Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ocIEbSt2oNCXFAhiY5Rvud8X7kM.roa
File:                     ocIEbSt2oNCXFAhiY5Rvud8X7kM.roa (raw, json)
Hash identifier:          h2L1HaENY3Pg/olZIhcPwr5oA3u5QhHRncXeCtT94Cs=
Subject key identifier:   A1:C2:04:6D:2B:76:A0:D0:97:14:08:62:63:94:6F:B9:DF:17:EE:43
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       02B698BA
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ocIEbSt2oNCXFAhiY5Rvud8X7kM.roa
Signing time:             Tue 10 May 2022 15:56:02 +0000
ROA not before:           Tue 10 May 2022 15:56:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205150
IP address blocks:        2a0c:b641:860::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45521082 (0x2b698ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: May 10 15:56:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a1c2046d2b76a0d09714086263946fb9df17ee43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:9f:16:c7:ff:5a:de:c1:03:07:54:ce:ca:
                    e5:94:c1:99:47:13:26:b6:92:ec:73:24:31:ce:44:
                    d8:bc:54:a9:7b:40:fe:09:12:56:9c:a4:87:94:c8:
                    e1:7f:59:f9:68:80:19:ca:59:4e:78:64:66:d6:dc:
                    09:5c:fe:2d:83:31:17:8d:b3:a9:a7:22:48:ef:58:
                    2a:d7:0a:f0:78:32:80:5a:38:00:0f:34:e4:fe:f0:
                    89:60:4f:6f:a3:7f:35:3c:9e:e8:c7:d5:bb:61:4e:
                    c6:9a:b2:c2:c1:62:03:82:ed:c5:19:30:7b:42:eb:
                    70:ce:82:b1:f3:cc:00:81:90:cd:2c:de:86:54:fc:
                    7b:09:e1:19:6b:4c:51:4b:bd:af:01:03:41:60:44:
                    3c:50:e8:3b:6a:89:45:56:69:d6:7b:d5:6e:4a:ba:
                    cf:c8:b1:e7:e3:7b:d6:e6:7d:22:6d:e6:c7:80:5d:
                    f2:0c:01:d5:46:1b:f7:8c:f5:cb:cd:e7:14:0b:bf:
                    a9:e0:43:4e:ff:87:45:a4:db:8a:5f:47:7f:59:c2:
                    10:d2:f5:34:03:c2:4a:a2:5e:bd:30:30:33:0f:eb:
                    ec:d0:08:06:db:2a:f8:b0:f5:b1:b6:c0:bc:19:05:
                    a4:cb:37:66:5d:a8:e2:fa:74:c1:0b:3c:c3:52:9f:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C2:04:6D:2B:76:A0:D0:97:14:08:62:63:94:6F:B9:DF:17:EE:43
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ocIEbSt2oNCXFAhiY5Rvud8X7kM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:860::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:57:82:19:3a:9e:28:f4:13:00:67:d3:d1:6f:13:07:33:ee:
         98:51:0d:d4:59:8d:a2:03:9e:e1:76:d0:06:3b:04:7d:2d:fb:
         a1:5e:7e:85:58:e3:79:6f:33:8b:f1:7d:de:17:eb:02:21:ef:
         25:73:53:dc:8f:a3:18:eb:a9:a4:44:cc:45:4c:ca:25:0f:70:
         69:11:ce:9f:6e:7b:e8:6f:e7:f6:aa:b6:a8:56:85:98:bd:04:
         3b:1c:ea:df:9d:6a:22:f4:76:00:ba:4c:b2:75:31:e3:b6:61:
         cd:9f:b3:c4:1c:f1:5b:44:52:96:dc:a5:b4:2a:a6:4d:14:55:
         62:07:80:b0:97:2a:92:f3:54:6f:1f:3e:ed:00:ea:56:ab:d0:
         45:e8:c1:f9:d6:71:a9:4d:c8:23:72:c2:d0:cf:c4:65:b2:47:
         20:d5:c5:6e:d0:c0:4d:0b:ad:f1:26:77:df:4a:60:e4:cb:45:
         ea:18:f0:ac:f8:5f:64:1a:79:d0:2f:7f:8f:82:3b:f4:ec:41:
         37:6a:74:a2:31:1e:6a:ca:d3:77:31:83:ed:db:e8:9f:a3:90:
         a4:20:4c:a3:b1:6e:be:9b:99:4f:73:74:0e:b7:ac:82:3c:c9:
         1c:fb:e7:cc:99:2f:8b:5f:5c:8d:b1:39:a4:9b:91:01:ba:cd:
         3e:1c:cd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----