Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Q5cImx9axvgqCXapnDkZpIqclrY.roa
File:                     Q5cImx9axvgqCXapnDkZpIqclrY.roa (raw, json)
Hash identifier:          ZGDCQevtUSXXoZUPNk9KSnHx/USTxPMahGVFXhjBYRs=
Subject key identifier:   43:97:08:9B:1F:5A:C6:F8:2A:09:76:A9:9C:39:19:A4:8A:9C:96:B6
Certificate issuer:       /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial:       07E24225
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Q5cImx9axvgqCXapnDkZpIqclrY.roa
Signing time:             Sat 01 Jan 2022 05:52:13 +0000
ROA not before:           Sat 01 Jan 2022 05:52:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210960
IP address blocks:        2a0e:b704::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132268581 (0x7e24225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
        Validity
            Not Before: Jan  1 05:52:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4397089b1f5ac6f82a0976a99c3919a48a9c96b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:98:b9:5f:5c:e2:f5:64:55:52:34:8a:3b:
                    cc:68:12:42:7c:5f:85:0f:3c:9c:96:d9:c1:61:c0:
                    45:46:bb:72:0c:6e:fa:aa:24:28:0c:87:5e:0d:20:
                    67:40:18:55:d5:e5:40:55:56:fa:82:e9:a1:3d:af:
                    37:29:02:9a:2f:36:01:77:1d:20:f4:53:2a:c8:2d:
                    78:17:6e:8b:62:e4:39:42:c2:09:54:48:10:95:91:
                    6c:4a:19:86:36:90:5d:43:35:69:4a:37:c3:4c:6d:
                    d9:7d:13:56:d9:03:4c:90:cc:8f:bb:7d:e9:e5:fb:
                    ec:d4:fd:2c:a6:8e:07:55:f9:d5:cd:77:6a:29:f4:
                    56:ad:b3:6f:ed:28:15:33:36:d4:f1:03:93:91:86:
                    98:c4:de:77:34:cf:6c:2f:9e:a9:e1:97:e7:42:5a:
                    c1:26:b0:dd:68:3e:0c:2b:0e:6f:22:93:fc:86:37:
                    4a:6f:06:60:25:35:cf:0e:db:80:ca:c9:85:b6:b8:
                    6b:01:d4:6f:ab:90:e7:13:32:9b:37:78:4b:8f:37:
                    2d:20:6b:02:59:99:2b:89:e6:49:e4:e8:52:d0:82:
                    ba:dc:76:61:cd:92:ee:fc:7d:b9:e2:44:f8:5b:e9:
                    24:44:b4:05:7c:10:8b:8d:a7:8a:91:dd:0c:64:2f:
                    00:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:97:08:9B:1F:5A:C6:F8:2A:09:76:A9:9C:39:19:A4:8A:9C:96:B6
            X509v3 Authority Key Identifier:
                keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Q5cImx9axvgqCXapnDkZpIqclrY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b704::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:67:22:b1:6b:f3:b6:92:5a:a1:64:4d:47:fa:34:0a:2b:fd:
         1d:0c:bd:80:0a:13:b1:4c:e5:a2:68:5a:ea:62:f9:3c:0b:2f:
         fd:23:12:bb:b2:f2:b5:55:9e:35:99:96:76:f0:2b:e1:e6:b2:
         0e:27:9a:fa:e5:e2:1c:a2:e6:cb:1f:14:24:8f:58:d8:94:a3:
         7f:0a:58:2b:7e:12:3d:0a:31:2a:8b:87:0f:2f:66:9e:07:33:
         e0:48:56:ed:75:a2:d0:e2:0d:c1:c7:44:c1:6d:09:ad:90:eb:
         0f:8e:4c:ca:79:f2:22:61:f6:4c:cb:26:04:a3:95:ae:10:08:
         49:24:f1:46:20:0b:34:76:1e:91:05:13:ca:1a:e9:4b:23:f1:
         18:90:10:72:ee:f3:fa:b1:11:3d:fa:e6:5c:33:0f:d8:48:1c:
         bf:42:b2:47:57:48:3e:8f:58:38:61:69:d3:0a:f3:67:a5:6f:
         98:67:df:29:18:3e:30:3a:a3:89:70:2a:e2:4b:be:b3:9e:29:
         6b:b4:62:60:8f:8d:cc:42:ed:61:68:9a:34:4a:f6:ca:88:77:
         06:35:40:7d:f5:68:02:a2:25:07:0a:55:42:d6:72:88:e1:4a:
         d8:b0:78:7c:02:0c:30:3f:8c:13:91:02:e0:b9:87:3a:db:b5:
         f0:4c:ba:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----