Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/oICmacyAqxmOfYQQ08sXwgoHSRI.roa
File:                     oICmacyAqxmOfYQQ08sXwgoHSRI.roa (raw, json)
Hash identifier:          yLpD7uUOnRI3ic/Zou6/JMsL5DPkF/x+LU1biIvD2SI=
Subject key identifier:   A0:80:A6:69:CC:80:AB:19:8E:7D:84:10:D3:CB:17:C2:0A:07:49:12
Certificate issuer:       /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial:       05E453B0
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/oICmacyAqxmOfYQQ08sXwgoHSRI.roa
Signing time:             Sat 01 Jan 2022 11:03:01 +0000
ROA not before:           Sat 01 Jan 2022 11:03:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213120
IP address blocks:        2a02:2370:1000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98849712 (0x5e453b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
        Validity
            Not Before: Jan  1 11:03:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a080a669cc80ab198e7d8410d3cb17c20a074912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ff:51:b6:ca:ff:0f:a4:af:d2:b6:10:3b:4b:
                    45:49:d6:48:e7:48:ac:0f:5c:e5:95:f9:fe:13:5b:
                    a0:0f:c2:c0:56:d2:43:bb:73:62:38:0f:5d:d8:f8:
                    30:db:d4:b0:f7:af:d0:a3:e3:df:50:bd:3d:52:3f:
                    08:fa:60:f1:5b:3e:17:a1:89:1e:d0:93:f0:e7:57:
                    67:f4:9d:23:88:3e:3c:f4:6c:6e:0c:db:9b:af:b0:
                    13:6b:3b:32:4d:0a:4d:d5:0c:fa:8b:0f:7c:30:9d:
                    42:13:e3:a1:23:6b:af:dd:3c:31:82:c3:2a:8a:16:
                    00:e5:0a:96:43:60:95:50:43:48:23:69:6c:6e:2a:
                    65:0c:62:8c:de:70:53:ea:57:75:f2:e2:dc:a0:49:
                    e5:e3:6b:bb:8b:77:ed:63:b4:88:a1:2a:62:1f:96:
                    62:e3:27:07:1b:5f:18:2d:68:1b:d1:c8:d7:d8:61:
                    c3:64:50:5f:d9:d4:0d:f1:26:4d:c9:dd:30:8f:7e:
                    ce:8d:12:8c:da:96:10:e6:11:4a:9c:58:05:ee:00:
                    08:4d:69:9e:ac:ef:28:2e:36:f6:4a:71:fd:9c:aa:
                    de:ce:f6:00:0e:ce:ef:7a:1a:f5:a1:5c:e9:dc:9d:
                    ea:d5:51:fc:c3:9d:b3:ab:10:c6:22:df:2b:71:56:
                    e2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:80:A6:69:CC:80:AB:19:8E:7D:84:10:D3:CB:17:C2:0A:07:49:12
            X509v3 Authority Key Identifier:
                keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/oICmacyAqxmOfYQQ08sXwgoHSRI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:2370:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:0f:87:d9:d1:ff:09:51:e6:3d:e7:e1:fa:5f:83:3b:30:20:
         af:fa:b6:9a:40:01:f1:78:7f:d5:41:c1:5f:a6:2f:9b:42:20:
         ec:6d:39:11:d8:22:e7:09:94:f1:86:8a:93:f1:6e:1d:6a:6b:
         4b:fa:b1:d0:52:dc:77:a0:59:cf:36:3c:4d:28:ad:b9:27:b2:
         0f:e8:42:16:b6:d5:5e:ba:e6:ee:ac:68:f8:2f:43:1c:a6:ea:
         6a:e8:61:9f:6c:57:bc:77:28:57:c7:ce:02:bd:50:af:b5:05:
         7c:10:3d:c2:25:60:84:08:7e:bd:27:b9:59:4b:e7:70:8d:79:
         8d:e2:c5:2c:36:0b:f7:8e:a9:fa:27:46:59:30:83:69:f1:01:
         85:21:ed:15:46:39:28:32:0c:dc:d2:9d:45:bf:4f:df:29:aa:
         fb:d0:fd:bf:fa:50:7c:ed:ab:3a:55:67:16:3f:9e:73:9d:04:
         26:6b:96:0b:f5:9b:47:64:f5:50:eb:79:6d:63:cf:c3:92:fb:
         b6:e8:35:c0:f5:99:eb:fe:9e:4e:72:27:c0:b6:33:38:b4:75:
         5b:6e:49:d4:92:0e:74:c3:8d:d1:2b:6c:a5:1a:1f:46:9b:d2:
         0b:69:9b:fc:d7:9e:2f:60:f4:17:20:a6:87:66:a0:88:41:ed:
         0b:b9:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----