Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/06HNzky8B_T8wMKpahezL4J3uNw.roa
File:                     06HNzky8B_T8wMKpahezL4J3uNw.roa (raw, json)
Hash identifier:          tyPYQG4b0p1S/+t0WYNSZq5EqZDyQ/bzLWHpz7wGgcE=
Subject key identifier:   D3:A1:CD:CE:4C:BC:07:F4:FC:C0:C2:A9:6A:17:B3:2F:82:77:B8:DC
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       08C153E9
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/06HNzky8B_T8wMKpahezL4J3uNw.roa
Signing time:             Sat 01 Jan 2022 14:01:56 +0000
ROA not before:           Sat 01 Jan 2022 14:01:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212191
IP address blocks:        2a0e:8f02:20b0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146887657 (0x8c153e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  1 14:01:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d3a1cdce4cbc07f4fcc0c2a96a17b32f8277b8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3a:9c:e2:6a:a0:a4:ed:b9:e1:da:39:71:a2:
                    0f:09:e8:3a:85:d4:13:3c:29:7d:8d:ec:69:e5:60:
                    8c:80:68:fc:c9:c0:bc:24:6a:5d:d7:ea:85:a7:0b:
                    80:72:39:f4:2f:a1:50:a3:60:bd:f1:8d:b8:14:7c:
                    a0:a4:d8:8d:e2:b1:5d:00:25:6a:27:7c:14:a2:9f:
                    82:0f:40:88:52:1f:f1:6e:1d:86:78:21:de:9f:d1:
                    6d:f8:74:fd:33:d5:be:6b:9b:3c:c9:5e:c6:c0:45:
                    04:63:9d:7f:3b:3f:ef:09:16:ba:98:5b:4a:da:4e:
                    40:10:cc:e4:44:3b:60:b5:95:37:80:21:37:4e:35:
                    52:60:b8:93:79:e9:7e:55:61:18:ef:65:6e:f0:90:
                    fb:fb:14:77:fe:0e:3a:f5:bf:11:7c:1f:fc:dc:79:
                    a8:e0:2a:89:6e:5d:68:73:18:69:3e:63:a0:2c:24:
                    57:25:24:61:a6:da:75:b3:25:42:04:ad:49:4a:fe:
                    4b:d9:e5:d8:88:06:74:a6:34:bb:9e:b3:f9:0c:67:
                    7f:ab:e3:c5:f6:df:9c:e2:66:ee:c2:ea:df:fe:bb:
                    b6:c4:3f:81:e9:1d:57:d6:e2:31:b4:96:6c:ef:0c:
                    53:10:2b:9d:20:e3:7a:8d:84:e2:20:77:f8:9b:bc:
                    39:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A1:CD:CE:4C:BC:07:F4:FC:C0:C2:A9:6A:17:B3:2F:82:77:B8:DC
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/06HNzky8B_T8wMKpahezL4J3uNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:20b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:3a:59:6d:83:da:fa:40:61:a9:37:b3:bd:95:72:98:63:ad:
         b4:0e:80:81:7d:a8:e6:67:ad:03:6f:16:08:95:cb:2a:07:45:
         1a:d3:3e:35:1b:c0:ae:b9:d2:01:6e:1b:51:13:84:30:9c:5d:
         3e:32:1b:8e:e6:c4:a7:7e:2d:e8:a2:e6:e1:4d:b2:3a:0e:8a:
         b1:f6:3a:91:7f:20:eb:32:13:44:b5:67:43:0e:84:10:88:80:
         b7:37:a1:79:c9:b7:ec:35:6a:69:00:5e:e3:37:0d:47:97:58:
         a1:5c:b3:9f:48:9c:86:38:af:37:da:31:7f:87:a3:c2:ca:45:
         db:8e:53:75:82:7b:44:4c:bd:16:59:dd:98:c0:cd:84:5c:e3:
         8f:20:52:61:79:52:f2:44:e0:01:58:dc:e0:e6:4f:ea:17:4e:
         ca:de:a4:4e:bd:b4:87:35:43:2d:c2:45:30:bb:cd:2a:57:f5:
         4f:f9:3d:2e:79:19:b3:d3:6f:1b:9b:67:65:8a:c0:8a:67:ec:
         8a:43:37:34:63:9b:d4:fd:85:96:c8:e1:b7:6d:b1:98:9b:27:
         33:cb:36:14:13:07:0d:61:9c:a8:d3:64:73:c0:f3:c1:b6:12:
         ed:01:ff:7e:b3:c0:c0:92:80:d5:90:7e:3f:97:af:67:d6:62:
         ea:f6:e7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----