Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/W7EE79asv5wQXZ0H0Rru18ld1F0.roa
File:                     W7EE79asv5wQXZ0H0Rru18ld1F0.roa (raw, json)
Hash identifier:          07zGBvxWRl1yfYQ+dM+a5kcau5OinOkl2yWZ1io8VFE=
Subject key identifier:   5B:B1:04:EF:D6:AC:BF:9C:10:5D:9D:07:D1:1A:EE:D7:C9:5D:D4:5D
Certificate issuer:       /CN=c80609f21851bdf7f74ed18f0f09df92edb75355
Certificate serial:       021715
Authority key identifier: C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/W7EE79asv5wQXZ0H0Rru18ld1F0.roa
Signing time:             Thu 10 Feb 2022 08:13:31 +0000
ROA not before:           Thu 10 Feb 2022 08:13:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203017
IP address blocks:        2001:678:154::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136981 (0x21715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c80609f21851bdf7f74ed18f0f09df92edb75355
        Validity
            Not Before: Feb 10 08:13:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5bb104efd6acbf9c105d9d07d11aeed7c95dd45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:f7:af:c0:d7:c6:d5:62:cd:bb:44:2d:44:
                    69:9f:96:de:1d:ad:fe:ee:02:60:3a:84:23:f0:19:
                    fe:9b:79:d7:d6:ed:51:ff:59:42:be:95:52:2c:38:
                    33:fc:b8:72:3d:16:f2:de:83:f8:1e:21:93:35:9b:
                    1a:05:b2:c6:ad:33:47:bd:59:9f:de:53:77:c7:72:
                    0d:5b:a1:82:12:35:62:cc:6e:b8:5b:01:c7:3a:c0:
                    cc:39:47:7e:fc:34:0b:d3:f4:35:d5:27:b1:3a:7c:
                    72:3c:1b:16:6a:93:c8:59:7d:9a:cb:25:10:c4:24:
                    3a:8c:1e:8b:68:e7:9e:c5:4c:6f:c3:98:07:67:b6:
                    d4:91:00:cd:22:34:d6:6e:02:d0:fa:6e:2e:80:75:
                    13:9f:60:5d:96:90:53:5b:d7:4f:81:64:0e:3b:5f:
                    5c:ba:85:a8:8d:f0:49:9f:9f:9f:5c:95:6b:1a:24:
                    6d:a2:5d:79:69:0a:04:e8:32:00:28:d8:d6:4c:cf:
                    99:31:80:0c:4f:e7:13:9a:84:75:1f:fe:61:d7:61:
                    10:4a:8d:d5:89:a0:4c:b4:11:26:b3:bc:40:b6:2d:
                    b3:63:2b:df:fe:43:f4:f5:dd:59:9e:8c:3d:cf:36:
                    fb:7b:8c:fd:88:63:31:5d:ec:fc:ff:29:7c:6d:8b:
                    a1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B1:04:EF:D6:AC:BF:9C:10:5D:9D:07:D1:1A:EE:D7:C9:5D:D4:5D
            X509v3 Authority Key Identifier:
                keyid:C8:06:09:F2:18:51:BD:F7:F7:4E:D1:8F:0F:09:DF:92:ED:B7:53:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yAYJ8hhRvff3TtGPDwnfku23U1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/W7EE79asv5wQXZ0H0Rru18ld1F0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ec9159-dab4-4280-b44c-4cbce5babaa7/1/yAYJ8hhRvff3TtGPDwnfku23U1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:154::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:94:1d:51:ea:b2:d1:79:3d:01:ae:bb:98:f6:4d:a4:5a:de:
         93:01:00:cb:ad:40:60:3f:25:3f:f8:4f:b0:7d:f5:b4:b3:c9:
         2f:35:c2:09:81:d9:0a:4b:61:7f:a2:58:fd:ab:d9:f7:4c:1d:
         68:a9:0f:4e:7b:a5:db:71:19:9f:18:6c:69:3d:80:57:39:fb:
         91:69:b7:b9:89:54:fe:98:a5:b5:ad:db:50:1d:15:70:cc:2c:
         7b:00:77:65:57:13:11:87:69:c3:e9:4b:ae:14:0a:ff:5c:5d:
         ce:51:e3:7c:17:90:5c:1a:c4:10:8c:d9:5e:35:e0:83:18:12:
         dc:4a:7c:67:bd:a2:df:1a:4c:23:5b:e1:50:4c:0f:99:f5:d6:
         80:5e:6d:66:a4:ae:c9:d8:32:33:4c:c7:a4:8b:bc:cd:31:81:
         d5:91:c1:77:7b:45:6b:5b:6a:ca:6b:ec:78:2d:39:96:65:1a:
         4d:4a:83:d6:23:d5:f4:79:0f:9a:a8:5e:bf:28:df:8b:a1:44:
         5a:50:2a:01:7b:c3:b1:6e:a4:8c:50:1d:b0:27:21:ad:63:b1:
         47:11:23:28:1e:58:c9:cb:96:1c:f8:83:54:82:61:02:a8:a7:
         2b:57:2d:6b:6c:eb:63:d8:e2:7c:69:3d:9b:2d:1c:99:74:63:
         29:bd:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----