Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/f_zZdbsCbZlrKIOUxp1XxXu6T34.roa
File:                     f_zZdbsCbZlrKIOUxp1XxXu6T34.roa (raw, json)
Hash identifier:          9k8wxrZJkK+Q2yiHG/IM9+bIiEuNlXAw8pnM/4WeSFc=
Subject key identifier:   7F:FC:D9:75:BB:02:6D:99:6B:28:83:94:C6:9D:57:C5:7B:BA:4F:7E
Certificate issuer:       /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Certificate serial:       018409465C68FF3022D5B4C7B6C6D84C36F2
Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/f_zZdbsCbZlrKIOUxp1XxXu6T34.roa
Signing time:             Mon 24 Oct 2022 09:15:16 +0000
ROA not before:           Mon 24 Oct 2022 09:15:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202619
IP address blocks:        2001:67c:26f8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:09:46:5c:68:ff:30:22:d5:b4:c7:b6:c6:d8:4c:36:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
        Validity
            Not Before: Oct 24 09:15:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ffcd975bb026d996b288394c69d57c57bba4f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:f0:9a:79:b7:51:fc:bd:db:1b:97:44:b1:
                    81:ae:e7:ad:6d:12:39:78:45:45:59:f7:49:bc:32:
                    3c:70:70:00:0d:55:e3:77:45:10:64:9b:34:e6:33:
                    b1:b8:e2:ea:55:a8:62:5a:1d:9c:57:39:e1:23:1a:
                    68:c8:c5:a0:b9:97:d6:b1:f6:0a:d9:df:05:75:f9:
                    6e:59:e9:bd:58:f1:74:6b:cd:bf:9c:d4:bc:3a:3d:
                    c1:35:01:55:2d:a2:05:d3:eb:cf:e4:57:56:05:18:
                    2b:8f:93:9e:d5:dd:c6:da:b4:44:f4:a9:53:83:1f:
                    9e:ec:43:cd:2e:fb:e9:0a:8a:5d:69:f8:48:c7:21:
                    cb:2d:e2:4b:fc:d6:01:16:a4:de:92:3a:aa:f9:df:
                    73:5e:a7:28:9b:01:d1:1a:b4:13:ab:9d:59:13:21:
                    5f:d3:9a:8b:73:d1:b5:b6:57:e4:a3:34:59:70:e3:
                    0f:cb:53:ba:4f:18:df:04:1d:bc:ad:7e:e7:68:c1:
                    e0:26:b1:7b:bd:71:a1:f3:63:d2:9b:74:28:2c:a7:
                    29:76:34:28:1e:73:99:1d:04:af:8b:c7:3a:05:80:
                    4a:7a:91:ad:b1:28:4e:9f:50:92:fa:65:d4:40:81:
                    43:77:26:1b:f8:4b:7e:4d:d0:37:ad:b8:ad:42:27:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FC:D9:75:BB:02:6D:99:6B:28:83:94:C6:9D:57:C5:7B:BA:4F:7E
            X509v3 Authority Key Identifier:
                keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/f_zZdbsCbZlrKIOUxp1XxXu6T34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:26f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:0c:77:7f:41:6c:66:f4:bd:8f:19:1a:0f:67:30:ec:2d:10:
         ce:a2:8b:18:90:6b:9b:be:b3:a2:3a:31:c1:6f:63:fb:8c:f4:
         15:f6:64:09:41:70:4d:d2:04:55:fe:4f:b9:58:22:ea:a3:6c:
         39:71:4a:84:41:e6:c2:32:6b:76:59:e6:8c:00:60:74:3a:49:
         da:e5:aa:ba:53:d1:27:95:8f:89:01:a7:8f:fd:cb:73:9d:b1:
         1c:80:d8:7a:af:91:81:82:8e:0c:73:c8:35:6b:d8:d9:7d:02:
         86:41:a6:04:70:0b:d8:42:10:da:44:34:e0:1d:5e:12:50:eb:
         df:11:ad:0a:71:4a:83:1c:1c:82:f1:61:92:bc:e7:2f:6a:1d:
         63:c8:68:3e:d7:8e:48:d1:d6:43:57:88:35:bc:e8:66:35:38:
         b9:da:9e:b3:93:ed:c0:c0:eb:3f:b5:d9:0a:0e:0a:85:bf:fb:
         59:58:8c:f5:35:48:e3:b9:19:54:52:ff:3d:de:9f:8a:f5:9f:
         93:e0:71:ce:9e:a9:2c:b9:f5:bd:f7:dc:1a:af:44:9d:21:01:
         f6:d5:50:52:dc:71:4d:2e:f6:db:fe:2b:25:73:68:63:43:da:
         bd:6f:a4:07:ac:eb:9b:f4:ee:0f:7d:67:14:96:fc:34:cc:94:
         df:f4:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----