Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/6FO3WoBrJXG2CZD-XVXCroeBbbA.roa
File:                     6FO3WoBrJXG2CZD-XVXCroeBbbA.roa (raw, json)
Hash identifier:          qTTXnQH8fNHkvDlR3YTngSI5AWWBe6xXfBwIGyXOt+c=
Subject key identifier:   E8:53:B7:5A:80:6B:25:71:B6:09:90:FE:5D:55:C2:AE:87:81:6D:B0
Certificate issuer:       /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial:       0CE08816
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/6FO3WoBrJXG2CZD-XVXCroeBbbA.roa
Signing time:             Sat 01 Jan 2022 08:03:56 +0000
ROA not before:           Sat 01 Jan 2022 08:03:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44973
IP address blocks:        2001:678:594::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216041494 (0xce08816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
        Validity
            Not Before: Jan  1 08:03:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e853b75a806b2571b60990fe5d55c2ae87816db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:cb:f6:13:a8:48:3e:24:f6:53:12:5d:0e:
                    07:49:b2:64:ec:10:cc:61:b7:d5:7b:15:19:41:ae:
                    0f:80:54:be:f9:38:17:60:77:21:a4:f0:25:62:82:
                    6e:f9:96:84:b2:3b:48:b3:f3:9a:b2:16:08:40:28:
                    40:d2:0e:b3:df:16:48:3b:11:fb:18:86:40:48:b6:
                    d9:ce:9d:fd:8e:37:11:d9:3e:29:e0:15:3a:4c:40:
                    73:e2:27:41:59:20:98:7b:08:22:8b:0d:66:0c:ec:
                    a7:d1:8e:dd:7f:85:bf:07:f8:a1:70:61:d9:19:93:
                    98:33:b1:33:45:68:a0:f2:77:ec:ba:ac:1f:a9:62:
                    9f:a1:8f:43:b6:2e:22:b5:a2:96:99:ce:63:8f:f1:
                    bf:f3:98:6c:ca:5f:a7:1f:48:ba:b7:b0:2a:ca:3f:
                    cc:47:b4:eb:86:bd:b0:3a:85:52:33:b9:00:60:49:
                    a1:ac:a0:3d:ca:97:63:75:d4:ad:de:65:c7:2e:fd:
                    8f:60:1c:6f:ca:ef:bd:b5:6b:c8:8e:62:49:93:b1:
                    a9:b2:f6:fe:24:5a:17:9a:5d:6e:27:f8:a9:38:c4:
                    8e:b2:1e:52:9b:80:74:5f:20:1b:8d:65:12:b2:c8:
                    a3:8f:81:46:89:fe:7a:30:6c:58:44:0c:65:dc:97:
                    1f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:53:B7:5A:80:6B:25:71:B6:09:90:FE:5D:55:C2:AE:87:81:6D:B0
            X509v3 Authority Key Identifier:
                keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/6FO3WoBrJXG2CZD-XVXCroeBbbA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:594::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:a0:cf:28:99:9f:a1:f6:6f:d9:ca:ef:23:d3:3c:57:ae:b6:
         9b:9b:24:35:9d:00:ea:70:0c:60:91:38:93:1f:79:45:6d:a5:
         70:f5:4f:ef:11:38:11:41:5d:27:4f:48:6d:03:3d:12:92:8c:
         9f:92:e3:f0:c0:f5:c8:a0:ad:af:1e:1c:db:40:98:90:6a:47:
         0b:0d:a3:9c:1c:44:d9:55:79:29:c4:6e:88:f6:ed:e2:1b:10:
         86:26:53:c8:3d:45:e5:30:96:be:f9:ec:d8:5b:55:2f:9d:b0:
         db:0d:54:3e:d1:ff:85:4f:6c:a5:f2:2e:d4:6a:82:14:0e:ef:
         9f:0a:fa:01:14:41:25:5b:28:99:a5:4f:0f:7b:cd:fd:5f:ed:
         d8:51:54:18:61:8b:c4:10:58:37:21:06:b1:c9:29:b3:ae:43:
         b1:ef:19:b8:b8:82:d1:03:56:53:33:a2:7f:4c:47:37:b9:93:
         94:99:8b:8f:75:38:35:0a:9d:2f:a2:bc:4b:8b:bb:a8:f9:24:
         31:14:ee:cd:c1:cf:87:07:70:d5:d4:ac:ff:69:a9:b4:84:18:
         41:c8:5b:35:4c:94:ee:be:28:38:e7:d9:ee:a5:96:34:90:8c:
         d4:37:9f:c8:92:1e:2c:63:4f:34:52:13:8b:da:c4:29:a1:65:
         2a:b4:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----