Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/kITW3pAS4-2qgRN-MCQtz0asaMU.roa
File:                     kITW3pAS4-2qgRN-MCQtz0asaMU.roa (raw, json)
Hash identifier:          DczH2Hs90c1W3vt6FsdjjVUk0kOi5uoSBQI6NlSl/S0=
Subject key identifier:   90:84:D6:DE:90:12:E3:ED:AA:81:13:7E:30:24:2D:CF:46:AC:68:C5
Certificate issuer:       /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial:       0C6C08AA
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/kITW3pAS4-2qgRN-MCQtz0asaMU.roa
Signing time:             Sat 01 Jan 2022 12:56:04 +0000
ROA not before:           Sat 01 Jan 2022 12:56:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        2a02:3040:43:ff00::/56 maxlen: 56

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208406698 (0xc6c08aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
        Validity
            Not Before: Jan  1 12:56:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9084d6de9012e3edaa81137e30242dcf46ac68c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:da:83:12:dc:f4:a8:52:17:94:94:ad:e0:
                    59:da:93:b1:92:c2:c7:b6:10:74:a6:90:c7:1b:11:
                    fd:c9:cf:bb:b3:40:3f:56:bd:10:8a:79:47:b0:60:
                    f1:aa:92:6c:d7:3b:b1:03:94:53:21:0b:bd:4d:fa:
                    13:e3:69:c8:7b:cc:33:31:e1:ce:92:ba:df:c9:15:
                    ee:f1:ea:ed:4e:4e:fc:71:4b:80:de:a0:18:fe:0e:
                    7b:6a:63:15:71:3b:d6:05:3d:9e:37:98:91:21:f6:
                    62:46:2b:99:3a:e1:1b:7e:c4:e5:84:15:e0:fd:64:
                    52:20:3a:b9:dc:cd:45:43:96:34:91:95:02:59:bb:
                    51:49:36:7b:b5:d5:cb:77:8d:37:26:26:93:76:3e:
                    cc:23:1f:5f:6b:e0:2e:02:a2:f8:7f:96:62:da:60:
                    11:22:e3:c1:b7:0e:98:bf:77:f1:a6:04:0b:09:91:
                    7c:dd:a2:2b:87:de:e8:ab:15:d9:84:83:96:8e:2f:
                    27:ca:af:7f:c5:24:a7:6a:e1:ae:da:3a:f8:6d:31:
                    7b:64:79:e1:c6:51:87:f4:95:5f:63:c2:ae:5b:39:
                    71:8d:98:4d:c9:df:3f:c7:56:c9:f8:26:4f:8b:cf:
                    e2:25:26:7c:8c:37:0b:ad:b0:7a:16:8a:3c:3f:39:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:84:D6:DE:90:12:E3:ED:AA:81:13:7E:30:24:2D:CF:46:AC:68:C5
            X509v3 Authority Key Identifier:
                keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/kITW3pAS4-2qgRN-MCQtz0asaMU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:3040:43:ff00::/56

    Signature Algorithm: sha256WithRSAEncryption
         12:96:bf:68:7f:0c:a4:18:26:bb:79:83:36:1f:62:35:8e:1a:
         de:36:bb:a9:7c:1b:4b:be:f3:a1:a0:18:d6:ca:11:9d:3d:ac:
         df:96:84:71:8b:fc:aa:21:cd:58:87:4a:55:1a:ca:24:6c:f4:
         f9:5e:2e:9a:6a:90:11:48:80:01:9a:d7:ff:60:29:a5:d3:0d:
         64:5f:45:b5:8e:e1:f9:18:a6:32:3b:17:52:c6:d2:ac:0a:98:
         3d:c6:b4:93:8d:52:09:bb:ec:1c:23:15:66:28:66:94:82:cc:
         f2:d9:ad:00:ba:b7:03:f9:6f:c2:74:2d:7a:c4:05:c7:be:08:
         d1:ee:b7:5f:91:d8:7c:7a:37:80:e6:13:e0:60:c8:2a:4a:8d:
         58:22:df:e4:98:d7:39:99:93:18:f1:08:ac:d3:be:25:76:ce:
         ff:ec:af:9c:75:ee:ce:c7:0f:12:e2:dc:c6:8a:31:e6:73:38:
         fb:c7:a9:d6:15:37:bd:e1:50:d1:71:0b:c8:aa:79:5d:bd:63:
         67:ef:fa:f1:03:b3:28:d2:7d:42:cc:fe:85:b7:15:51:95:eb:
         ff:91:07:6f:f5:44:fc:94:35:f3:6c:47:73:d2:85:aa:d2:09:
         33:ce:67:06:a2:42:a7:03:69:bc:f0:c2:66:92:ec:51:77:06:
         aa:f9:b5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----