Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Zv-GTyehFL3niNAGdP5SPPcCHfw.roa
File:                     Zv-GTyehFL3niNAGdP5SPPcCHfw.roa (raw, json)
Hash identifier:          HlmoZObHKGeO7ZMYad6iuTufERI6kQPSOF0iib1G/Ls=
Subject key identifier:   66:FF:86:4F:27:A1:14:BD:E7:88:D0:06:74:FE:52:3C:F7:02:1D:FC
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       01101248
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Zv-GTyehFL3niNAGdP5SPPcCHfw.roa
Signing time:             Sat 01 Jan 2022 00:59:35 +0000
ROA not before:           Sat 01 Jan 2022 00:59:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     64473
IP address blocks:        2a0c:b642:fc0::/43 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17830472 (0x1101248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  1 00:59:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=66ff864f27a114bde788d00674fe523cf7021dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:64:57:c4:79:31:cd:3f:fc:ed:e1:32:2f:74:
                    f3:87:aa:da:08:a2:c1:0f:75:f4:9b:b9:59:57:7c:
                    a4:70:cd:04:d9:7e:bc:69:4b:96:9c:bf:03:58:dd:
                    d2:1d:ae:11:45:42:70:56:c4:31:7a:fa:ca:aa:bd:
                    c5:e8:d2:13:ba:54:92:50:18:47:0d:15:68:ef:6c:
                    70:93:72:52:66:e7:50:6d:a7:1f:0e:09:18:b2:4a:
                    27:7f:0d:33:47:f1:73:d3:3e:7f:72:30:e6:82:17:
                    58:28:96:aa:6f:62:28:3e:01:51:90:42:bd:a3:e0:
                    58:09:78:b9:d4:dc:76:83:3a:59:0e:15:e9:31:b1:
                    db:92:09:cf:f3:e5:65:7d:a5:0c:39:43:5e:f1:08:
                    8f:9e:55:6e:c9:91:be:be:70:5d:c4:f4:2e:d8:b7:
                    a4:55:ef:39:9e:4e:30:29:e0:96:28:3e:3d:b1:a8:
                    e7:0a:4d:0a:9f:c1:a7:2f:1a:8d:06:18:18:01:15:
                    76:09:30:32:10:e2:35:64:2e:69:c2:2c:e7:9e:36:
                    bb:9e:ab:dd:48:c0:56:48:e1:bf:79:b3:32:71:7c:
                    3b:e7:35:b9:55:43:f3:d5:50:a7:53:52:13:40:1b:
                    09:13:2f:88:65:8d:8e:20:58:89:a8:f1:8e:c7:57:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FF:86:4F:27:A1:14:BD:E7:88:D0:06:74:FE:52:3C:F7:02:1D:FC
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Zv-GTyehFL3niNAGdP5SPPcCHfw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b642:fc0::/43

    Signature Algorithm: sha256WithRSAEncryption
         35:16:b2:0e:e9:14:89:14:b4:7e:ef:e4:38:17:c4:13:e3:52:
         87:1a:e6:e6:a5:8e:30:99:90:88:9f:7f:ff:19:7b:f9:c6:47:
         40:6b:20:25:17:f1:a0:91:0c:44:84:23:da:92:95:fc:b8:64:
         9d:c6:9e:f1:45:b7:4f:b1:84:05:4f:c7:e4:98:49:c8:0d:32:
         aa:4a:1e:0d:da:95:a4:c2:b5:61:a5:16:03:40:e8:bb:60:a1:
         92:53:93:0d:d6:b9:c1:33:c1:32:11:ba:d9:85:ff:3c:e6:a8:
         18:f7:d1:ae:74:5c:0e:71:00:19:a5:38:aa:ae:87:1f:03:97:
         c2:c9:f3:0b:a8:e8:7f:be:04:02:a2:43:29:24:00:c6:a4:1a:
         34:e9:03:c9:f3:24:d3:d9:4f:38:f0:64:92:3c:5f:96:8a:03:
         29:c0:90:93:97:89:6c:c7:f5:0b:19:a7:16:ca:3d:e3:d7:43:
         24:89:e8:4c:79:4a:e8:b5:be:08:d5:10:49:0f:8f:fa:f5:1a:
         d0:db:8a:5b:f6:aa:12:ba:46:bb:a1:45:7b:5c:ab:8d:2f:8a:
         11:30:06:8f:af:e0:53:16:31:d5:56:56:e0:3e:68:d2:3f:33:
         99:82:b0:34:13:d2:fa:83:a2:f5:c8:95:4e:ef:9a:bd:b3:a7:
         6f:4b:96:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----