Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/Z7-y7mi91_nZ-d2bj443w5h2SB0.roa
File:                     Z7-y7mi91_nZ-d2bj443w5h2SB0.roa (raw, json)
Hash identifier:          YgjaLBCFPX3EelF9UHYsJ+KDn2lcHtRK58TstP49h9c=
Subject key identifier:   67:BF:B2:EE:68:BD:D7:F9:D9:F9:DD:9B:8F:8E:37:C3:98:76:48:1D
Certificate issuer:       /CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
Certificate serial:       094C1F8A
Authority key identifier: 18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/Z7-y7mi91_nZ-d2bj443w5h2SB0.roa
Signing time:             Thu 06 Jan 2022 13:09:47 +0000
ROA not before:           Thu 06 Jan 2022 13:09:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     54058
IP address blocks:        2a05:2200::/29 maxlen: 29
                          2a07:4e40::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155983754 (0x94c1f8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183ae8f8887a1309ba54bc4d2761b4b30ea28e49
        Validity
            Not Before: Jan  6 13:09:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=67bfb2ee68bdd7f9d9f9dd9b8f8e37c39876481d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4c:77:0d:c3:99:c1:6c:a5:69:0e:80:68:a7:
                    21:15:2a:99:6e:04:71:11:ae:33:23:bd:e4:f2:96:
                    c9:2c:5d:f9:44:76:60:c3:f6:ce:14:23:fd:68:f5:
                    bb:5e:f6:c4:b5:97:8e:88:8c:02:eb:1b:03:ef:40:
                    b9:33:2a:70:f7:2e:68:c2:26:c8:25:50:b9:20:d8:
                    d8:e6:f2:19:de:ca:3d:e6:80:84:ff:2d:10:ba:f1:
                    95:14:df:b9:ff:92:71:8c:b0:44:fd:53:49:49:e9:
                    5d:7e:59:8b:78:22:4c:b2:bb:a8:43:15:75:79:06:
                    df:6f:e1:99:cb:ca:55:3c:d6:88:d8:71:35:3a:da:
                    c8:da:91:d7:04:48:0d:68:19:30:ed:e3:93:89:df:
                    aa:e3:14:b7:5e:36:52:4b:90:52:d1:f9:ce:9a:0a:
                    97:90:a6:68:7f:17:1d:1b:a4:bd:7b:fb:f8:54:cb:
                    87:32:51:26:ad:7f:22:bd:cc:bb:e2:81:a8:3b:e0:
                    e4:04:59:4d:ac:18:68:77:36:70:db:b8:d2:50:d6:
                    5f:da:87:5f:20:46:c5:7f:7f:5b:70:e8:02:5f:7c:
                    3c:c4:49:af:c2:03:c7:72:06:e5:38:41:fb:5a:af:
                    bb:43:46:82:4f:4c:b9:3e:a3:66:77:25:bb:51:72:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BF:B2:EE:68:BD:D7:F9:D9:F9:DD:9B:8F:8E:37:C3:98:76:48:1D
            X509v3 Authority Key Identifier:
                keyid:18:3A:E8:F8:88:7A:13:09:BA:54:BC:4D:27:61:B4:B3:0E:A2:8E:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/Z7-y7mi91_nZ-d2bj443w5h2SB0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/edd984-9b3e-4786-b1cf-60f6fa881845/1/GDro-Ih6Ewm6VLxNJ2G0sw6ijkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:2200::/29
                  2a07:4e40::/29

    Signature Algorithm: sha256WithRSAEncryption
         48:52:e9:f0:b6:9f:06:e1:b9:9e:b3:85:85:6d:fe:34:74:21:
         6b:9a:d2:e0:35:f8:fd:7f:2d:28:75:b0:64:3e:5a:9b:25:68:
         bf:47:25:f1:7a:6c:d5:bd:2b:d1:e5:ea:44:cd:e5:93:57:df:
         b8:8e:5d:61:65:4a:2e:c8:5d:df:ba:31:88:9d:75:5b:fd:d1:
         f5:66:50:05:b4:a9:a8:45:fe:72:0e:06:0c:58:ce:20:3a:fa:
         cd:fb:f9:6d:e4:fb:10:9a:be:78:c5:84:f3:4e:19:2b:ba:85:
         5c:90:c5:e0:33:5a:f3:dd:9c:21:0a:06:51:90:92:ff:6c:4b:
         97:de:eb:d3:9f:ab:64:86:00:1f:a6:57:d8:d2:0b:73:4e:bc:
         e5:98:8c:35:8f:0c:f2:fd:59:50:46:b9:a2:95:77:5e:7b:ad:
         dd:6b:f1:ae:4a:b5:a4:5a:9b:83:65:a2:79:d1:64:66:6b:95:
         4e:24:62:e9:c4:c7:7b:fd:12:16:30:78:ec:48:d0:c4:4e:91:
         c8:85:aa:b6:d1:e2:b0:cd:17:5b:51:70:94:e0:1c:31:df:e4:
         0d:2a:19:a0:2c:d0:0c:63:e1:54:a2:db:b3:65:ed:87:e4:a8:
         51:41:00:83:27:40:8b:63:72:9b:a4:1c:e7:97:3d:0e:51:6f:
         03:fe:6c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----