Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QBkykarQqTVQyjOi7oP6i-0JgLs.roa
File:                     QBkykarQqTVQyjOi7oP6i-0JgLs.roa (raw, json)
Hash identifier:          RYAX+KxrFSdkxq+1/Pz1vxhVflHY4XyGqjf75w1h5TA=
Subject key identifier:   40:19:32:91:AA:D0:A9:35:50:CA:33:A2:EE:83:FA:8B:ED:09:80:BB
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0253386D
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QBkykarQqTVQyjOi7oP6i-0JgLs.roa
Signing time:             Mon 04 Apr 2022 15:34:44 +0000
ROA not before:           Mon 04 Apr 2022 15:34:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206425
IP address blocks:        2a0c:b641:820::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39008365 (0x253386d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Apr  4 15:34:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=40193291aad0a93550ca33a2ee83fa8bed0980bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:e5:5b:50:3b:88:8f:db:7a:bd:3f:33:56:
                    78:62:cb:2e:8f:73:3d:10:b3:d9:c7:fc:5d:1a:c6:
                    61:83:0a:a5:ec:f4:56:33:bd:12:6d:db:3c:db:41:
                    7c:6a:9e:da:41:6b:f8:a0:a6:8a:48:61:92:a2:ea:
                    eb:9e:69:f5:ef:db:9f:54:cc:78:46:34:b2:13:a8:
                    30:9f:92:df:19:d5:30:82:7a:de:68:1d:60:0a:08:
                    78:25:71:ec:7a:f6:f5:9f:83:5b:7b:f5:e0:d8:39:
                    db:91:e9:4f:60:5c:eb:4c:aa:e4:3d:91:c6:14:30:
                    c5:a4:30:8c:28:c4:db:67:14:17:24:ec:05:b3:0c:
                    e7:32:f7:08:55:5b:95:60:95:b1:e1:47:56:eb:cf:
                    24:76:be:44:35:64:06:09:17:d4:d3:94:8b:9b:d9:
                    21:e9:c7:eb:d0:b6:04:7e:6f:ab:78:08:7a:5b:c8:
                    42:11:f2:ce:c8:88:40:36:2d:37:bb:eb:37:12:52:
                    70:0c:4c:60:c1:23:f9:4b:11:e1:2a:cf:22:41:9c:
                    5f:eb:65:83:71:b9:77:13:ad:f0:50:85:d7:5f:a7:
                    4f:67:67:4f:86:b6:83:75:fa:87:46:c7:e0:97:ff:
                    ae:0b:79:8d:8c:68:e6:70:07:45:d6:88:4e:04:f9:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:19:32:91:AA:D0:A9:35:50:CA:33:A2:EE:83:FA:8B:ED:09:80:BB
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/QBkykarQqTVQyjOi7oP6i-0JgLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:820::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:d2:79:98:78:55:dd:49:7a:f2:08:8f:e9:c4:5b:b3:d5:
         dd:77:68:1d:92:1d:74:b4:2e:f6:5f:3b:d0:21:cb:e4:44:7f:
         6a:e9:b8:8c:66:9c:bc:86:03:40:9d:66:11:f9:05:aa:e0:8c:
         48:4a:41:b1:c2:04:6a:45:3a:a0:e0:a6:25:bd:36:cc:7a:6c:
         0c:bf:de:77:d4:0d:20:81:1f:b0:98:6d:a2:e5:83:38:c1:1f:
         6f:1e:62:f4:70:41:02:8b:b2:d1:fe:51:bc:bc:db:b8:59:64:
         6d:f9:b1:00:78:75:10:a7:3b:c5:77:84:3e:c2:91:72:81:da:
         2c:20:21:a1:93:d9:62:4c:0d:8a:da:21:87:9d:71:24:f6:28:
         29:7b:97:84:de:98:60:cd:90:f5:39:27:6b:c5:aa:8d:e6:df:
         a4:9c:f2:d9:1d:99:b2:37:aa:2a:4e:a9:51:60:47:69:21:4f:
         c9:c4:10:09:e8:9f:d4:01:a8:4a:fd:3e:75:b4:d6:5e:df:c8:
         e1:9b:b9:71:e2:1f:4b:56:42:90:9d:90:8d:dd:4f:ab:6e:e5:
         63:c7:e9:28:e7:88:3e:32:19:95:94:ba:e5:2e:d6:c7:e4:e1:
         f7:a4:8b:4e:43:40:f5:a5:cb:f6:2d:80:74:85:80:1f:0c:36:
         a1:5f:81:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----