raw, json)
Hash identifier:          DkVJHo/Y7xVWUvXIJZXN6ce+6bvL2hGnW1ku9/Qbofw=
Subject key identifier:   9F:A0:E1:55:72:EC:EE:67:42:86:9C:93:20:FC:79:E1:C9:C7:70:8B
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       038969E6
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/n6DhVXLs7mdChpyTIPx54cnHcIs.roa
Signing time:             Fri 06 May 2022 12:07:53 +0000
ROA not before:           Fri 06 May 2022 12:07:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212271
IP address blocks:        2a05:4140:4::/48 maxlen: 48
                          2a05:4143::/32 maxlen: 48
                          2a05:4144::/32 maxlen: 32
                          2a05:4140:400::/40 maxlen: 48
                          2a05:4140:300::/40 maxlen: 40
                          2a05:4140:600::/40 maxlen: 40
                          2a05:4140:100::/40 maxlen: 40
                          2a05:4140:3::/48 maxlen: 48
                          2a05:4140:16::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59337190 (0x38969e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: May  6 12:07:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9fa0e15572ecee6742869c9320fc79e1c9c7708b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5d:6f:47:ab:3a:05:47:7b:e1:4d:2d:e1:dd:
                    e9:10:20:bb:0b:82:ce:46:ae:99:de:84:8d:a9:2d:
                    3d:25:c6:ec:5a:3e:c4:07:17:de:bb:96:46:89:3a:
                    5b:50:a9:d7:04:a6:b1:61:bc:55:ef:de:d3:a4:52:
                    48:27:fd:c6:9e:3c:ec:14:42:a2:aa:1a:dd:3b:ca:
                    4c:e9:b7:ef:38:ff:aa:eb:9a:40:34:7f:d9:48:a9:
                    45:2d:78:2c:7c:2e:ba:f7:cf:87:9d:98:a7:86:09:
                    1d:a7:f3:a2:cb:8a:0d:b1:66:9c:7b:5b:b1:39:66:
                    22:50:32:03:d0:73:ce:22:6e:db:5e:b2:f7:e0:49:
                    c4:bd:09:aa:36:d9:25:c3:84:c0:e8:f6:69:82:b8:
                    24:c8:77:88:d0:06:ea:7d:00:72:0b:66:e7:7e:7f:
                    1a:04:14:bc:c6:74:e9:8a:b9:25:f3:d4:f0:00:f3:
                    9a:bd:27:ff:83:77:aa:94:49:34:f5:ce:db:ce:28:
                    2d:dd:86:05:a9:8c:f2:d8:94:60:7d:d6:14:ad:8c:
                    96:f1:f2:00:d7:e8:fe:ec:44:90:1a:8d:10:4d:47:
                    00:9f:27:9a:d9:ae:a2:75:00:44:dd:5d:4a:f4:c8:
                    cb:4d:49:96:14:2b:2c:97:0e:9b:d9:09:60:bc:81:
                    ae:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A0:E1:55:72:EC:EE:67:42:86:9C:93:20:FC:79:E1:C9:C7:70:8B
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/n6DhVXLs7mdChpyTIPx54cnHcIs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:3::-2a05:4140:4:ffff:ffff:ffff:ffff:ffff
                  2a05:4140:16::/48
                  2a05:4140:100::/40
                  2a05:4140:300::-2a05:4140:4ff:ffff:ffff:ffff:ffff:ffff
                  2a05:4140:600::/40
                  2a05:4143::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         64:45:92:65:b5:22:d0:19:f1:30:21:70:67:7b:ac:97:9c:10:
         11:a1:4e:df:fd:34:d9:11:d3:bd:15:1f:64:5f:19:35:b5:ce:
         e7:29:dd:01:20:0c:3a:5e:44:af:cc:a9:ab:f3:8a:09:b6:4a:
         de:0b:8a:7d:75:47:17:34:b0:6e:64:a9:e3:4a:a0:7b:20:da:
         64:47:2f:8a:4a:a0:dc:32:c0:e3:c1:ad:c2:2a:6d:28:c2:c3:
         08:65:a0:15:94:ed:d0:4a:6e:3e:6b:c8:3d:23:25:e8:46:fb:
         53:ae:3e:f1:c8:33:88:d9:5a:aa:cb:42:f1:e3:78:0b:b9:57:
         dc:26:d9:b1:0a:71:43:3a:08:39:4f:d6:da:c9:34:e7:14:75:
         f8:1f:83:2b:58:02:46:6b:c9:5f:df:e0:6c:94:56:7e:df:f1:
         71:5b:e1:55:11:6e:0a:66:a8:8d:c7:b8:d4:c3:f8:a7:a7:e7:
         d3:9b:2c:ca:9e:35:a6:70:bf:6e:6d:e5:2b:3e:52:e6:60:7a:
         b8:2e:a9:b4:0f:00:0e:78:e0:d5:66:8f:55:84:2c:ec:98:2b:
         6b:d3:95:5c:f8:2f:3c:08:7a:85:58:c3:92:bd:43:6d:80:88:
         b8:23:c6:ed:fe:b2:bc:62:6a:3b:dc:44:26:dc:bf:0b:69:c9:
         46:bf:fc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----