Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/wz_RICm3sUCIjypGzYY7aIoLMbQ.roa
File:                     wz_RICm3sUCIjypGzYY7aIoLMbQ.roa (raw, json)
Hash identifier:          MoKYvPPwnUfKEFLY4OGZGnLNzh/lBFLiDRPOSbB78jc=
Subject key identifier:   C3:3F:D1:20:29:B7:B1:40:88:8F:2A:46:CD:86:3B:68:8A:0B:31:B4
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0184C5BFF2D03B7265D47CBBAC6C9F9097C9
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/wz_RICm3sUCIjypGzYY7aIoLMbQ.roa
Signing time:             Tue 29 Nov 2022 23:36:41 +0000
ROA not before:           Tue 29 Nov 2022 23:36:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208029
IP address blocks:        2a0c:b641:470::/44 maxlen: 48
                          2a0c:b642:5000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c5:bf:f2:d0:3b:72:65:d4:7c:bb:ac:6c:9f:90:97:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Nov 29 23:36:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c33fd12029b7b140888f2a46cd863b688a0b31b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:8b:a6:55:5a:97:2f:8b:58:56:56:39:44:
                    50:91:2d:01:31:a3:50:26:ac:3d:08:fb:a3:bc:32:
                    da:2e:83:1b:e0:6e:c1:7a:4e:0a:0b:39:00:2d:fc:
                    f2:d8:a7:1c:bd:e8:0d:3d:f5:e6:0e:a7:c6:c9:25:
                    d7:89:5e:5f:f4:33:2c:ec:01:d9:22:69:6d:ef:5f:
                    9b:8f:ad:c2:e3:ed:85:29:23:b0:ee:1d:9c:ef:f8:
                    17:2d:34:79:46:02:f3:e4:63:8b:23:af:8e:60:ba:
                    e1:59:4d:a8:f8:a2:d8:3d:56:73:1d:cf:64:16:97:
                    12:2c:c9:80:6f:33:07:2f:32:e5:0f:48:ae:c1:3c:
                    2f:19:61:16:ca:1f:77:92:ca:25:7c:c8:16:dd:66:
                    d8:23:4a:98:be:4d:d3:49:a9:b9:ee:d6:01:91:3b:
                    c1:b3:5f:2e:47:40:f9:41:32:d2:98:fa:9f:78:80:
                    48:a7:df:ab:a4:a0:90:ce:cd:32:d4:37:59:81:72:
                    bd:31:98:ad:bf:c2:67:0e:57:5a:86:50:37:11:ac:
                    63:ee:fa:e1:73:49:3f:9f:a4:03:01:53:aa:e4:b3:
                    69:91:1c:66:58:74:56:db:52:4d:39:58:3e:64:40:
                    b6:8c:a5:07:e1:8a:c8:44:4b:31:ba:6f:31:95:46:
                    92:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3F:D1:20:29:B7:B1:40:88:8F:2A:46:CD:86:3B:68:8A:0B:31:B4
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/wz_RICm3sUCIjypGzYY7aIoLMbQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:470::/44
                  2a0c:b642:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2f:4c:ed:6d:a9:b6:b8:eb:d2:4b:8c:e7:73:7f:16:24:ed:ba:
         83:a8:1b:ab:75:2f:4f:17:77:a1:57:9e:10:78:fc:03:08:09:
         62:c3:10:91:45:f9:d1:32:9d:8b:38:ba:7d:d5:2f:78:60:df:
         db:34:bf:41:d8:d2:ce:25:a0:05:de:53:75:2a:06:72:32:6e:
         5e:cb:31:66:02:53:b3:85:8d:71:c0:f4:3f:40:d0:c7:70:55:
         12:c3:9b:7c:b1:fb:50:c5:16:0d:e0:06:fe:ac:3a:e3:b2:92:
         5f:0f:43:03:21:d6:05:ae:f8:a5:12:0c:bd:73:b3:1a:8b:50:
         d3:e7:e2:e2:e1:97:d5:c2:73:14:a4:3b:1f:0d:66:22:8f:f0:
         94:5e:10:c7:7e:3a:8e:5b:fc:1a:f6:37:86:01:e5:29:35:55:
         17:a7:83:d8:01:20:53:0c:77:06:9f:bb:6c:22:c3:75:10:c1:
         ee:cf:ac:70:80:14:c8:04:c1:fc:86:bd:1f:73:a0:c3:04:cb:
         4a:d1:06:df:b9:06:38:b8:8f:b4:2d:77:9c:bb:cd:e6:87:51:
         bf:77:48:bc:5c:01:b6:e4:7f:b8:8c:f3:4e:93:a7:e9:57:82:
         71:52:16:e7:aa:ef:ae:25:63:75:7d:70:81:93:ca:29:48:bb:
         67:fb:6b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----