Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/hCKRzvemxnbksfL-bYvgr7dh_hs.roa
File:                     hCKRzvemxnbksfL-bYvgr7dh_hs.roa (raw, json)
Hash identifier:          UrjrmjFX9yTmccUYDpWW7MLLcaUN0GiQT62lnCNF2qw=
Subject key identifier:   84:22:91:CE:F7:A6:C6:76:E4:B1:F2:FE:6D:8B:E0:AF:B7:61:FE:1B
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       08B74432
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/hCKRzvemxnbksfL-bYvgr7dh_hs.roa
Signing time:             Sat 01 Jan 2022 14:01:50 +0000
ROA not before:           Sat 01 Jan 2022 14:01:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211581
IP address blocks:        2a0e:8f02:f020::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146228274 (0x8b74432)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  1 14:01:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=842291cef7a6c676e4b1f2fe6d8be0afb761fe1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:76:d2:41:43:79:02:c6:fd:40:23:86:90:
                    72:04:b4:40:8f:73:28:24:d9:a2:63:0f:f9:59:cf:
                    9f:04:3b:da:2e:58:c0:bc:cb:5c:49:dd:41:cc:af:
                    61:02:0e:c0:6e:83:83:b1:08:ea:22:a0:1e:28:58:
                    ab:01:40:6e:de:37:a4:53:eb:35:f2:11:7c:b7:cb:
                    80:54:5f:59:ad:ce:6a:bc:38:4d:ff:5c:7a:a7:28:
                    c1:72:23:e5:9d:63:d6:6f:7c:bf:60:1b:07:59:a3:
                    a0:97:8c:86:65:6c:32:ba:b4:cf:ee:6c:67:83:f3:
                    8f:9f:f1:af:7e:cb:52:d5:9d:e8:fc:fe:bd:f0:4c:
                    11:35:7c:57:97:81:17:a0:ce:56:b5:a7:6c:bc:39:
                    5e:19:63:9a:60:36:63:f8:cc:16:d8:e4:a2:15:bd:
                    83:af:78:53:10:0b:50:55:a1:2d:48:81:bf:1f:60:
                    ed:9c:ee:8d:c2:c6:24:fe:dc:b7:71:8b:d9:9b:a8:
                    bc:80:36:bf:72:cf:32:ad:c9:b9:11:0c:37:be:53:
                    42:b7:8f:06:c8:b9:82:fd:c1:db:a6:60:8b:d8:07:
                    79:31:50:56:86:89:51:ad:49:35:62:bf:04:b9:31:
                    68:55:3a:e5:13:cb:d4:56:92:c4:3c:9e:28:eb:c8:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:22:91:CE:F7:A6:C6:76:E4:B1:F2:FE:6D:8B:E0:AF:B7:61:FE:1B
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/hCKRzvemxnbksfL-bYvgr7dh_hs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f020::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:1f:b5:08:51:c2:eb:64:ea:99:2c:bf:d4:b7:c6:5a:80:d6:
         9e:7e:90:f7:b4:44:c1:aa:a6:1a:34:5a:06:99:aa:8d:8b:d6:
         d6:ae:de:13:8a:6e:de:0e:8a:4f:a2:db:eb:8e:81:e2:d1:58:
         8a:a7:ec:a7:21:df:fb:06:53:38:44:cc:6d:80:9b:30:42:c8:
         ed:06:9c:a1:d8:8f:68:95:11:9f:ac:43:c1:d6:60:ba:b4:e9:
         6c:a3:0c:ae:22:0d:18:8e:d6:5f:d3:c4:99:69:33:a5:c4:76:
         94:9e:8d:a2:21:e0:1b:80:45:7a:a0:fa:a2:0f:6f:21:46:7a:
         a7:0b:29:fa:73:8b:36:98:ad:68:5e:29:2a:de:1a:15:9c:79:
         ef:77:de:1a:3b:d7:c3:98:cc:a3:70:b4:17:b8:37:7d:36:cb:
         2c:cf:dd:57:1e:b7:e6:e1:c0:dc:0e:75:43:dc:bd:31:85:63:
         ae:1b:9b:0b:ce:0f:b8:13:0e:13:4f:60:17:af:aa:b1:fc:56:
         eb:2e:b4:94:b7:9c:c8:44:7f:44:e4:44:33:7f:ae:4d:53:db:
         dc:eb:c7:9a:a5:18:4f:8a:6f:f1:20:87:8e:ff:2d:2f:ec:95:
         6f:f7:a3:90:bd:03:aa:e4:7e:de:6d:05:2a:e4:89:45:66:42:
         0c:a6:c5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----