Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/jK11ypb3NZ3T52k84HKoNFzVnNk.roa
File:                     jK11ypb3NZ3T52k84HKoNFzVnNk.roa (raw, json)
Hash identifier:          SqFJvS4lxtdLWXDY2KO6lJiUnHnylxmmaro63ILMfBg=
Subject key identifier:   8C:AD:75:CA:96:F7:35:9D:D3:E7:69:3C:E0:72:A8:34:5C:D5:9C:D9
Certificate issuer:       /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial:       9264A4
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/jK11ypb3NZ3T52k84HKoNFzVnNk.roa
Signing time:             Wed 27 Apr 2022 18:55:49 +0000
ROA not before:           Wed 27 Apr 2022 18:55:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207084
IP address blocks:        2a12:8fc6:200::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9594020 (0x9264a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
        Validity
            Not Before: Apr 27 18:55:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8cad75ca96f7359dd3e7693ce072a8345cd59cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:97:16:65:ac:27:0f:36:c0:96:c6:4f:b9:15:
                    fd:64:ee:b1:3f:17:7f:b1:40:07:60:4e:63:ec:ab:
                    98:a1:a2:a1:15:cf:ce:d2:95:01:23:93:38:be:7c:
                    f1:6a:51:31:7b:b8:3f:6a:c5:04:13:21:3d:fc:6f:
                    c9:fa:15:a5:6f:43:42:29:f7:1a:b4:ee:d0:f5:25:
                    e0:cb:4e:25:df:cc:0f:49:c9:5e:84:ba:b6:76:5e:
                    83:8c:95:2b:b3:c0:c4:ff:84:b7:98:0f:f2:ae:68:
                    68:da:8d:25:3f:65:15:60:56:7a:64:f4:03:a9:38:
                    14:9a:c9:a6:1b:42:35:74:f3:f9:a8:5c:10:de:c1:
                    d2:b2:77:8c:38:a1:f5:77:44:78:bf:06:e0:21:40:
                    67:a8:42:2c:3a:7a:5a:ad:28:d8:da:7c:41:b5:b5:
                    de:22:f2:0a:a6:be:68:fe:b5:a3:b8:14:51:8b:f1:
                    f7:7a:fc:62:5f:25:80:50:9d:e3:fa:4f:a6:77:a5:
                    d1:e7:37:f3:23:f3:3a:56:bf:48:de:59:d9:37:7d:
                    91:ec:68:9b:8c:ec:2a:77:08:c9:4c:3f:c0:0c:80:
                    d1:c5:7f:28:9a:99:4e:23:e1:69:56:57:4d:ef:b2:
                    3e:d8:e0:6a:a0:3c:3c:f1:5b:20:1e:26:19:3c:f8:
                    52:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AD:75:CA:96:F7:35:9D:D3:E7:69:3C:E0:72:A8:34:5C:D5:9C:D9
            X509v3 Authority Key Identifier:
                keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/jK11ypb3NZ3T52k84HKoNFzVnNk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8fc6:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:cb:19:23:c1:04:15:aa:df:8c:ee:b0:04:87:39:4d:0a:
         69:c1:d4:9c:7c:81:6d:85:23:c6:65:02:25:b6:3c:9e:41:d2:
         6f:0a:47:a2:c7:8c:80:4c:dc:37:17:ec:12:27:bb:ed:da:ce:
         8b:79:47:c1:09:74:e6:14:48:ff:30:58:ea:66:a4:57:41:20:
         db:24:2d:86:6b:75:94:48:45:30:7d:cf:f8:9e:9d:66:f8:4f:
         ec:e7:64:07:60:36:94:7a:d5:b2:1d:d7:69:b4:11:d1:37:44:
         d5:c6:be:ba:37:7a:6b:64:04:83:b8:9d:24:e5:7b:ef:44:81:
         2f:04:b2:f3:52:47:c0:a0:ee:df:58:67:06:06:23:9b:79:cc:
         3b:d5:a3:6d:23:d2:23:4a:33:d9:c1:d0:3e:a2:5a:c6:db:c2:
         ee:04:75:fa:44:d0:32:71:e1:1e:a0:d5:9a:8b:71:4f:63:b2:
         5e:22:2b:c7:fc:14:21:3a:14:9d:43:18:ad:6c:0b:ff:39:3d:
         fd:bc:80:5d:db:82:15:8a:03:dd:d5:da:ff:cc:3d:6f:0d:51:
         6d:60:98:82:20:e8:0c:7c:9f:24:10:f8:45:c8:24:77:fd:23:
         68:17:dd:b3:18:90:5c:50:f4:82:cc:af:66:d4:26:9d:a4:2d:
         10:7a:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----