Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/VLme1kSXLDqBIGiNcf6eEHphmyU.roa
File:                     VLme1kSXLDqBIGiNcf6eEHphmyU.roa (raw, json)
Hash identifier:          cUs6By8lCCMh+15NCBo1KG+8ZqmuWbLaZgnRpZEwTNA=
Subject key identifier:   54:B9:9E:D6:44:97:2C:3A:81:20:68:8D:71:FE:9E:10:7A:61:9B:25
Certificate issuer:       /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial:       01839F285C18731C34D492523D42DD251685
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/VLme1kSXLDqBIGiNcf6eEHphmyU.roa
Signing time:             Mon 03 Oct 2022 18:42:45 +0000
ROA not before:           Mon 03 Oct 2022 18:42:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134521
IP address blocks:        2a05:e580:ff00::/40 maxlen: 40
                          2a05:e580:fe00::/40 maxlen: 40
                          2a05:e580:fd00::/40 maxlen: 40
                          2a05:e580:fb00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:9f:28:5c:18:73:1c:34:d4:92:52:3d:42:dd:25:16:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
        Validity
            Not Before: Oct  3 18:42:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=54b99ed644972c3a8120688d71fe9e107a619b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:21:00:72:3c:14:1f:d4:f9:f5:c5:32:67:2d:
                    7c:5d:0b:a1:e7:91:31:53:ba:49:87:32:f9:58:c2:
                    e1:8d:77:0e:69:c5:2b:98:ad:8b:39:f2:3b:b8:de:
                    ed:02:6d:a3:df:00:06:f9:f6:98:c4:2e:89:fc:bf:
                    a2:0d:1d:16:f7:e6:70:10:58:a7:a5:2e:de:8b:3c:
                    b8:0f:97:fe:4e:80:d6:5f:48:41:48:97:4f:ae:f5:
                    54:eb:c2:a1:6d:b1:f7:ca:00:01:e3:cc:9a:06:87:
                    11:af:a7:00:70:f9:5b:60:67:b8:1e:6f:03:d7:55:
                    f5:43:68:48:dd:4f:98:20:c9:8b:80:48:5f:26:10:
                    b5:d2:19:1d:ca:60:d1:e8:4a:47:8e:75:2a:31:6e:
                    bc:3c:29:5d:69:b9:0a:53:54:83:b5:02:28:62:69:
                    23:8b:cd:cf:0b:b7:b4:a9:90:b1:01:ae:d7:ab:80:
                    55:77:85:e5:9e:c9:ab:1f:23:91:ae:9e:c4:12:5a:
                    5f:e6:34:fe:3b:00:40:9f:f1:3a:6e:57:d8:a4:b2:
                    8c:93:e4:a0:31:66:fb:ca:d9:74:a2:ea:aa:98:dd:
                    07:1b:a7:45:41:41:f8:66:b7:16:2c:21:19:eb:58:
                    cb:a1:6f:03:42:eb:ce:70:9c:db:dd:45:e2:7d:0b:
                    10:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B9:9E:D6:44:97:2C:3A:81:20:68:8D:71:FE:9E:10:7A:61:9B:25
            X509v3 Authority Key Identifier:
                keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/VLme1kSXLDqBIGiNcf6eEHphmyU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:e580:fb00::/40
                  2a05:e580:fd00::-2a05:e580:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5b:81:d8:b8:94:b9:9f:74:e1:8f:4d:7f:6e:7c:8d:2c:23:c8:
         13:9d:22:9d:9f:2e:3a:ce:9e:bc:e0:49:4b:50:00:12:0a:70:
         0f:cc:7f:3c:b7:c8:e1:db:95:38:90:e8:c7:5d:13:76:27:bf:
         c1:cc:a6:2a:1c:1d:d1:ac:7b:59:a4:9b:57:81:85:a9:64:76:
         59:08:35:82:d8:11:84:0a:57:f9:64:62:0d:51:66:95:a1:d8:
         bc:a2:27:7e:f4:4b:a5:b8:3c:d0:ee:cf:ae:78:96:9d:fa:de:
         ea:5e:93:c6:fd:7b:82:dc:43:68:da:4f:50:91:38:6d:c8:f8:
         dc:3e:79:f9:1a:2f:3f:cf:35:6f:09:08:52:ce:f1:a0:c6:bc:
         5c:a0:31:0a:71:c4:19:38:7f:ab:75:70:a4:0e:72:4f:1b:09:
         d7:93:c8:ae:dd:96:da:87:1c:f6:f1:46:87:ad:db:da:2d:c4:
         c8:ef:43:0f:f8:67:84:04:78:ad:57:23:af:41:e4:7c:fa:9f:
         a0:f5:e6:04:0d:37:f5:43:20:1d:81:4e:7a:3d:80:89:0c:5c:
         d2:a1:03:8f:f4:94:da:0c:12:ea:9d:19:bf:97:aa:30:e3:28:
         38:b0:ed:24:5f:bd:ab:f3:12:4a:54:56:39:17:43:5a:41:21:
         d6:bb:13:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----