Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/xnaQybKKDp1hvKK1ac5GNpMmUBY.roa
File:                     xnaQybKKDp1hvKK1ac5GNpMmUBY.roa (raw, json)
Hash identifier:          PR5ZjTBiyxkf/Ia+nGX+qqMEhjgNuPqk4LLF3+IFawc=
Subject key identifier:   C6:76:90:C9:B2:8A:0E:9D:61:BC:A2:B5:69:CE:46:36:93:26:50:16
Certificate issuer:       /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
Certificate serial:       018210E13192BBB782D9662EB963EF0A386A
Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/xnaQybKKDp1hvKK1ac5GNpMmUBY.roa
Signing time:             Mon 18 Jul 2022 10:36:09 +0000
ROA not before:           Mon 18 Jul 2022 10:36:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39545
IP address blocks:        2a00:f18::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:10:e1:31:92:bb:b7:82:d9:66:2e:b9:63:ef:0a:38:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32
        Validity
            Not Before: Jul 18 10:36:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c67690c9b28a0e9d61bca2b569ce463693265016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:21:43:35:ec:2c:71:11:4e:be:af:8d:c1:b7:
                    73:75:79:77:6a:7a:32:fa:95:62:c3:55:ee:0c:2e:
                    cd:fe:07:c0:ff:eb:5c:1b:38:91:ff:bf:79:83:dd:
                    c5:c7:33:93:ae:18:b3:aa:02:43:82:8f:76:cf:aa:
                    b0:e6:4e:c6:9f:ed:06:cd:d5:cc:30:b7:bc:81:6b:
                    cc:8e:26:85:d9:7c:9f:b4:b5:79:97:8b:c7:98:96:
                    ef:23:27:38:d8:ce:3c:5f:cd:ac:53:3d:dc:4c:c1:
                    01:0a:66:a0:62:6d:0c:67:87:ec:2f:5f:13:85:33:
                    8d:54:99:36:e2:b8:f1:fd:c3:43:a2:3e:36:03:9c:
                    dd:85:9c:5e:63:b1:99:9a:f6:a6:e9:3d:ee:95:b9:
                    a3:de:24:84:c9:83:d9:2c:da:3a:6f:7e:3d:cf:67:
                    a9:bb:11:81:47:da:c9:e3:99:8f:db:22:46:c8:fa:
                    c8:a0:ff:ac:84:d5:34:65:9d:85:cd:a5:70:52:a3:
                    f5:56:04:b1:92:12:4c:03:8b:0f:5c:2b:b7:e3:d5:
                    aa:e3:33:76:2f:9f:a5:c8:74:4e:f3:d7:12:15:3b:
                    7c:59:6e:16:87:b6:e2:5e:53:c8:96:db:a6:35:5f:
                    4d:15:cc:07:e1:8e:0b:c2:a4:69:0f:cc:eb:a2:d6:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:76:90:C9:B2:8A:0E:9D:61:BC:A2:B5:69:CE:46:36:93:26:50:16
            X509v3 Authority Key Identifier:
                keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/xnaQybKKDp1hvKK1ac5GNpMmUBY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:f18::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:40:48:6b:c0:40:c9:3b:de:32:79:6d:2f:43:c9:91:80:1c:
         51:78:67:cb:dd:f8:39:68:10:1b:fb:4e:ba:2c:d4:d0:af:e6:
         35:eb:db:e9:7d:9b:96:51:9a:09:f9:21:5e:0b:c9:64:99:c3:
         66:60:e6:93:ab:ac:a3:a3:58:e7:fd:1a:d5:8c:c2:19:01:3a:
         35:b8:f5:14:bd:dc:99:40:07:40:a4:b1:3b:d2:d3:ae:87:02:
         62:7e:cb:2b:de:51:fa:22:62:e5:b4:08:66:ef:8b:ff:0d:f8:
         ba:de:83:05:6e:e9:9e:40:75:de:3c:31:83:6b:c8:7c:1f:d2:
         93:c1:c7:99:cb:9c:84:2f:a5:b5:27:b7:8b:c2:75:2a:a8:58:
         c6:db:04:7d:3a:d3:f6:e9:eb:f7:19:3f:9a:0a:f7:72:91:9f:
         51:47:bf:4b:ba:79:f9:94:a4:32:44:ec:2b:0a:41:4a:1b:4e:
         34:2e:e5:4e:c5:8b:c6:8f:93:8c:dc:d3:6a:3f:ae:57:82:2c:
         58:d0:76:a1:fe:c4:bd:e2:57:02:26:b5:75:d6:9c:a7:7d:ae:
         dc:bc:e6:c2:d0:ad:aa:c8:6c:18:48:35:1d:1f:87:d3:88:b7:
         8e:8c:f9:7b:14:a8:7c:bb:99:62:73:55:0c:ae:56:4e:f2:18:
         68:94:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----