Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/yxl9-NI_txWvrQCKE9U5gPxMagk.roa
File:                     yxl9-NI_txWvrQCKE9U5gPxMagk.roa (raw, json)
Hash identifier:          wExqg1C10j4Z0Ops2rokABUvSu7ZkX0hmX1p+pkXNNs=
Subject key identifier:   CB:19:7D:F8:D2:3F:B7:15:AF:AD:00:8A:13:D5:39:80:FC:4C:6A:09
Certificate issuer:       /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial:       0181F3AC9A1E36FD0417D76CAD541D3E65E3
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/yxl9-NI_txWvrQCKE9U5gPxMagk.roa
Signing time:             Tue 12 Jul 2022 18:29:44 +0000
ROA not before:           Tue 12 Jul 2022 18:29:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203930
IP address blocks:        2a13:5b00::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:f3:ac:9a:1e:36:fd:04:17:d7:6c:ad:54:1d:3e:65:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
        Validity
            Not Before: Jul 12 18:29:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cb197df8d23fb715afad008a13d53980fc4c6a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:15:4f:60:0a:d3:63:47:e8:97:05:1b:9c:
                    2f:68:ac:07:66:2e:f8:31:13:1e:23:e9:2f:b4:53:
                    6c:52:a3:63:93:26:0c:66:3f:d2:f8:43:0b:9c:ea:
                    44:f7:91:1c:14:cc:0a:6a:5f:94:7b:55:2e:d5:94:
                    46:87:ce:25:12:8f:00:40:da:c1:14:24:0f:56:59:
                    17:70:55:65:4f:c4:50:b3:bb:d8:b0:e0:37:d2:0c:
                    fc:57:80:d5:9c:c0:21:7f:6a:17:1c:4b:aa:d1:19:
                    b5:05:63:bf:1e:22:07:90:b4:90:88:89:1a:ef:0c:
                    c0:7c:a8:60:ce:6f:5e:b0:5a:58:69:98:04:9c:fa:
                    7a:64:82:63:af:e6:1f:34:35:ae:02:c3:8e:55:27:
                    80:45:05:6f:8c:38:7f:a2:03:66:21:ed:b7:c0:57:
                    a5:d9:9b:a2:ac:ac:f2:09:65:54:fe:5f:9d:49:bd:
                    a1:26:e9:68:53:58:1b:f0:ee:ef:63:2f:b4:36:0f:
                    94:79:5c:58:6f:3d:35:61:2f:15:f0:8b:3c:8a:97:
                    a1:7f:37:d2:4e:b9:c2:2f:b0:d6:1e:cb:ff:b0:ff:
                    0d:89:b6:9b:d9:c3:be:7c:a2:88:1a:41:20:d0:36:
                    b4:a1:1e:4f:b5:2a:0b:2e:73:4a:18:ad:ed:a7:b4:
                    20:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:19:7D:F8:D2:3F:B7:15:AF:AD:00:8A:13:D5:39:80:FC:4C:6A:09
            X509v3 Authority Key Identifier:
                keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/yxl9-NI_txWvrQCKE9U5gPxMagk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:5b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:94:7a:a9:fd:32:b4:fb:d7:bd:c5:87:76:ae:e4:6a:06:ed:
         7e:92:49:52:21:11:fe:b0:70:7c:3c:a8:d7:5a:48:85:51:5e:
         6c:f8:ba:f8:66:0a:f1:1c:c8:cb:b6:11:f9:d1:6c:fc:f3:2c:
         a2:ba:fb:93:b6:1b:74:0d:f4:3f:41:13:32:f8:1f:77:32:53:
         b1:00:e6:c2:5d:2f:f6:e6:02:db:82:82:1e:9b:e7:a4:6d:e9:
         8b:ae:ef:93:a3:c4:b1:16:04:8a:7c:32:17:22:3a:c7:70:6f:
         61:9e:f1:67:90:43:43:aa:33:f7:de:81:a3:53:bb:18:a9:f6:
         5f:38:88:28:43:18:9f:80:5b:ba:7b:97:58:a1:f9:b6:34:d7:
         f1:d9:e0:bf:78:ec:28:ff:02:b9:fb:9d:2f:fe:ff:be:ac:80:
         e2:21:0c:50:1b:f8:b6:f7:e4:dd:07:6e:42:c1:1a:45:94:8c:
         94:29:ba:38:33:26:95:df:34:e1:d7:8d:e1:35:82:11:5b:74:
         36:46:b5:47:ac:59:a0:39:ee:4e:fe:6c:f2:5a:1a:9b:62:bf:
         a2:c7:88:7a:34:8d:61:f6:c0:ab:31:23:cb:70:6e:3b:4d:b4:
         06:41:b9:99:c6:bb:30:49:1f:1d:b0:8d:11:90:2a:a9:32:ee:
         f3:9c:b9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----