Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/MtcAAX0rQttb69YL9sl0LUTPU8E.roa
File:                     MtcAAX0rQttb69YL9sl0LUTPU8E.roa (raw, json)
Hash identifier:          ioiT36t4p9Twmj9NIGvsnMrQz63f9HBobp6fT4Jv1Gk=
Subject key identifier:   32:D7:00:01:7D:2B:42:DB:5B:EB:D6:0B:F6:C9:74:2D:44:CF:53:C1
Certificate issuer:       /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial:       01ED21
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/MtcAAX0rQttb69YL9sl0LUTPU8E.roa
Signing time:             Wed 01 Jun 2022 13:26:20 +0000
ROA not before:           Wed 01 Jun 2022 13:26:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12779
IP address blocks:        2a02:c480::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126241 (0x1ed21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
        Validity
            Not Before: Jun  1 13:26:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=32d700017d2b42db5bebd60bf6c9742d44cf53c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a8:02:d4:21:df:dc:cf:0e:08:c9:73:fe:3e:
                    44:d7:65:a6:64:d1:81:42:1a:bb:bc:d0:db:9d:3b:
                    9a:39:0d:09:60:4c:28:cd:2f:f6:92:82:d0:8d:cc:
                    e9:38:70:b5:42:a0:7e:72:b3:a2:66:64:38:b4:97:
                    e9:b8:68:79:e5:bc:86:29:93:7f:ac:65:e1:d1:bb:
                    2f:e7:ff:c6:dd:b7:6a:b2:bf:99:6e:56:d6:ef:7f:
                    fc:18:d8:17:36:38:84:a2:98:75:94:2b:c3:2e:d0:
                    64:50:f1:27:7b:c2:dc:76:09:66:62:40:08:65:ca:
                    8c:3e:05:8e:8b:02:cb:17:2c:37:e4:a9:ac:f8:04:
                    b9:6b:77:21:cb:9e:93:67:c6:53:cd:3f:c3:c8:56:
                    9c:5e:78:ae:27:66:bc:5e:46:07:3f:6b:3a:60:d3:
                    ff:47:b7:da:5e:96:3f:63:fb:ca:92:7c:54:67:5f:
                    89:7a:2b:f5:68:14:16:fb:57:5f:3e:dc:3a:0e:37:
                    00:51:07:e8:c9:50:9e:85:be:1d:7d:6e:2a:e6:34:
                    50:54:d1:e8:e4:bb:7a:79:71:fa:2e:b5:8f:a6:53:
                    f1:0b:ae:22:e1:14:b0:46:6b:cf:a1:1b:48:75:ea:
                    37:43:84:44:f5:90:fa:32:67:c8:18:97:bd:26:6d:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D7:00:01:7D:2B:42:DB:5B:EB:D6:0B:F6:C9:74:2D:44:CF:53:C1
            X509v3 Authority Key Identifier:
                keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/MtcAAX0rQttb69YL9sl0LUTPU8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:c480::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:c9:e3:0c:1e:e3:66:6e:c9:b6:d4:96:7e:31:e6:1b:5c:dd:
         a2:4f:07:0a:7c:bf:a4:b9:80:ce:e8:7e:ec:7f:11:85:c8:ec:
         3f:2f:be:15:b9:2e:5e:5c:64:f5:e6:b1:65:68:28:59:b6:2b:
         72:85:2c:4f:44:39:4c:fc:98:43:88:c4:0d:c9:73:43:c7:68:
         e8:62:08:b0:e5:94:ca:38:8f:db:2c:01:b8:00:6a:e5:33:5c:
         98:57:4c:7b:a6:a9:af:8f:06:50:20:c3:ac:85:38:7d:dc:7d:
         f2:de:c9:69:e8:85:4a:51:98:76:ed:0c:f8:e7:93:42:a1:d3:
         16:d0:fb:09:06:5d:a2:c2:da:d8:ad:56:b6:4f:0f:95:ee:70:
         f7:10:8a:00:59:31:77:d8:9a:4a:cf:d0:eb:48:88:f7:7b:2c:
         50:3e:d3:89:f6:57:96:73:76:bd:75:06:51:a4:35:00:00:95:
         bd:42:5e:f6:d4:8f:b0:a3:bd:65:f6:47:ce:32:62:d9:04:3b:
         7b:cd:e4:2a:4a:40:48:af:c5:ee:07:87:40:55:9a:76:fe:3c:
         7d:0f:76:d6:b0:87:1b:47:a1:e5:e0:ef:f9:8c:6f:c6:39:36:
         59:09:dc:cf:d9:fb:ee:80:bb:73:74:9b:e5:37:a3:6b:c0:b5:
         83:60:85:77
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDAe0hMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGJh
MmYxYTExZGUxOTBjODFjMGI3NzUyY2Y1MmI1Njk0MjVkYzU0Y2IwHhcNMjIwNjAx
MTMyNjIwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzMmQ3MDAwMTdkMmI0
MmRiNWJlYmQ2MGJmNmM5NzQyZDQ0Y2Y1M2MxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp6gC1CHf3M8OCMlz/j5E12WmZNGBQhq7vNDbnTuaOQ0JYEwo
zS/2koLQjczpOHC1QqB+crOiZmQ4tJfpuGh55byGKZN/rGXh0bsv5//G3bdqsr+Z
blbW73/8GNgXNjiEoph1lCvDLtBkUPEne8LcdglmYkAIZcqMPgWOiwLLFyw35Kms
+AS5a3chy56TZ8ZTzT/DyFacXniuJ2a8XkYHP2s6YNP/R7faXpY/Y/vKknxUZ1+J
eiv1aBQW+1dfPtw6DjcAUQfoyVCehb4dfW4q5jRQVNHo5Lt6eXH6LrWPplPxC64i
4RSwRmvPoRtIdeo3Q4RE9ZD6MmfIGJe9Jm3r9QIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFDLXAAF9K0LbW+vWC/bJdC1Ez1PBMB8GA1UdIwQYMBaAFLovGhHeGQyBwLd1
LPUrVpQl3FTLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
dWk4YUVkNFpESUhBdDNVczlTdFdsQ1hjVk1zLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83YS9mOTY1MzItZDdmZi00NTM4LWJjY2QtMmQzOGU3Nzc5MzQ4LzEv
TXRjQUFYMHJRdHRiNjlZTDlzbDBMVVRQVThFLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9m
OTY1MzItZDdmZi00NTM4LWJjY2QtMmQzOGU3Nzc5MzQ4LzEvdWk4YUVkNFpESUhB
dDNVczlTdFdsQ1hjVk1zLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAG
CCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgLEgDANBgkqhkiG9w0BAQsFAAOC
AQEAEMnjDB7jZm7JttSWfjHmG1zdok8HCny/pLmAzuh+7H8RhcjsPy++FbkuXlxk
9eaxZWgoWbYrcoUsT0Q5TPyYQ4jEDclzQ8do6GIIsOWUyjiP2ywBuABq5TNcmFdM
e6apr48GUCDDrIU4fdx98t7JaeiFSlGYdu0M+OeTQqHTFtD7CQZdosLa2K1Wtk8P
le5w9xCKAFkxd9iaSs/Q60iI93ssUD7TifZXlnN2vXUGUaQ1AACVvUJe9tSPsKO9
ZfZHzjJi2QQ7e83kKkpASK/F7geHQFWadv48fQ921rCHG0eh5eDv+Yxvxjk2WQnc
z9n77oC7c3Sb5Teja8C1g2CFdw==
-----END CERTIFICATE-----