Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Qv8n7lUuNkAqmqzlo2tFId7r9WM.roa
File:                     Qv8n7lUuNkAqmqzlo2tFId7r9WM.roa (raw, json)
Hash identifier:          ChgT1pylxFzuD8c9pM4KaBMnwnde3Wqn3rEwo/+qV1g=
Subject key identifier:   42:FF:27:EE:55:2E:36:40:2A:9A:AC:E5:A3:6B:45:21:DE:EB:F5:63
Certificate issuer:       /CN=7bab6c11d41162db0306858f83e5e65121132a6b
Certificate serial:       03F5CE79
Authority key identifier: 7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Qv8n7lUuNkAqmqzlo2tFId7r9WM.roa
Signing time:             Sat 01 Jan 2022 06:00:50 +0000
ROA not before:           Sat 01 Jan 2022 06:00:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212845
IP address blocks:        2a07:22c1:4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66440825 (0x3f5ce79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bab6c11d41162db0306858f83e5e65121132a6b
        Validity
            Not Before: Jan  1 06:00:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=42ff27ee552e36402a9aace5a36b4521deebf563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b6:53:29:1e:cc:b6:b2:d0:d6:24:02:e3:3b:
                    d4:9e:ac:b0:4f:39:f2:aa:a8:b9:31:f2:71:1b:df:
                    3d:c4:f8:37:53:fc:dd:62:b3:57:bc:5f:26:4c:85:
                    e5:0c:45:7a:ce:ac:73:86:81:cc:b7:ec:eb:de:9e:
                    90:45:e6:66:32:1d:a3:d1:e4:28:e2:f0:5f:10:82:
                    42:4e:ad:f3:98:a5:2e:4c:17:53:af:20:89:76:81:
                    12:08:e6:2c:8b:c6:19:9e:07:c9:a6:28:3e:9a:fa:
                    a6:5d:78:3b:49:06:ea:fa:f1:f0:79:50:73:b1:44:
                    54:10:08:e5:34:ba:54:c3:a0:a9:02:dd:fc:16:98:
                    3b:9e:9e:2d:17:a4:16:73:19:00:22:84:29:c6:50:
                    d1:68:7a:50:31:e0:85:40:40:b5:aa:8b:8d:49:f6:
                    e3:82:d4:52:b1:79:92:22:20:53:73:46:15:81:96:
                    53:56:c2:1b:08:35:a4:44:cf:28:68:1b:a2:b5:6e:
                    d8:c3:bb:1f:db:89:9a:9f:b9:b2:a3:86:5d:56:9d:
                    b1:b0:7e:a4:d8:f4:b1:5a:1d:bb:16:ff:94:56:6f:
                    13:71:4b:99:75:fe:aa:3c:89:f2:d4:13:c9:90:56:
                    3a:60:e4:17:f8:c4:e3:4d:8a:24:ed:84:33:47:26:
                    dc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FF:27:EE:55:2E:36:40:2A:9A:AC:E5:A3:6B:45:21:DE:EB:F5:63
            X509v3 Authority Key Identifier:
                keyid:7B:AB:6C:11:D4:11:62:DB:03:06:85:8F:83:E5:E6:51:21:13:2A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6tsEdQRYtsDBoWPg-XmUSETKms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/Qv8n7lUuNkAqmqzlo2tFId7r9WM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d334ad-5240-4daa-a050-9f5bf736720e/1/e6tsEdQRYtsDBoWPg-XmUSETKms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:22c1:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:f2:57:1e:f8:f6:e8:eb:87:f0:22:ba:71:0b:77:3b:aa:77:
         52:9a:06:9e:81:52:a8:79:f8:45:29:b4:a5:7f:1e:c9:78:40:
         e2:c6:38:91:2d:26:58:9a:5c:81:f2:93:15:fc:5c:07:00:15:
         cf:89:c9:dc:61:da:4e:9e:1c:42:61:ea:3c:8f:d8:d1:cc:52:
         30:48:9d:b2:aa:d6:8f:e7:ae:86:b7:95:ed:53:7c:26:30:9b:
         98:52:42:f0:bb:86:cd:46:fd:0d:4e:72:8f:89:90:0a:bd:7c:
         2f:fb:5c:e4:c2:a0:c1:ba:2b:3f:19:01:5f:1b:9e:c2:2d:aa:
         af:10:8c:86:48:6c:b5:6c:e6:75:e4:68:77:34:39:fd:a7:69:
         97:5c:0a:eb:aa:fc:5e:04:42:fa:e4:73:15:37:ba:6c:b3:6e:
         af:f2:67:d7:f3:bf:11:b4:57:6a:a6:22:d1:95:58:98:49:0c:
         31:47:57:60:66:23:ae:6b:d9:2d:fd:fa:93:3f:37:b1:5e:56:
         c0:51:cc:e4:4d:2b:92:f2:2a:c6:3a:dc:0a:bc:03:2a:74:6a:
         4a:01:49:53:fa:69:c7:cc:5d:9b:26:2b:72:94:dd:eb:11:2c:
         21:bb:18:07:ff:bc:88:22:24:16:59:92:e4:2d:fd:32:f2:f6:
         d0:2f:92:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----