Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/EUjiGd4WqNMf-InZwF2P2bdJKW0.roa
File:                     EUjiGd4WqNMf-InZwF2P2bdJKW0.roa (raw, json)
Hash identifier:          8GensFOP0WG3S2anExiYHpIRbGbTfFuWD7505iN64lk=
Subject key identifier:   11:48:E2:19:DE:16:A8:D3:1F:F8:89:D9:C0:5D:8F:D9:B7:49:29:6D
Certificate issuer:       /CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
Certificate serial:       06C5835E
Authority key identifier: 81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/EUjiGd4WqNMf-InZwF2P2bdJKW0.roa
Signing time:             Sat 01 Jan 2022 13:58:50 +0000
ROA not before:           Sat 01 Jan 2022 13:58:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34601
IP address blocks:        2001:678:b94::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113607518 (0x6c5835e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c1aed74aad06b1b85c5ba6779c161f4a52b3c4
        Validity
            Not Before: Jan  1 13:58:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1148e219de16a8d31ff889d9c05d8fd9b749296d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:c5:c3:c2:5f:07:ca:61:ce:32:74:ef:a4:
                    7d:44:e2:98:b1:9b:01:a2:e2:41:e2:93:66:f4:89:
                    34:78:9d:77:15:58:4e:68:95:3d:0c:bf:5a:be:92:
                    68:2c:2e:aa:b2:06:70:9e:90:82:1d:7c:92:da:2f:
                    fd:7b:25:cb:e9:16:1b:98:1e:1d:bb:c0:2a:ce:0c:
                    75:63:22:be:e3:75:1e:5d:83:df:37:b3:22:41:73:
                    76:ac:18:2c:ac:b0:5d:b2:48:61:86:30:7b:3c:7b:
                    7a:e0:ec:31:60:f4:03:91:d2:d7:f1:81:8a:8f:2c:
                    a9:c2:5d:cd:60:0a:7b:52:4e:95:ed:5a:51:36:cb:
                    0c:70:2a:95:93:af:f9:60:95:47:03:01:14:5c:8c:
                    6c:73:7d:c6:35:ed:8d:e3:d9:ad:05:09:d4:4f:0b:
                    9d:5e:c2:35:34:50:f9:d9:0b:90:7a:04:2f:fd:27:
                    e0:90:0f:60:32:3f:3f:15:c2:cf:b9:77:a6:b9:23:
                    cf:36:44:76:8f:db:bd:b0:67:29:f0:a6:c6:57:37:
                    9f:dd:3a:cc:58:92:12:ef:b5:ff:42:2a:17:06:be:
                    26:84:8b:ae:13:ed:53:b0:4f:37:fe:40:21:4e:1b:
                    85:5e:1a:70:3e:81:6f:f3:08:96:6e:d8:7b:cc:14:
                    39:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:48:E2:19:DE:16:A8:D3:1F:F8:89:D9:C0:5D:8F:D9:B7:49:29:6D
            X509v3 Authority Key Identifier:
                keyid:81:C1:AE:D7:4A:AD:06:B1:B8:5C:5B:A6:77:9C:16:1F:4A:52:B3:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcGu10qtBrG4XFumd5wWH0pSs8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/EUjiGd4WqNMf-InZwF2P2bdJKW0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/0915cf-c6d8-4100-90b3-9d53ac2f8e7f/1/gcGu10qtBrG4XFumd5wWH0pSs8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:b94::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:ad:a2:fb:7f:78:ee:d6:40:91:10:59:1f:9a:73:ca:15:f1:
         2b:17:f9:ad:ac:5a:5c:16:e3:86:8d:4b:1c:cb:18:fd:1a:27:
         88:ac:e3:b5:fd:01:8e:09:b5:db:28:c0:d2:fe:b2:5e:d7:36:
         68:7d:de:2a:20:43:d7:9f:f9:8c:88:4c:b0:ee:4c:13:da:f9:
         d0:33:c4:1d:34:97:6e:16:6f:9b:0a:8a:3a:69:dc:83:a0:cd:
         db:f5:53:2e:b6:9b:8f:c7:b2:89:79:eb:13:99:7c:6e:7e:fe:
         76:a5:0b:30:d2:ba:f9:f9:ea:cf:b6:70:f7:29:90:b3:01:da:
         bf:c0:c2:56:61:b6:e4:a1:c2:69:7b:60:34:c2:67:f8:36:00:
         e3:3b:4e:cb:a4:a9:79:fc:98:f4:41:74:ff:8f:1b:c1:f9:23:
         5e:e6:27:b9:e1:84:57:01:9a:18:6d:e7:df:78:5f:57:b1:76:
         93:6c:53:3f:ad:fd:24:e0:5a:fd:02:21:e4:98:d3:c2:ec:a8:
         c1:08:7f:01:96:87:3b:5e:b9:0b:2d:7b:7a:3a:35:82:60:66:
         70:a8:6e:3a:d6:37:b8:68:3e:78:af:02:5d:e1:86:9d:84:f6:
         1e:3e:6e:6a:ce:7a:1d:11:d1:34:89:b7:88:41:66:71:ef:d4:
         6c:21:32:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----