Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/A6K3ehrGXYC8F_nuuW65GxzoPJo.roa
File:                     A6K3ehrGXYC8F_nuuW65GxzoPJo.roa (raw, json)
Hash identifier:          kD125uwNhzAy7ltd82130dlC7y4yHyCuRrbMMnWUM34=
Subject key identifier:   03:A2:B7:7A:1A:C6:5D:80:BC:17:F9:EE:B9:6E:B9:1B:1C:E8:3C:9A
Certificate issuer:       /CN=b869cc42415eac65c4baa1a3926302e88b5e1629
Certificate serial:       061E2B0D
Authority key identifier: B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/A6K3ehrGXYC8F_nuuW65GxzoPJo.roa
Signing time:             Sat 01 Jan 2022 10:05:37 +0000
ROA not before:           Sat 01 Jan 2022 10:05:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13126
IP address blocks:        62.145.64.0/18 maxlen: 32
                          2a0b:7f80::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102640397 (0x61e2b0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b869cc42415eac65c4baa1a3926302e88b5e1629
        Validity
            Not Before: Jan  1 10:05:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=03a2b77a1ac65d80bc17f9eeb96eb91b1ce83c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:27:aa:13:1e:9b:a6:68:f6:b4:8d:45:47:8c:
                    a0:7d:b2:d3:07:ba:8a:14:83:4e:0e:cd:35:41:ec:
                    f9:07:31:f2:ea:4e:bf:ad:6f:c0:f4:8a:d7:ed:67:
                    ad:ef:15:f2:13:73:78:e2:d1:a8:7c:5c:55:0a:a3:
                    6a:2d:9a:b1:73:71:9c:15:05:a5:56:e4:69:07:62:
                    cb:4e:3d:5a:ac:a5:a9:06:6d:0e:d8:a1:38:ec:0c:
                    8f:c4:7c:d2:2e:9f:77:5a:c9:65:ef:83:5b:58:4a:
                    b8:d3:26:c2:13:22:e2:16:21:0e:21:0f:81:42:31:
                    0f:d0:5b:3e:39:05:8a:c5:98:a0:ff:b6:13:6a:31:
                    62:5b:5f:dc:bf:17:70:69:26:ff:7e:6b:31:dd:89:
                    1a:3a:af:da:05:7f:a6:ec:d9:87:4e:05:7a:56:b3:
                    8b:ed:82:ab:e5:bd:a1:92:c6:6a:16:ad:09:7b:ad:
                    8a:b3:81:88:ee:9b:49:21:45:84:78:6c:2f:99:e2:
                    3f:b6:60:f2:ad:41:32:2d:df:62:d5:4e:ef:e8:5d:
                    97:18:d6:29:cc:42:f3:9c:67:95:03:c8:20:42:d0:
                    26:ba:ff:eb:28:6e:1d:7b:c5:04:cc:71:72:3f:ef:
                    0e:4b:bd:c9:8d:a0:fa:f0:10:22:26:f6:d1:6d:96:
                    f1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A2:B7:7A:1A:C6:5D:80:BC:17:F9:EE:B9:6E:B9:1B:1C:E8:3C:9A
            X509v3 Authority Key Identifier:
                keyid:B8:69:CC:42:41:5E:AC:65:C4:BA:A1:A3:92:63:02:E8:8B:5E:16:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnMQkFerGXEuqGjkmMC6IteFik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/A6K3ehrGXYC8F_nuuW65GxzoPJo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/732b26-3193-44a7-938e-af68467c3727/1/uGnMQkFerGXEuqGjkmMC6IteFik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.145.64.0/18
                IPv6:
                  2a0b:7f80::/29

    Signature Algorithm: sha256WithRSAEncryption
         76:f6:cf:d8:1d:c7:66:c6:59:79:8e:99:04:e5:34:6d:1a:9a:
         d7:77:ca:50:a4:6d:84:f3:d9:37:3c:48:6a:23:d0:bb:e4:41:
         10:ab:1d:2e:ae:50:2c:f6:91:f9:5e:33:64:99:82:bc:79:54:
         e5:9a:c7:de:4e:d3:c6:23:53:7d:82:d8:74:e6:32:e9:0e:3b:
         c7:ca:fc:09:d1:cd:8f:6b:82:39:6c:d7:c8:05:76:46:bd:1d:
         e9:3f:f4:17:de:52:38:45:a6:54:ca:e2:3c:2e:c1:91:b2:b3:
         37:63:2e:83:2f:5a:56:ca:4f:dc:38:dc:2f:0e:13:14:dc:eb:
         c7:1b:3f:88:68:1f:a4:7b:78:dd:09:09:d8:59:01:66:69:6a:
         97:ef:0b:2d:7f:d1:bf:54:ed:6c:d8:93:5d:1c:2a:e0:1e:64:
         fc:2a:fc:d9:0b:c2:39:21:b2:64:eb:90:af:c8:8a:7e:b4:28:
         13:79:87:0f:30:62:66:0b:a4:ba:dd:4c:2b:9f:0b:ce:7a:a9:
         a9:a2:3d:3a:42:7f:8b:c3:e3:c0:98:15:41:70:fc:c4:7a:d0:
         70:49:f3:d8:61:3b:f5:8e:c2:7a:9d:b8:18:e4:58:20:a8:e7:
         16:76:6e:b3:ef:65:b8:56:25:85:d5:08:31:f9:bf:59:aa:28:
         be:7c:a5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----