Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/g2oo8xNPdj3yh775HKX9d1jK4bY.roa
File:                     g2oo8xNPdj3yh775HKX9d1jK4bY.roa (raw, json)
Hash identifier:          n1Zu/EhHEXRW5BdYHyng1ldvnum8mnATHMqrZvZoLcE=
Subject key identifier:   83:6A:28:F3:13:4F:76:3D:F2:87:BE:F9:1C:A5:FD:77:58:CA:E1:B6
Certificate issuer:       /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial:       099973A5
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/g2oo8xNPdj3yh775HKX9d1jK4bY.roa
Signing time:             Sat 01 Jan 2022 05:00:45 +0000
ROA not before:           Sat 01 Jan 2022 05:00:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2119
IP address blocks:        2001:67c:2458::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161051557 (0x99973a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
        Validity
            Not Before: Jan  1 05:00:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=836a28f3134f763df287bef91ca5fd7758cae1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:4e:43:08:9b:ef:fe:4e:4e:82:b4:41:21:
                    16:80:11:d2:db:70:0a:76:ca:8c:cf:ca:93:22:bb:
                    52:e3:0b:4a:21:8a:c6:ef:9f:f6:cd:f1:25:78:7c:
                    a8:60:38:9b:13:1c:49:10:51:2d:8a:03:85:ef:54:
                    20:9b:90:f8:59:3b:31:78:7b:9e:56:cb:be:69:44:
                    58:55:eb:79:5a:0c:80:35:6e:51:a7:46:ec:65:03:
                    6f:8d:f0:47:62:b7:f8:19:ea:45:37:6d:54:d9:ed:
                    d5:3d:12:ed:5e:66:8b:49:4a:f6:cb:62:02:82:67:
                    1c:de:0a:d5:ab:86:97:cc:1e:94:8a:a6:e2:17:9a:
                    12:ff:35:c4:02:4c:21:b5:38:d1:91:d9:9c:34:03:
                    3e:00:71:1d:c6:5d:71:d6:1d:3c:9f:62:ad:66:9b:
                    eb:db:c6:6e:ee:1b:e3:aa:0f:06:fc:da:fd:44:80:
                    19:ba:1f:7a:30:bc:f0:86:03:61:2c:42:9d:8d:5b:
                    0e:73:55:1c:67:be:cc:df:41:b6:29:b7:7c:a9:5b:
                    6e:50:7a:2f:76:cd:48:ea:90:d3:7a:fa:e3:27:1b:
                    fa:b3:2f:70:8c:a0:44:da:7f:f2:4d:1d:9e:8a:22:
                    a2:0a:6b:8e:f5:6a:10:72:2e:95:e0:b7:23:0e:6e:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6A:28:F3:13:4F:76:3D:F2:87:BE:F9:1C:A5:FD:77:58:CA:E1:B6
            X509v3 Authority Key Identifier:
                keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/g2oo8xNPdj3yh775HKX9d1jK4bY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2458::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:f7:12:99:1d:9b:66:01:40:55:f0:f7:6e:89:46:0f:c8:6a:
         d7:d1:43:ea:9f:4c:79:39:1f:08:a2:c5:7b:46:1b:5c:f5:be:
         04:ae:fc:89:9f:3e:8d:d4:33:f1:e9:e2:e8:6b:86:54:3a:27:
         83:c1:d7:4d:2f:4a:ac:a7:53:5b:61:b1:83:6e:43:a5:82:a4:
         69:3a:c7:6e:5c:d1:23:10:e2:16:80:c7:f7:d9:c6:6a:5e:52:
         56:7c:b1:16:17:bf:6b:4d:d3:f7:fe:f1:d2:85:70:d3:4e:47:
         a5:59:3d:6c:26:1b:4c:81:de:e7:e9:f4:25:97:85:ea:d0:9e:
         9f:21:38:ea:2a:ae:37:cd:9c:43:8a:cf:29:43:43:cc:8d:2b:
         55:64:43:d8:f6:78:6c:40:f2:8c:16:9f:ee:ad:0f:35:d6:38:
         6c:32:a2:05:cc:c7:96:4e:e1:2a:d8:c4:71:80:64:44:b9:88:
         16:be:07:d8:41:a4:2f:d7:e1:3f:a3:68:a1:73:d8:b3:49:36:
         f0:66:2e:c5:dd:db:eb:26:16:d6:7a:95:9c:da:35:d0:2f:24:
         b2:70:ca:50:cd:6e:d8:b4:df:51:9d:c1:e0:97:a9:2f:e6:84:
         85:b2:0f:20:40:c9:eb:e2:21:ba:e0:44:6d:22:00:99:89:3f:
         32:21:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----