Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/4pXncP7luo2PFCArLb_zS99vulc.roa
File:                     4pXncP7luo2PFCArLb_zS99vulc.roa (raw, json)
Hash identifier:          68Do5kvHA0MM0W9veq0xED4zNP6yzfk//zBZG+C4LEc=
Subject key identifier:   E2:95:E7:70:FE:E5:BA:8D:8F:14:20:2B:2D:BF:F3:4B:DF:6F:BA:57
Certificate issuer:       /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial:       0183573E171AE048FF92C349D175BCD00A88
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/4pXncP7luo2PFCArLb_zS99vulc.roa
Signing time:             Mon 19 Sep 2022 19:33:50 +0000
ROA not before:           Mon 19 Sep 2022 19:33:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204550
IP address blocks:        2a05:6740:40c4::/48 maxlen: 48
                          2a05:6740:40c5::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:57:3e:17:1a:e0:48:ff:92:c3:49:d1:75:bc:d0:0a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
        Validity
            Not Before: Sep 19 19:33:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e295e770fee5ba8d8f14202b2dbff34bdf6fba57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5c:7b:42:59:e4:92:bc:1e:83:4e:21:f0:4b:
                    85:78:34:0e:4b:76:84:3f:cc:1d:d8:ab:be:4d:d7:
                    80:bf:15:81:f9:2e:c0:05:58:50:de:de:2b:42:4e:
                    5e:5a:8c:1c:8d:c9:ae:c5:53:d4:e6:04:de:ce:6c:
                    14:e4:6c:a6:e9:96:64:36:c3:be:7e:00:40:8a:a9:
                    ce:7a:29:26:7a:d8:ef:d1:e2:b0:3b:33:7e:26:70:
                    67:73:67:f4:1e:fd:b2:bc:17:7d:fa:31:cb:9f:66:
                    b0:cb:c9:e5:de:c5:24:b0:ff:35:e5:94:d0:dd:9f:
                    c6:dd:25:7f:0e:21:da:c2:fe:e7:70:46:d5:da:3e:
                    a0:09:4b:59:65:da:21:5e:02:17:04:cf:4e:6f:6c:
                    80:09:6f:e6:80:5d:d8:66:7f:2a:67:96:bd:1c:b2:
                    5c:14:ac:63:c2:d0:8e:d5:aa:63:66:1e:40:7f:2f:
                    8e:61:56:02:1b:e8:f2:d8:83:0e:e3:d7:de:49:20:
                    4d:0b:1a:44:a4:4a:37:a0:9b:33:b9:69:e8:2f:9d:
                    03:6c:44:bf:0d:99:ed:6d:69:e5:5d:5a:e7:d9:c9:
                    10:bd:da:f7:d8:4c:df:4e:51:df:b9:04:ac:39:87:
                    5c:33:17:c1:c8:ef:2e:8c:23:8b:c2:9b:14:c6:cb:
                    86:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:95:E7:70:FE:E5:BA:8D:8F:14:20:2B:2D:BF:F3:4B:DF:6F:BA:57
            X509v3 Authority Key Identifier:
                keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/4pXncP7luo2PFCArLb_zS99vulc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:6740:40c4::/47

    Signature Algorithm: sha256WithRSAEncryption
         86:d0:a5:4f:a0:6b:fd:26:7f:2a:f6:9b:f8:57:09:48:85:f5:
         18:6d:9f:00:a2:e9:a0:04:a9:4a:c1:44:79:fb:4b:f7:0c:0f:
         0a:bf:9b:d7:cd:d8:61:8e:cd:8a:00:d0:c2:ea:b0:4b:2e:18:
         71:49:fd:84:ad:16:2e:a5:7a:3a:0a:9c:b0:50:19:e4:5e:17:
         59:95:cb:02:6a:22:aa:70:40:b9:ba:b0:0f:e4:63:3c:d7:7c:
         9f:da:90:0e:ed:72:62:93:a3:7d:9c:c6:89:46:a0:95:10:02:
         dc:0d:d5:ce:de:78:62:3f:75:a6:c7:c8:d8:30:bd:bb:31:9d:
         f3:61:ed:42:cb:55:ae:84:9d:f0:44:7b:33:fc:20:30:0e:a1:
         34:9e:69:13:d7:7c:40:1d:80:ea:ad:8f:3d:61:c8:fe:60:39:
         0b:b5:7e:fc:3a:70:60:4e:62:e7:5f:62:ec:15:96:00:3c:7b:
         13:01:b3:c6:c2:f2:61:b3:56:41:2d:d5:76:c5:c4:06:c8:77:
         68:6f:88:0d:b5:4a:45:a4:9d:f0:82:79:b9:0d:40:34:58:c1:
         e7:46:e9:64:21:74:ba:df:69:01:0c:3e:d2:72:09:1b:ab:7a:
         7d:f1:f9:b7:04:00:78:da:ea:2b:9c:fb:d0:d8:ad:cd:c8:0d:
         48:f1:7c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----