Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/a1ht7PqwnqH1c4KReWZVnx_Winw.roa
File:                     a1ht7PqwnqH1c4KReWZVnx_Winw.roa (raw, json)
Hash identifier:          1XU5XzymBKsi5KnYHzkBiR0Mmq4synGWljSSqMq9BaY=
Subject key identifier:   6B:58:6D:EC:FA:B0:9E:A1:F5:73:82:91:79:66:55:9F:1F:D6:8A:7C
Certificate issuer:       /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial:       04F6619C
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/a1ht7PqwnqH1c4KReWZVnx_Winw.roa
Signing time:             Sat 01 Jan 2022 13:00:52 +0000
ROA not before:           Sat 01 Jan 2022 13:00:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134521
IP address blocks:        2a05:e580:fd00::/40 maxlen: 40
                          2a05:e580:fe00::/40 maxlen: 40
                          2a05:e580:ff00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83255708 (0x4f6619c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
        Validity
            Not Before: Jan  1 13:00:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6b586decfab09ea1f57382917966559f1fd68a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:1e:b5:ab:0a:9b:c2:93:50:51:80:8e:67:
                    0d:93:a2:e6:9c:5b:7f:e6:a0:3b:ed:bd:49:56:7f:
                    f0:ca:a8:48:00:5a:ed:ee:ff:9b:66:d5:a6:02:79:
                    6d:a2:b4:47:7f:4b:2c:77:e5:bc:21:00:00:ea:f6:
                    c1:cd:de:46:87:a9:34:c7:6b:a8:64:5b:67:18:63:
                    2d:dc:f0:d8:9d:61:3b:f9:13:1d:0f:96:ce:1a:c0:
                    b9:6b:a1:3c:dd:46:6e:c2:bf:2f:1a:6e:d3:60:e6:
                    74:d4:18:64:4f:8b:5e:69:09:9a:1a:ad:3c:3d:14:
                    6c:0e:09:bd:8a:d9:a9:ae:c8:4c:74:03:7b:0b:92:
                    e9:58:f7:08:84:00:8f:34:a9:8a:92:45:fd:30:f4:
                    a0:9f:8f:2a:1a:7d:58:7a:63:16:19:40:1e:bf:d7:
                    df:49:27:03:ae:70:e9:8f:8f:18:a8:dc:86:ba:b1:
                    53:8f:32:31:f5:c0:07:0a:3e:46:4f:c7:62:96:c4:
                    1c:23:38:aa:e0:01:27:a2:8c:41:72:01:f3:fc:c3:
                    90:c8:10:c0:88:5c:ec:9d:65:0f:db:11:05:8b:73:
                    f9:20:17:fa:72:c1:51:d4:4d:ba:e2:e1:12:e3:09:
                    30:66:6c:55:4e:ae:49:56:0c:5f:5c:99:8b:ef:c0:
                    d1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:58:6D:EC:FA:B0:9E:A1:F5:73:82:91:79:66:55:9F:1F:D6:8A:7C
            X509v3 Authority Key Identifier:
                keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/a1ht7PqwnqH1c4KReWZVnx_Winw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:e580:fd00::-2a05:e580:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         9c:de:4c:f5:12:97:f8:06:59:12:22:d0:61:0b:5f:a7:ba:4f:
         68:d1:73:ca:8c:c9:10:18:29:1d:73:5d:43:22:12:5d:25:19:
         cc:62:28:2b:17:10:fb:54:0c:9c:93:41:db:1f:5d:a6:b6:27:
         55:70:28:f6:c7:54:6d:7e:25:e3:d4:49:94:c4:3f:01:d7:5e:
         58:cd:44:99:e0:9f:5f:2b:c8:c0:11:0c:57:a3:36:ca:1a:dc:
         16:d6:68:42:bd:a3:bc:d5:cf:0a:22:35:10:dd:42:01:14:33:
         d8:09:60:d7:94:21:52:e6:07:64:4d:92:5f:67:02:b0:33:2f:
         fe:d8:67:8a:d1:5d:b1:f9:95:4b:6d:b0:d9:c0:69:bc:f2:a1:
         58:cc:1d:04:c7:e6:5c:d5:b4:d9:22:42:32:e1:a8:47:7f:2d:
         a8:57:5c:75:3f:75:e2:ad:a9:bf:99:87:2b:02:6b:5d:72:fe:
         af:3e:88:3a:31:7b:f9:27:f4:6d:e6:c9:20:6f:e9:c4:3a:43:
         f5:10:85:41:ba:91:8f:d1:d7:a6:0e:2e:e9:c7:98:d2:a9:25:
         90:22:74:87:bb:7a:57:72:12:66:79:07:f5:a1:9f:bf:9a:3f:
         67:06:fa:4c:3c:86:ff:8b:1e:41:34:bc:13:c5:9a:b9:65:0a:
         04:9d:d4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----