Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/v4KA9UeVQpeo-Ukncgh3B0eJCCI.roa
File:                     v4KA9UeVQpeo-Ukncgh3B0eJCCI.roa (raw, json)
Hash identifier:          A570aXewZuKFuh3xX0kDYmSDCGPq6h7mBb6366iuXKY=
Subject key identifier:   BF:82:80:F5:47:95:42:97:A8:F9:49:27:72:08:77:07:47:89:08:22
Certificate issuer:       /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial:       04BB6D09
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/v4KA9UeVQpeo-Ukncgh3B0eJCCI.roa
Signing time:             Sat 01 Jan 2022 04:58:44 +0000
ROA not before:           Sat 01 Jan 2022 04:58:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213100
IP address blocks:        2001:678:d68::/48 maxlen: 48
                          2001:678:d6c::/48 maxlen: 48
                          2001:67c:2848::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79392009 (0x4bb6d09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
        Validity
            Not Before: Jan  1 04:58:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bf8280f547954297a8f949277208770747890822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b7:56:a6:76:df:be:79:e2:2d:3f:56:8d:14:
                    e6:ef:7a:59:90:2e:77:e9:3b:4d:7a:ff:93:fa:25:
                    69:c8:4e:68:c9:00:8e:d2:48:5b:82:54:4b:a4:1c:
                    ce:2b:5e:11:15:93:de:84:85:9e:15:26:10:d4:b0:
                    da:8e:13:16:15:c8:e4:38:1b:f4:15:eb:41:8f:b8:
                    e8:80:0b:0d:0f:bb:42:da:97:f6:db:52:57:15:82:
                    3f:a1:5f:c4:8e:9d:39:8c:5c:16:4d:ec:ef:c0:c6:
                    b1:03:51:21:5f:60:5f:c0:f7:6e:ae:b5:92:a4:4d:
                    8e:54:c7:c8:d6:99:32:83:17:89:6f:fb:61:82:c6:
                    8d:42:2e:60:cc:13:b2:4e:5f:6e:4c:87:87:54:94:
                    aa:d3:3d:01:f0:3c:32:3d:34:85:d3:d9:26:03:e9:
                    ce:fd:df:46:52:3c:19:18:fa:d9:9f:60:62:58:b8:
                    26:5a:47:ab:90:59:a1:5b:c0:90:66:b8:c1:74:27:
                    d6:f3:bf:bc:b8:1d:d5:e7:d9:e6:ad:05:36:5b:c3:
                    68:0b:1c:bb:db:9d:22:2e:e0:25:0a:ce:80:26:10:
                    30:dd:b9:27:e0:8d:83:78:b0:e9:8c:8e:d8:6c:de:
                    c9:6b:8b:2d:c1:54:58:19:fd:f5:62:67:e2:75:31:
                    1a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:82:80:F5:47:95:42:97:A8:F9:49:27:72:08:77:07:47:89:08:22
            X509v3 Authority Key Identifier:
                keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/v4KA9UeVQpeo-Ukncgh3B0eJCCI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:d68::/48
                  2001:678:d6c::/48
                  2001:67c:2848::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:0c:62:7c:8f:6f:71:1b:b9:0c:10:52:12:1d:b3:18:56:bb:
         2c:ad:9a:79:f2:58:99:aa:ee:f5:34:f6:67:e7:2a:3d:08:33:
         8f:c4:4c:f2:73:cd:e9:05:b1:93:6b:9b:f5:80:2e:18:fb:5f:
         89:ee:c0:46:b1:aa:84:bb:02:a4:13:54:b8:d2:6a:89:7a:b3:
         d5:c7:91:2d:49:18:36:cf:f5:6c:64:de:79:b9:3a:df:2c:a1:
         66:c3:18:5d:16:ee:a0:ae:b1:98:21:f5:77:d5:d4:29:b4:4e:
         de:d8:c3:c9:fb:f1:87:84:1c:e4:05:f6:b5:18:5b:3b:8d:5f:
         74:c7:68:a3:7f:fd:c7:5c:48:4e:51:64:4e:13:a3:84:17:5a:
         c3:83:2f:43:a6:de:fc:6e:29:a9:18:c4:49:96:dc:9d:e2:69:
         ca:e0:7d:50:e3:8b:8e:5a:60:d3:04:de:28:ab:46:d2:53:5e:
         d2:e8:ab:74:c8:bb:4b:ef:d8:9e:da:97:67:af:e1:95:80:6b:
         1e:4a:e3:c1:0c:c3:b0:6b:2d:39:bf:73:f6:8a:42:17:3c:1f:
         85:92:06:9c:a7:24:ef:0d:4c:a6:50:a0:3d:f3:78:e7:e5:c8:
         9d:1a:ec:54:75:25:8c:5f:15:b9:4a:63:9e:01:d8:d5:c3:63:
         51:a5:5a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----