Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Hj6JzICTAWWgv4Oiregm1ZOy874.roa
File:                     Hj6JzICTAWWgv4Oiregm1ZOy874.roa (raw, json)
Hash identifier:          o1Wt8O/ImiuZEVO/KXWXljh9gBNSmTpSWAOSn5K2nZw=
Subject key identifier:   1E:3E:89:CC:80:93:01:65:A0:BF:83:A2:AD:E8:26:D5:93:B2:F3:BE
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       0184EDAD2E6ABDE4C2D7990F5256F0F8193C
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Hj6JzICTAWWgv4Oiregm1ZOy874.roa
Signing time:             Wed 07 Dec 2022 17:41:00 +0000
ROA not before:           Wed 07 Dec 2022 17:41:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202197
IP address blocks:        2a0e:8f02:21f0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ed:ad:2e:6a:bd:e4:c2:d7:99:0f:52:56:f0:f8:19:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Dec  7 17:41:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e3e89cc80930165a0bf83a2ade826d593b2f3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:56:89:89:1b:ad:1c:bf:cc:08:21:ad:28:29:
                    13:52:f1:ef:3c:3e:90:f0:97:4d:d9:db:c7:21:77:
                    f4:18:b9:0f:5e:0c:61:4b:e3:0d:10:2b:a9:77:0e:
                    5f:f9:d0:dc:49:00:d0:8e:d4:68:8e:36:6e:f7:5d:
                    a9:85:81:e3:c9:d8:fe:8e:42:22:42:0e:84:29:fb:
                    a1:87:9d:c6:32:22:05:77:61:ee:26:9a:5c:ab:e0:
                    49:46:86:38:29:20:ef:fd:cc:fd:b9:8c:8c:59:be:
                    c6:fa:66:37:f6:b4:02:ef:b8:91:a9:e5:21:12:83:
                    04:e5:eb:45:ec:cc:28:9f:ee:00:82:42:bb:56:57:
                    91:57:53:33:29:31:05:4f:4e:fc:14:36:c4:62:24:
                    8b:24:e6:74:47:e7:be:be:71:d6:1b:fd:6e:97:58:
                    12:3b:f3:06:13:ee:8c:60:77:e2:2e:f3:d3:eb:3b:
                    a1:15:7c:b9:2d:3b:2d:51:38:df:31:5e:6c:47:6c:
                    ee:37:b6:81:e7:21:29:d1:49:a8:3a:3e:05:f2:14:
                    10:a3:48:59:61:2d:9e:2e:87:92:18:d9:fa:d2:67:
                    e7:77:fa:60:6a:27:e3:63:40:0c:03:3a:d7:91:89:
                    dd:2f:24:ab:1b:20:0f:8c:cd:2e:2a:d1:3a:be:58:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3E:89:CC:80:93:01:65:A0:BF:83:A2:AD:E8:26:D5:93:B2:F3:BE
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Hj6JzICTAWWgv4Oiregm1ZOy874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:21f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         91:55:0a:ac:16:a0:99:bf:0a:c8:61:c6:c4:ef:19:5c:44:98:
         14:6b:67:ab:0b:fe:e6:0d:a4:2f:42:7a:e7:75:52:65:dd:91:
         92:e9:30:55:a3:e5:b9:44:ce:13:56:ef:9a:d9:4c:5a:0d:19:
         c0:67:1d:47:4a:63:ef:b6:bc:03:9f:69:33:a3:ea:ef:da:cf:
         b7:74:b3:9f:40:d1:b6:57:b0:74:bf:da:ae:46:6a:97:26:01:
         35:9b:39:7d:6c:07:6b:c6:ee:95:e5:fe:49:6c:41:07:9e:61:
         b8:43:e7:2a:23:60:95:8c:4b:16:a0:2b:05:ad:a3:ef:bc:ef:
         95:7c:15:c0:d3:7b:d1:fb:48:46:f6:de:f8:ac:4f:9c:b1:31:
         80:11:f8:8d:d6:cd:5e:02:97:fd:76:a9:bd:51:db:d5:db:2e:
         33:a8:9d:c7:f2:ca:d4:86:f9:3a:26:41:a3:ef:31:83:a7:a1:
         e3:33:bc:ef:36:52:d6:a3:2b:45:b7:92:af:b3:6d:89:23:2b:
         f8:e8:cd:45:46:83:35:d3:2a:14:97:7a:74:1f:8d:be:b1:f9:
         a3:aa:09:e6:f9:f6:cc:70:a4:72:d3:2d:16:b5:7d:22:fb:e2:
         b8:ff:2f:98:3b:d4:e3:ac:78:88:65:42:28:2e:c8:16:c5:03:
         37:1e:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----