Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/oXkN36X7Vq-1a20gPW5lDazOAWM.roa
File:                     oXkN36X7Vq-1a20gPW5lDazOAWM.roa (raw, json)
Hash identifier:          ICPU8yPBOz5rTXH0qqP+g4g5Ly8h+Z7Zo8pMoF5yAq4=
Subject key identifier:   A1:79:0D:DF:A5:FB:56:AF:B5:6B:6D:20:3D:6E:65:0D:AC:CE:01:63
Certificate issuer:       /CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Certificate serial:       04D068C7
Authority key identifier: 1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/oXkN36X7Vq-1a20gPW5lDazOAWM.roa
Signing time:             Sat 01 Jan 2022 06:02:35 +0000
ROA not before:           Sat 01 Jan 2022 06:02:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213103
IP address blocks:        2001:678:800::/48 maxlen: 48
                          2001:678:fd0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80767175 (0x4d068c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
        Validity
            Not Before: Jan  1 06:02:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a1790ddfa5fb56afb56b6d203d6e650dacce0163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:31:4b:45:bb:61:ef:09:d6:47:f7:ad:aa:
                    6f:54:66:52:eb:1a:da:97:cc:53:20:8e:b4:a1:7c:
                    ad:03:45:e1:fa:6b:0e:96:79:7a:0a:3e:82:60:0c:
                    e6:b4:6d:58:c9:98:d6:64:a5:7d:52:42:5b:9b:62:
                    f2:51:0c:2d:84:d4:45:77:97:47:0e:f7:6f:09:9b:
                    d1:47:a6:17:b6:11:27:55:08:5b:dc:26:d9:41:3c:
                    93:aa:38:f4:da:1e:08:7a:0c:f6:0c:77:fa:5e:b1:
                    86:4a:59:21:99:a5:33:0e:73:4b:85:55:94:e6:79:
                    46:d2:b2:56:87:12:61:e1:bd:2d:40:42:53:39:3a:
                    4f:ee:2b:26:ea:2b:b1:80:0f:bc:32:3d:60:fd:ea:
                    ee:c1:03:c8:58:97:37:16:e0:78:44:0f:ab:bf:21:
                    d5:ea:49:d4:c9:23:76:69:a1:0d:6d:b4:a8:dd:98:
                    48:0c:37:e9:9a:72:8a:d0:28:36:97:66:0b:30:a4:
                    d5:8f:e3:1e:b8:1a:df:bb:48:42:81:02:56:32:d7:
                    3e:d3:8b:78:96:18:ee:ae:3c:16:85:bc:ba:59:13:
                    d5:9f:10:d2:60:f3:c7:a5:f0:7c:0f:ac:4f:e0:2c:
                    70:db:5e:4a:8a:1f:d7:2d:1b:0a:e6:e3:23:98:c2:
                    dc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:79:0D:DF:A5:FB:56:AF:B5:6B:6D:20:3D:6E:65:0D:AC:CE:01:63
            X509v3 Authority Key Identifier:
                keyid:1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/oXkN36X7Vq-1a20gPW5lDazOAWM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:800::/48
                  2001:678:fd0::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:e6:be:13:47:d3:9b:88:38:8b:3d:f3:ea:66:f3:0b:a8:58:
         20:f0:ec:f9:0a:7e:64:a2:0d:40:0e:f1:71:8e:4b:c4:17:01:
         62:21:de:b5:64:89:a2:96:99:f8:0b:56:a8:89:d0:5f:30:45:
         1f:e5:04:3c:88:58:51:3f:de:64:40:09:98:c5:1d:7e:29:02:
         c2:43:dc:90:74:52:97:31:3e:a5:39:d1:1d:a5:7a:53:14:e0:
         02:16:b1:46:96:dc:bc:24:8e:a9:1b:d6:89:0f:b6:a4:4c:9e:
         1f:3f:67:71:c8:2e:e1:5d:cb:87:48:b7:5c:b8:52:0a:24:50:
         6a:2f:07:8d:45:c9:ea:54:b7:d2:2d:61:54:fd:63:da:1a:9d:
         17:2a:3d:c8:49:80:2c:57:98:46:65:90:f7:34:90:31:5f:cc:
         0c:d9:67:a3:b8:27:16:b9:b2:fa:e1:03:93:26:87:ac:97:24:
         52:8e:a4:f7:82:9c:75:4d:b3:aa:61:a7:8b:c3:ef:ad:49:4b:
         ba:6c:c5:ec:ac:68:32:2b:5b:fa:39:b9:50:16:f8:67:e5:dc:
         cb:ad:49:e4:1e:20:be:e1:db:83:7f:fe:d6:e0:71:7b:1d:1b:
         ea:51:c5:7a:97:ea:9f:ef:a7:82:bf:7d:42:e0:56:00:72:f1:
         68:aa:77:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----