Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/ZIaWiObZv6_iwU7BpmrqJa83zd8.roa
File:                     ZIaWiObZv6_iwU7BpmrqJa83zd8.roa (raw, json)
Hash identifier:          W0g5uFZFXCDjPySHpaBDfz+SC9qgdUbWy81H7Frqj30=
Subject key identifier:   64:86:96:88:E6:D9:BF:AF:E2:C1:4E:C1:A6:6A:EA:25:AF:37:CD:DF
Certificate issuer:       /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial:       01858003
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/ZIaWiObZv6_iwU7BpmrqJa83zd8.roa
Signing time:             Sat 01 Jan 2022 12:06:10 +0000
ROA not before:           Sat 01 Jan 2022 12:06:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25222
IP address blocks:        2a03:1c80::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25526275 (0x1858003)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
        Validity
            Not Before: Jan  1 12:06:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=64869688e6d9bfafe2c14ec1a66aea25af37cddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:1b:7e:b8:1f:37:7f:e7:a7:fb:63:e9:d1:
                    28:f6:83:07:c6:93:d2:71:5c:5f:4a:e2:b8:13:fd:
                    21:46:03:2f:66:eb:d7:1a:fc:b9:33:cc:aa:35:e8:
                    72:93:47:21:f0:89:33:5f:38:a5:0e:cf:b3:4b:5d:
                    01:e7:58:78:37:49:02:9c:18:79:ab:74:0e:c4:61:
                    ad:d4:15:15:12:13:d3:9f:e8:d0:c5:9b:0e:71:df:
                    51:a8:ae:fe:88:65:13:eb:91:33:67:5f:67:cd:ac:
                    a4:b4:19:e7:e5:74:18:7e:c8:de:e4:f3:2b:14:0f:
                    af:06:56:18:a2:c5:a6:80:72:7b:84:cd:56:61:48:
                    0c:10:86:3a:d7:0c:90:b7:13:10:a0:18:a4:c1:6f:
                    62:19:df:bf:84:1b:d4:39:65:08:50:8b:ce:99:45:
                    6d:32:2c:96:89:30:c9:cb:2a:13:42:b0:13:83:45:
                    1c:c2:93:5e:17:38:19:0e:f9:b7:e4:af:be:4d:55:
                    ac:58:d7:bd:14:9c:75:0c:2a:b3:0e:57:6b:17:a6:
                    95:e1:eb:73:96:63:75:55:37:78:0d:37:6d:ca:79:
                    84:c8:df:a2:d4:34:6e:87:31:49:f3:f7:ec:c1:83:
                    71:5a:45:b0:06:0e:fd:3c:84:94:f3:4b:ff:0f:de:
                    76:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:86:96:88:E6:D9:BF:AF:E2:C1:4E:C1:A6:6A:EA:25:AF:37:CD:DF
            X509v3 Authority Key Identifier:
                keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/ZIaWiObZv6_iwU7BpmrqJa83zd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:1c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:09:60:93:3f:bb:10:c0:b3:e9:fa:61:b8:6d:a9:1b:df:6d:
         96:3d:e4:6d:74:fe:ca:30:c0:60:08:67:e8:64:49:9f:b1:b7:
         a8:f7:43:00:be:c6:ec:67:5a:cd:14:e4:f8:50:e4:41:65:60:
         35:ab:13:9e:78:a3:f6:9f:33:2e:b2:af:08:22:3f:ae:9e:6e:
         67:9b:d4:17:7e:06:04:ec:38:51:44:0b:81:8b:4d:ef:ac:07:
         b8:5b:d8:33:7b:07:67:d4:16:6f:43:71:75:f5:86:d6:97:03:
         8a:db:a3:bb:21:e4:62:5d:cc:19:de:7f:44:b7:f3:64:35:1f:
         f1:0c:ac:38:f8:fe:ee:c6:93:cc:57:62:d7:ae:bd:d7:34:66:
         a5:ef:80:51:e0:67:13:d7:26:4f:9d:2d:b3:96:d5:ab:d7:31:
         b6:85:79:56:0e:54:87:08:95:f7:a2:a1:ba:09:5b:17:01:14:
         90:5d:f9:1f:ae:f0:9d:3a:a5:12:23:61:5c:3a:f1:01:b7:74:
         23:fd:8d:aa:e0:88:bd:ce:f7:f5:1a:9e:0c:5c:2f:74:e3:74:
         64:9c:9c:81:4b:2a:ef:a2:8b:6f:87:da:ec:2c:50:61:3e:60:
         3b:22:17:d7:83:89:76:6c:5d:ec:23:d3:9a:2e:34:ce:ec:70:
         45:3f:b6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----