Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/vuy-v41bm8J4FKs69a54H5AI6fw.roa
File:                     vuy-v41bm8J4FKs69a54H5AI6fw.roa (raw, json)
Hash identifier:          IST8nNbNJiGtuPYjuoM5Wch3shXe46cjn2hOvbeNnkE=
Subject key identifier:   BE:EC:BE:BF:8D:5B:9B:C2:78:14:AB:3A:F5:AE:78:1F:90:08:E9:FC
Certificate issuer:       /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial:       018384E86E8EB41F9E6A361AC303C230E32E
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/vuy-v41bm8J4FKs69a54H5AI6fw.roa
Signing time:             Wed 28 Sep 2022 16:22:48 +0000
ROA not before:           Wed 28 Sep 2022 16:22:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     397519
IP address blocks:        2a01:488:bb0c::/48 maxlen: 48
                          2a01:488:bb1e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:84:e8:6e:8e:b4:1f:9e:6a:36:1a:c3:03:c2:30:e3:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
        Validity
            Not Before: Sep 28 16:22:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=beecbebf8d5b9bc27814ab3af5ae781f9008e9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:9f:47:30:c6:7e:9e:87:8f:5f:2a:cc:25:
                    d2:da:de:38:23:6d:98:45:57:15:e3:9b:6a:4c:92:
                    0b:f3:76:08:aa:0a:6f:4a:8a:6a:38:60:25:c0:5c:
                    46:f0:6f:90:ff:14:20:f9:0c:8e:30:b5:cf:3f:4e:
                    20:c1:2c:92:d8:1a:aa:80:d1:7e:e4:b1:7b:83:11:
                    d0:e6:cf:15:c2:15:67:25:26:2d:34:38:63:10:7d:
                    ce:5a:5d:2b:d3:c9:b2:83:56:aa:3e:41:e3:1d:b2:
                    ed:12:16:b2:a3:c7:db:b9:97:b6:b4:fa:b8:bc:86:
                    2e:2f:ee:f7:65:d3:85:ce:19:f8:3f:9e:25:de:d0:
                    0c:f4:7e:75:85:76:dd:43:8d:cb:d6:8e:2b:d1:cd:
                    40:f2:81:4a:8d:20:7e:b1:a8:a3:41:c6:69:ff:c1:
                    3d:8d:08:10:8d:5f:84:94:8a:a0:ad:f1:b2:f5:21:
                    a3:ef:ed:3e:a0:2e:4b:9a:32:12:ce:80:d1:2f:68:
                    9c:27:80:b7:8b:98:65:78:78:2d:e7:96:ad:8b:b8:
                    7d:d2:ef:59:6c:ee:4e:a6:f8:00:25:ee:49:2b:e5:
                    2f:ad:d1:46:8f:25:9e:ae:e5:7c:6d:91:55:1e:05:
                    54:13:ff:6e:8a:e7:7d:f4:69:d9:71:be:8b:23:c9:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EC:BE:BF:8D:5B:9B:C2:78:14:AB:3A:F5:AE:78:1F:90:08:E9:FC
            X509v3 Authority Key Identifier:
                keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/vuy-v41bm8J4FKs69a54H5AI6fw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:488:bb0c::/48
                  2a01:488:bb1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:3b:ba:25:18:b1:a7:7c:dc:fc:de:75:28:63:90:26:bf:46:
         5d:86:68:bd:5f:be:69:74:af:6b:cb:fb:f1:5d:09:c5:98:c1:
         5e:21:89:9b:8b:74:49:53:f5:d5:ee:3e:3d:1a:c0:a0:b8:44:
         d0:9f:af:67:51:e6:6a:5e:88:48:f2:b1:aa:f9:cf:1c:d8:8c:
         75:a8:60:12:a5:6a:aa:fc:e0:cc:17:1e:24:5a:20:ce:f7:4c:
         af:2f:9c:f0:74:d4:49:61:d7:d8:ac:1f:aa:94:60:9d:55:2d:
         cb:69:d5:dd:20:07:75:56:1e:57:8c:0e:d3:71:3a:95:dd:6d:
         f6:00:8c:5c:a1:d9:92:b4:64:3f:87:94:07:74:22:54:e8:11:
         af:81:68:ee:20:e0:fe:15:59:bd:1c:d0:7f:1f:34:8e:73:d6:
         4f:63:26:41:a4:e1:87:ea:c9:e0:50:48:da:f7:50:bc:48:61:
         eb:2d:72:2a:e3:60:6c:05:bd:c8:73:bf:f4:a2:e7:88:45:5a:
         af:0a:96:8f:b8:52:62:70:56:19:a9:49:35:f7:ec:e1:0f:e1:
         37:8d:35:62:6c:42:d8:5d:4b:41:25:1a:ca:54:f6:86:30:38:
         3d:d6:71:42:ea:ec:16:0c:30:a2:4d:52:16:cc:eb:2b:50:5e:
         ce:d0:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----