Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/VW1M_UlwFYnUflP1RjNJnLMVmbU.roa
File:                     VW1M_UlwFYnUflP1RjNJnLMVmbU.roa (raw, json)
Hash identifier:          bZH5wiIXIcCe5wSYMSft9mpqfVroz1BAOhFd4lvJ2PA=
Subject key identifier:   55:6D:4C:FD:49:70:15:89:D4:7E:53:F5:46:33:49:9C:B3:15:99:B5
Certificate issuer:       /CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
Certificate serial:       0622FCCC
Authority key identifier: D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/VW1M_UlwFYnUflP1RjNJnLMVmbU.roa
Signing time:             Sat 01 Jan 2022 03:54:55 +0000
ROA not before:           Sat 01 Jan 2022 03:54:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200303
IP address blocks:        2001:678:c20::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102956236 (0x622fccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1a1244a3c57b9febb68d684a832b0671e3e4c84
        Validity
            Not Before: Jan  1 03:54:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=556d4cfd49701589d47e53f54633499cb31599b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:50:5d:b0:06:46:5b:7f:e6:45:6a:73:76:
                    f7:da:7a:b8:49:1d:66:51:7d:c9:a1:bb:49:5c:c6:
                    fc:25:fa:f3:6b:98:26:b0:74:6d:a4:88:a5:44:34:
                    d2:80:d2:c9:26:ce:d0:88:05:c2:47:79:79:3b:3b:
                    de:25:a5:16:fb:55:0d:6c:40:26:af:f1:86:b3:85:
                    59:44:e1:eb:24:51:8d:bc:37:2c:65:08:1f:9a:8f:
                    0c:c8:aa:cf:8d:df:76:08:5c:3c:d7:dc:59:27:66:
                    88:f1:e8:39:1d:75:c4:79:1d:61:73:c1:8c:65:3a:
                    b1:45:2f:c2:33:bd:f9:7f:17:d2:42:93:9d:1b:c9:
                    1c:f9:2c:2d:c0:97:e3:3f:e0:33:94:c8:fa:89:b8:
                    ef:de:02:2b:f8:cc:a6:2f:b4:9c:79:b7:9a:7c:62:
                    bc:02:fd:0d:a5:37:5d:47:76:88:e0:05:9e:54:a0:
                    0e:bc:21:98:1f:77:4f:32:2c:0a:20:85:47:93:92:
                    cf:ce:2c:f3:e9:bc:b7:95:06:76:a2:a1:e0:40:61:
                    b7:0d:ec:c8:55:c0:79:1b:66:d2:4c:42:3b:fc:23:
                    5e:20:c8:68:29:30:c9:11:bd:a8:0a:45:99:9d:81:
                    db:81:06:a1:4f:03:93:9f:8a:7b:7a:3f:85:c0:af:
                    7f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6D:4C:FD:49:70:15:89:D4:7E:53:F5:46:33:49:9C:B3:15:99:B5
            X509v3 Authority Key Identifier:
                keyid:D1:A1:24:4A:3C:57:B9:FE:BB:68:D6:84:A8:32:B0:67:1E:3E:4C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aEkSjxXuf67aNaEqDKwZx4-TIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/VW1M_UlwFYnUflP1RjNJnLMVmbU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/16682a-afd7-47be-8f90-b8b4ca902e4c/1/0aEkSjxXuf67aNaEqDKwZx4-TIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:c20::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:77:da:81:55:5a:48:db:bf:87:48:77:43:b8:a3:a5:98:03:
         f7:02:54:8e:1b:95:ba:08:b7:25:e7:5c:7c:bd:53:39:2e:d7:
         92:fc:70:68:fa:c1:2a:a9:93:19:31:ac:c1:00:6c:04:76:02:
         60:75:33:a1:5e:c2:90:15:37:ee:4b:7a:6f:8b:6d:4f:cb:32:
         97:b5:00:60:93:35:f8:3a:d4:ac:b6:71:e8:2a:1e:de:98:4a:
         1c:e6:38:5d:a3:56:9a:82:c4:7d:12:97:20:6d:99:f6:92:d2:
         14:60:a4:0f:81:94:1d:a6:b6:87:42:8a:48:b9:77:dc:01:1b:
         5e:9c:9f:ba:e1:2b:e6:b9:77:43:ec:95:71:9c:52:ce:5c:8a:
         03:94:78:cf:a6:06:8c:a3:b1:69:6a:9c:de:ad:26:40:b6:b8:
         1b:ae:04:0d:1e:05:d0:fa:f3:23:6d:29:63:dc:65:9d:23:d4:
         38:5e:a8:4d:62:3f:97:0f:ba:ff:f4:07:67:61:56:37:d8:a9:
         d2:a4:91:88:12:e6:b8:67:bc:fa:a8:ce:80:2a:cb:62:21:d4:
         a1:da:79:83:16:c0:ed:1b:b8:67:88:f2:04:d0:0a:19:d4:b0:
         74:74:c7:69:97:0f:fd:63:cc:33:d1:4a:b0:c9:44:26:96:86:
         69:4c:9e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----