Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/LJ4j2ov8Y_nG6Hkin9yOM0h2f0s.roa
File:                     LJ4j2ov8Y_nG6Hkin9yOM0h2f0s.roa (raw, json)
Hash identifier:          r86P6Pd/P9lOBjYcIUt2GNP5/7hQfYDDBqHJub1J2Ks=
Subject key identifier:   2C:9E:23:DA:8B:FC:63:F9:C6:E8:79:22:9F:DC:8E:33:48:76:7F:4B
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       08C7743E
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/LJ4j2ov8Y_nG6Hkin9yOM0h2f0s.roa
Signing time:             Sat 01 Jan 2022 14:02:02 +0000
ROA not before:           Sat 01 Jan 2022 14:02:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212666
IP address blocks:        2a0e:8f02:f009::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147289150 (0x8c7743e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  1 14:02:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2c9e23da8bfc63f9c6e879229fdc8e3348767f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:d5:5c:f7:f4:b4:77:6b:98:ef:45:e2:fe:
                    9f:f5:15:f3:bd:6e:ab:8e:92:d5:96:7b:54:d9:c5:
                    1b:d6:52:a8:f5:a9:5f:dd:07:49:59:e5:08:10:c8:
                    d2:89:3c:da:2a:de:1f:93:98:b7:32:ec:04:67:6d:
                    14:1f:9a:54:a1:e2:56:18:2f:03:77:2a:1a:06:9a:
                    31:4e:7a:36:61:4f:f4:2d:b1:32:4e:61:d2:f9:28:
                    88:bc:fe:39:44:7b:28:be:f4:a5:74:c1:87:85:8c:
                    37:05:e9:08:78:1d:10:70:39:f9:7f:68:f1:b7:45:
                    fe:b0:c9:2a:88:80:a3:9c:63:bb:5d:cc:d9:ee:f2:
                    10:87:0e:e2:4c:58:c9:68:e9:1d:15:19:43:e2:ba:
                    cc:98:c8:72:b3:28:25:1d:65:f4:7c:7c:12:b6:57:
                    3c:e5:6c:73:aa:3c:a0:e4:0b:12:38:79:3c:35:8b:
                    17:e6:f6:bf:8b:e1:c5:fb:2b:ee:90:e7:80:a2:d4:
                    a2:4e:e7:8d:d8:d2:01:21:54:b2:b1:6d:88:ce:41:
                    1c:71:fd:eb:e0:4f:51:ac:c6:7a:9d:a2:4c:ab:5f:
                    5b:f3:83:0b:38:9e:ed:d8:19:f1:52:50:0a:7d:35:
                    2e:34:47:06:9e:b6:fd:4a:91:29:b6:c2:7a:e8:3e:
                    cd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9E:23:DA:8B:FC:63:F9:C6:E8:79:22:9F:DC:8E:33:48:76:7F:4B
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/LJ4j2ov8Y_nG6Hkin9yOM0h2f0s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f009::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:11:a8:a7:98:ec:3f:f5:2f:1d:f7:ea:50:db:9c:e0:ff:dc:
         c4:05:4f:68:be:38:d1:60:54:09:b1:24:1b:fa:2f:05:36:fd:
         20:44:04:d4:e3:15:af:e2:f3:0d:e1:9e:c8:f7:c7:74:56:62:
         1c:b3:89:19:89:5f:eb:fd:a8:9b:4d:1f:5b:a3:d4:f7:93:d6:
         ef:b6:50:86:98:33:6d:c2:ff:ba:d2:db:13:11:82:16:64:af:
         e0:09:42:98:7e:bf:34:0b:1b:ed:ca:70:ae:43:a0:6b:12:9e:
         86:c7:8a:74:ba:aa:6e:62:33:ea:7f:fb:37:c8:39:d8:3a:3a:
         a9:6a:55:33:77:e0:85:9f:84:de:83:2e:86:7f:49:77:cb:cc:
         5e:f6:3f:52:0b:9b:d0:6f:aa:ad:c3:f2:b1:0e:ef:42:95:b5:
         67:fc:ef:5e:78:30:7a:6e:e4:ca:61:b6:aa:43:10:45:a7:37:
         0e:c9:c1:f8:6c:82:c4:ec:77:2d:cb:22:4c:f9:fb:fc:22:ba:
         80:5d:f7:58:e0:eb:05:d8:34:49:81:76:72:3f:38:23:da:27:
         c0:3a:3b:1c:b6:4e:cd:2b:06:21:1e:a5:a6:07:55:91:1b:69:
         55:d6:06:6f:04:e6:45:54:07:e2:ed:4c:08:8f:1c:83:f4:e9:
         6a:db:b5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----