Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/Vx-DfGQ_XhyhG3YNyugeKQFNc5M.roa
File:                     Vx-DfGQ_XhyhG3YNyugeKQFNc5M.roa (raw, json)
Hash identifier:          kmk3Gq++y55F1kGeZGRjObJmvauy6qvtBnCkE9Lmfeo=
Subject key identifier:   57:1F:83:7C:64:3F:5E:1C:A1:1B:76:0D:CA:E8:1E:29:01:4D:73:93
Certificate issuer:       /CN=207799027329f22682764573af2115da95a9f6bf
Certificate serial:       8CCC54
Authority key identifier: 20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/Vx-DfGQ_XhyhG3YNyugeKQFNc5M.roa
Signing time:             Sat 01 Jan 2022 01:57:05 +0000
ROA not before:           Sat 01 Jan 2022 01:57:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210945
IP address blocks:        2001:67c:808::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9227348 (0x8ccc54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207799027329f22682764573af2115da95a9f6bf
        Validity
            Not Before: Jan  1 01:57:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=571f837c643f5e1ca11b760dcae81e29014d7393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2b:62:01:81:c9:85:6d:2c:3f:53:67:82:8d:
                    3f:f5:48:a7:d4:8d:85:0f:e1:4f:f4:69:68:99:e9:
                    d4:67:1f:e7:5f:cb:36:a2:b5:25:43:52:c3:02:7e:
                    62:51:f0:67:46:65:71:95:01:a6:af:ef:5a:00:6e:
                    74:74:b1:f0:c9:aa:9d:a6:81:5c:45:28:cd:cd:a6:
                    a1:f4:e8:fc:9d:2d:0a:e7:77:1a:21:5a:7c:0d:10:
                    ea:ed:64:9b:95:69:77:89:f6:97:4d:33:7f:92:33:
                    d7:3f:e6:6e:92:9d:9f:d6:a5:3c:34:bc:a8:e1:ad:
                    ee:b7:fc:1f:3e:ac:87:7c:75:68:c9:f5:a5:ab:94:
                    35:df:3c:56:82:d6:b6:be:ee:a0:0d:1c:86:9e:1a:
                    5d:eb:1d:8e:19:c9:95:a7:79:3e:43:2e:d5:51:6e:
                    02:a6:eb:86:82:f0:f7:47:45:74:a6:e1:2b:ed:50:
                    f0:2f:19:45:06:8d:af:51:bd:b9:ee:d4:94:db:58:
                    12:dd:28:76:bd:03:17:17:d7:d5:5b:cd:60:76:d0:
                    c7:65:de:19:74:9a:2c:bc:e2:c8:dc:28:4c:00:2d:
                    03:7c:3a:78:fd:1c:05:06:b9:2b:72:6d:0a:50:09:
                    6a:d9:21:74:c7:87:6d:4d:7e:6e:ae:4a:04:b3:97:
                    bb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1F:83:7C:64:3F:5E:1C:A1:1B:76:0D:CA:E8:1E:29:01:4D:73:93
            X509v3 Authority Key Identifier:
                keyid:20:77:99:02:73:29:F2:26:82:76:45:73:AF:21:15:DA:95:A9:F6:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHeZAnMp8iaCdkVzryEV2pWp9r8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/Vx-DfGQ_XhyhG3YNyugeKQFNc5M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fc9f2b-7f2f-4238-aa19-98cba8ff2ca3/1/IHeZAnMp8iaCdkVzryEV2pWp9r8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:808::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:b4:09:91:6b:af:d7:d5:07:9a:00:40:7c:25:f0:98:04:3c:
         ac:fa:3b:a8:8b:ce:d3:92:88:20:94:28:d8:49:84:66:06:9a:
         18:38:85:9c:c7:1a:ae:c3:ba:89:2e:ce:33:66:d8:e6:eb:36:
         4e:88:12:3a:af:9f:36:3d:41:17:3f:16:40:f4:af:76:00:09:
         08:74:89:80:18:c6:65:f8:f1:bc:9e:87:69:25:65:46:0f:7e:
         76:24:ae:cd:37:8b:8e:b6:06:00:b9:1f:b5:98:74:6b:64:8c:
         39:29:98:e9:cc:68:79:b3:3c:9f:2f:fb:36:05:8e:80:1a:14:
         f0:3c:84:64:11:9c:a2:77:f9:e3:06:3b:f9:8d:53:68:45:24:
         68:54:1f:a3:2f:33:60:5c:b3:06:5e:8d:06:af:83:11:3e:0a:
         3a:5d:38:30:25:cb:41:c7:25:b0:2a:e3:c5:2b:ff:6c:4d:b4:
         48:50:e1:2d:bc:32:c4:38:c0:4c:39:2a:21:ed:b7:8c:31:c7:
         d2:17:be:ea:d5:ee:a9:9f:08:7b:91:81:7a:02:22:54:b2:fd:
         fc:5c:fc:58:92:63:1a:70:6d:ea:58:95:a5:b0:a9:e9:31:79:
         e0:07:b6:fd:84:14:49:1b:05:39:75:70:ab:ed:06:38:de:ea:
         b6:11:03:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----