Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/RHdgvdjzGW_7MBUEQifBV07oUp8.roa
File:                     RHdgvdjzGW_7MBUEQifBV07oUp8.roa (raw, json)
Hash identifier:          SPG45n10h/7tTUC6nGGQTJq0pf3uFb3ytk/A2mGQhgA=
Subject key identifier:   44:77:60:BD:D8:F3:19:6F:FB:30:15:04:42:27:C1:57:4E:E8:52:9F
Certificate issuer:       /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial:       07DDF926
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/RHdgvdjzGW_7MBUEQifBV07oUp8.roa
Signing time:             Sat 01 Jan 2022 01:55:48 +0000
ROA not before:           Sat 01 Jan 2022 01:55:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23470
IP address blocks:        2a04:ff00:500::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131987750 (0x7ddf926)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
        Validity
            Not Before: Jan  1 01:55:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=447760bdd8f3196ffb3015044227c1574ee8529f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:73:c4:c8:9b:82:ca:07:da:4d:66:8f:1a:03:
                    7c:b3:ce:d6:93:b3:93:80:f5:3b:c4:31:11:21:1a:
                    30:cf:cf:62:e8:06:59:ab:71:bb:d1:c7:d3:6a:c7:
                    56:04:80:25:35:16:45:54:22:46:59:3d:74:b0:d9:
                    45:59:72:34:61:f6:c4:a0:c6:48:13:66:bb:8c:91:
                    bb:4a:7f:1e:62:cb:5c:25:89:4a:1e:3f:7c:82:69:
                    eb:91:b7:66:ca:63:5b:19:7b:59:0d:c9:78:26:67:
                    3a:d7:b6:0c:3a:ad:4b:e1:b1:6e:97:46:e4:df:2f:
                    ed:2e:54:f3:48:e2:7c:b2:9c:ff:62:df:23:47:ed:
                    4d:e0:79:33:c0:79:99:c3:5e:99:43:30:44:dc:23:
                    74:6c:0d:27:88:bb:4a:a6:fd:b8:a8:31:14:4b:c9:
                    9d:ff:42:77:09:43:36:4a:88:d9:4b:19:54:34:1c:
                    f8:f9:f7:78:f6:3f:e9:7d:b3:de:13:76:3b:e9:30:
                    ab:2f:00:cd:b4:de:87:48:46:2d:9d:ec:20:8b:e5:
                    4c:49:bd:e1:a7:e5:8e:58:2e:5b:e5:74:7f:5c:84:
                    8b:2a:ee:04:62:c2:09:c7:14:5d:39:06:7a:dc:20:
                    af:dc:21:52:91:38:4f:ad:23:9d:52:e1:3a:a2:4a:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:77:60:BD:D8:F3:19:6F:FB:30:15:04:42:27:C1:57:4E:E8:52:9F
            X509v3 Authority Key Identifier:
                keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/RHdgvdjzGW_7MBUEQifBV07oUp8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:ff00:500::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:04:61:44:f2:89:d8:3c:c8:ba:c7:93:bb:c2:d8:a6:3b:82:
         40:47:df:09:d7:25:1b:8d:a2:87:df:e7:23:60:fe:f2:33:29:
         ce:68:b7:73:ba:83:d4:3b:69:0f:f3:00:b1:df:b3:8b:b9:cc:
         97:90:c0:c6:d5:80:7b:f6:50:41:e8:43:5c:54:e9:cb:ca:9c:
         66:03:d5:17:aa:a7:a8:ac:47:49:33:a5:dc:e4:42:b6:44:85:
         22:ce:57:86:05:14:85:a7:56:a7:00:57:f5:b1:6f:a0:d3:d6:
         f2:f8:01:1e:f9:4f:c5:df:25:cf:d7:54:21:65:c7:75:59:0e:
         9f:2e:ce:cd:6f:5f:c6:fd:8a:27:dc:8c:48:9d:d9:3a:35:6c:
         00:e4:ae:26:68:9c:08:bc:8f:d0:84:e9:c8:d7:92:30:aa:04:
         cb:4b:dd:3c:1a:ab:7f:65:9a:74:aa:91:8d:98:15:45:54:8a:
         f5:c1:08:4a:4b:64:dd:03:05:91:59:7a:2b:55:66:b8:d5:74:
         ec:dc:38:4b:83:7e:cd:32:54:22:ce:8c:93:73:37:a9:b6:e7:
         e7:94:a6:1b:07:18:2d:6c:55:4d:82:37:4c:f0:f4:7a:97:ab:
         bc:07:3c:5d:93:c3:d3:4d:b0:b9:83:6f:6f:d9:76:89:94:57:
         b4:dc:cf:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----