Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lSv4FkslVPNH9GvCao_5RtWm6VQ.roa
File:                     lSv4FkslVPNH9GvCao_5RtWm6VQ.roa (raw, json)
Hash identifier:          nR7QhQ8AmX4G3tqtaWzudjKT5QHVvHdyeDyxTQ3rzSU=
Subject key identifier:   95:2B:F8:16:4B:25:54:F3:47:F4:6B:C2:6A:8F:F9:46:D5:A6:E9:54
Certificate issuer:       /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial:       0A2530BB
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lSv4FkslVPNH9GvCao_5RtWm6VQ.roa
Signing time:             Fri 18 Feb 2022 08:37:42 +0000
ROA not before:           Fri 18 Feb 2022 08:37:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209439
IP address blocks:        2a00:8b80::/32 maxlen: 48
                          2a09:3dc0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170209467 (0xa2530bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
        Validity
            Not Before: Feb 18 08:37:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=952bf8164b2554f347f46bc26a8ff946d5a6e954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:b2:68:c1:66:7d:68:25:f0:0b:dc:b4:5c:
                    18:73:68:49:10:40:d4:4c:28:e3:cc:9a:30:c0:3e:
                    fe:a9:06:3f:2b:7b:35:78:24:cc:0d:a4:94:9a:d7:
                    c6:b7:49:86:cc:72:65:ce:0e:ec:8b:83:f9:ad:43:
                    aa:69:1c:03:b8:f0:61:8e:32:f2:4e:c2:02:d4:9c:
                    b7:9f:2b:e1:34:ac:12:84:c6:ef:9a:a8:33:b6:04:
                    af:3e:d7:ca:04:54:79:0d:c3:cc:10:19:78:c5:05:
                    b5:e7:cc:3a:f1:75:cb:bc:56:4f:a2:91:49:af:87:
                    9e:8c:b4:1c:a3:a2:9f:91:0e:d8:6f:d0:3d:bb:c2:
                    38:ab:55:99:36:87:90:3e:1c:d1:f5:37:95:82:44:
                    63:d1:fa:0a:64:51:e6:9e:2d:53:ac:6f:66:7e:9e:
                    0d:26:cb:ec:14:a1:58:79:e4:93:18:de:4c:e3:d4:
                    fa:e2:88:0c:89:68:2f:8f:86:4d:2d:4a:9a:f6:24:
                    d9:ee:41:0b:61:66:6c:97:3d:38:c9:0a:67:cf:79:
                    e1:0c:c8:ff:6b:2f:3d:18:0c:7d:d6:25:55:0a:5d:
                    d9:4c:70:bf:5b:4b:df:14:96:b6:01:d9:77:70:ec:
                    83:df:32:4b:ad:16:70:97:a1:c9:58:bf:5c:65:fd:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2B:F8:16:4B:25:54:F3:47:F4:6B:C2:6A:8F:F9:46:D5:A6:E9:54
            X509v3 Authority Key Identifier:
                keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lSv4FkslVPNH9GvCao_5RtWm6VQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:8b80::/32
                  2a09:3dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:15:d5:56:f7:fb:30:3d:1e:f2:f7:44:a9:0d:7b:ec:b7:b8:
         13:7e:e7:26:5e:93:03:4d:3b:32:87:8d:f9:f6:16:5d:12:a7:
         86:36:6a:69:67:aa:a6:c7:b5:f4:52:58:45:01:b6:12:5e:db:
         35:35:73:c5:18:70:4f:8e:c6:ae:b7:bd:d4:d4:2c:dc:5a:25:
         6a:a5:37:a8:c3:60:ca:7f:32:13:1c:1c:97:c3:80:65:69:86:
         82:03:a2:e0:b5:5b:7c:e9:a9:c0:a0:a3:4c:92:67:30:b1:f3:
         2b:10:6e:c7:33:94:79:76:68:88:8b:a8:bd:18:27:6d:51:59:
         05:98:b1:b5:64:2a:61:e5:75:8f:13:1a:dc:16:c3:20:dc:1d:
         4d:9a:9f:1d:ef:36:a6:28:3e:47:09:89:c5:2b:51:46:28:ed:
         69:e0:4f:e0:ca:c9:71:ad:ab:37:4f:07:93:5d:27:a3:56:60:
         e9:4a:44:2f:b3:e8:47:c1:10:06:e6:fc:5c:6c:9a:65:71:21:
         f2:06:74:1c:41:9f:5f:98:76:3a:04:70:24:7d:c2:ef:dd:f9:
         e1:87:80:5c:6a:d0:90:0a:5b:7d:1e:29:b1:8c:a6:12:79:b7:
         0a:e2:9e:83:b0:28:df:47:07:c6:e3:cf:4d:6c:f0:d5:1b:fc:
         26:3e:79:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----