Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/wwQjl2hOxL0sOUZeQFoasV4jhZg.roa
File:                     wwQjl2hOxL0sOUZeQFoasV4jhZg.roa (raw, json)
Hash identifier:          UjAzcSYsKE/jjDHzzDNmnYfggf4RYTslyW3m5vuH+e8=
Subject key identifier:   C3:04:23:97:68:4E:C4:BD:2C:39:46:5E:40:5A:1A:B1:5E:23:85:98
Certificate issuer:       /CN=1637a493bc2025bf080c0b5e242e61e417670e86
Certificate serial:       018486C064F5DEE317820167E86CE02E7047
Authority key identifier: 16:37:A4:93:BC:20:25:BF:08:0C:0B:5E:24:2E:61:E4:17:67:0E:86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fjekk7wgJb8IDAteJC5h5BdnDoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/wwQjl2hOxL0sOUZeQFoasV4jhZg.roa
Signing time:             Thu 17 Nov 2022 18:01:06 +0000
ROA not before:           Thu 17 Nov 2022 18:01:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     22773
IP address blocks:        2a12:8d80::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:86:c0:64:f5:de:e3:17:82:01:67:e8:6c:e0:2e:70:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1637a493bc2025bf080c0b5e242e61e417670e86
        Validity
            Not Before: Nov 17 18:01:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c3042397684ec4bd2c39465e405a1ab15e238598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:1e:8a:d7:1b:fd:a8:41:39:eb:50:e2:86:
                    29:cd:13:7d:bf:c8:39:54:16:52:63:06:af:9d:8c:
                    bd:3e:99:74:81:19:c6:6c:6d:c4:a7:df:49:99:49:
                    68:35:3f:41:30:0c:8a:5c:ea:18:9d:6a:c2:33:d7:
                    6b:cf:ce:23:c4:d7:c0:c1:a2:06:ef:23:6c:e4:21:
                    da:a4:31:80:2d:6f:67:f1:35:df:e5:10:ff:4b:77:
                    9f:9e:96:6c:47:68:1a:22:95:bf:4e:34:d4:3d:98:
                    26:42:4e:ce:e0:c6:09:6f:66:2a:d7:0f:3e:e9:f2:
                    bd:58:82:f0:2d:e5:8d:e1:5a:21:eb:76:b9:ed:b8:
                    cf:62:cd:0c:ad:a6:c6:12:7d:d7:49:ef:34:ea:a1:
                    ff:07:a3:09:c1:f5:3d:eb:db:cc:96:69:2b:2c:ac:
                    ef:90:df:c8:59:5a:e0:da:67:fb:42:88:aa:aa:86:
                    ed:39:a5:6a:66:b8:30:b6:61:ce:63:19:52:b5:32:
                    d0:38:3f:a0:cb:02:cc:69:61:d4:45:65:c2:50:ec:
                    44:8e:4c:6b:9e:66:4f:b8:4a:d2:16:53:bd:eb:0c:
                    ce:ee:db:45:e7:d4:1a:e4:12:00:17:71:49:0b:25:
                    57:e1:34:c8:e1:0a:29:9d:23:83:18:88:82:86:45:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:04:23:97:68:4E:C4:BD:2C:39:46:5E:40:5A:1A:B1:5E:23:85:98
            X509v3 Authority Key Identifier:
                keyid:16:37:A4:93:BC:20:25:BF:08:0C:0B:5E:24:2E:61:E4:17:67:0E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjekk7wgJb8IDAteJC5h5BdnDoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/wwQjl2hOxL0sOUZeQFoasV4jhZg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/Fjekk7wgJb8IDAteJC5h5BdnDoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:8d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:02:78:6c:4e:f5:06:f6:95:68:7c:0b:8c:71:49:eb:1f:
         fe:5d:05:97:f6:4b:66:a3:90:33:9d:62:67:67:54:62:e8:5f:
         e1:56:64:68:a7:59:f4:19:e5:3f:8b:52:35:bf:5b:62:c7:b9:
         0b:3d:ad:be:53:99:18:5f:7d:41:15:73:b0:8a:b1:b7:01:af:
         23:dc:00:29:cb:26:ed:de:8f:f7:89:58:4c:10:0f:41:c6:d9:
         58:5e:d3:07:8f:45:40:0b:20:71:ec:82:2f:7b:72:a6:9d:06:
         a3:50:e9:fe:0d:d4:3e:68:88:a4:38:a1:fc:88:d5:4d:30:e8:
         d1:4f:52:60:bc:b8:ce:27:53:5f:22:59:f7:a9:24:30:30:46:
         20:07:c4:08:dd:fa:ef:e4:3b:b9:ad:6d:c0:05:7f:a6:44:d2:
         c1:26:d4:3f:29:d2:9b:67:25:7c:26:4b:c5:f0:9a:63:37:94:
         93:8c:0e:cd:2d:ed:24:79:ba:ce:9a:18:d3:f5:8e:d9:fd:82:
         77:a3:ce:f0:0b:2d:7d:43:b3:91:60:86:aa:ef:c8:c5:76:4a:
         0d:31:13:09:b5:13:eb:6b:a4:99:e1:40:f2:22:1b:76:e8:04:
         0f:a0:fb:70:b0:ab:ac:e2:6e:57:1a:89:b5:c6:a4:42:d2:9a:
         c5:9a:6c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----