Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/vA4RcD3rZHHqbZWA5zKrCnLL7Xs.roa
File:                     vA4RcD3rZHHqbZWA5zKrCnLL7Xs.roa (raw, json)
Hash identifier:          BMCq1E+Y26DhsqoJa0iLHbvr0zbFdFS+czmYg6NQODw=
Subject key identifier:   BC:0E:11:70:3D:EB:64:71:EA:6D:95:80:E7:32:AB:0A:72:CB:ED:7B
Certificate issuer:       /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial:       0182A2D18156BD09EA1D1513C03835A284EF
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/vA4RcD3rZHHqbZWA5zKrCnLL7Xs.roa
Signing time:             Mon 15 Aug 2022 18:43:35 +0000
ROA not before:           Mon 15 Aug 2022 18:43:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57271
IP address blocks:        2a01:48a0:4001::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a2:d1:81:56:bd:09:ea:1d:15:13:c0:38:35:a2:84:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
        Validity
            Not Before: Aug 15 18:43:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bc0e11703deb6471ea6d9580e732ab0a72cbed7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:b4:40:d8:64:8b:81:03:03:0b:44:2e:dd:
                    5d:54:46:3b:22:93:3a:5c:0d:58:92:a4:c1:dc:82:
                    0d:7f:c8:02:89:f2:32:dc:6f:35:e2:93:76:75:80:
                    16:e0:76:25:a1:83:b5:c4:c6:19:5b:0f:ea:3c:fb:
                    ac:d2:28:eb:2f:e1:b0:41:f4:02:3c:6b:64:51:7b:
                    64:e3:cc:2d:3c:f4:bc:23:27:3d:6d:d2:f7:a4:37:
                    86:4a:4a:a3:2c:f9:c5:e5:34:cf:bc:de:58:04:7d:
                    00:8e:c6:4e:a3:13:61:9a:b7:34:eb:fa:bd:f7:4a:
                    c4:4e:ba:79:42:bc:c0:de:9e:4f:69:2e:9c:ab:5d:
                    25:36:1f:51:c4:64:6a:e8:bf:81:f0:79:4d:16:45:
                    24:54:41:cc:b5:4a:26:a9:71:55:a7:4d:2c:d4:a3:
                    3e:fe:ac:c7:c4:db:fb:74:58:fa:ce:0e:29:b9:13:
                    0d:0c:a0:a1:2a:a7:b9:a9:6c:02:0d:1c:54:54:b7:
                    b8:4f:c8:ab:53:43:33:c4:dc:08:b1:ee:7c:03:82:
                    f3:2f:6a:c9:16:ea:d4:19:dc:32:74:3b:a0:fc:43:
                    8e:c7:27:d7:60:9d:e4:5e:9d:f4:a9:ca:6e:bb:a8:
                    fb:f2:ea:00:35:20:b8:60:e5:b5:54:7c:3c:0c:ee:
                    36:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0E:11:70:3D:EB:64:71:EA:6D:95:80:E7:32:AB:0A:72:CB:ED:7B
            X509v3 Authority Key Identifier:
                keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/vA4RcD3rZHHqbZWA5zKrCnLL7Xs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:48a0:4001::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:cc:ed:22:f6:ac:dc:3d:2e:e0:16:4c:de:3a:ef:14:2e:4f:
         0f:4f:8d:a0:84:de:03:24:5b:48:29:ea:59:39:cf:14:c2:ea:
         e3:43:7b:0a:1b:c0:84:9d:71:1f:46:d4:a2:e8:b8:4e:f5:05:
         06:e2:ee:8c:b0:12:fc:a6:47:1c:b8:57:7d:b0:9e:bb:44:33:
         db:86:e1:a8:57:7c:52:1b:24:2c:1c:da:3b:0a:90:5e:d3:ad:
         cd:8d:38:d3:80:57:ae:b4:05:d2:97:1e:c6:35:60:9e:db:6c:
         e3:7d:80:21:74:c4:07:9d:9d:09:d9:92:55:cb:f2:26:84:33:
         c7:c1:44:9a:1f:1e:bb:ee:28:3b:42:91:b5:1f:d4:fc:43:e0:
         19:64:f8:49:5f:d3:17:27:0c:9b:0d:e8:4b:c2:5f:41:dc:1e:
         0f:97:e2:32:0c:9f:0a:71:d3:47:9a:c8:bb:86:66:dc:27:cb:
         01:7b:c3:f9:3d:fc:83:8a:a2:3f:69:b3:67:8e:f8:76:5b:3e:
         c9:c6:f0:f6:6e:7b:a9:2b:a0:49:4b:68:18:a1:4a:77:0f:71:
         73:f9:9a:64:ef:f6:6b:f5:0b:20:c5:7e:e9:a6:7e:44:92:a3:
         a4:a8:d1:9d:08:16:9b:88:3e:79:a5:f7:45:5d:64:08:54:3c:
         55:14:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----