Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/eZJASuVcKrqrT9vC92trDpzuxyE.roa
File:                     eZJASuVcKrqrT9vC92trDpzuxyE.roa (raw, json)
Hash identifier:          UbNUGf86dqiUOQQ5hSTxc67Vm9QLMVDpfXvuPcX255k=
Subject key identifier:   79:92:40:4A:E5:5C:2A:BA:AB:4F:DB:C2:F7:6B:6B:0E:9C:EE:C7:21
Certificate issuer:       /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial:       03BE6583
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/eZJASuVcKrqrT9vC92trDpzuxyE.roa
Signing time:             Sat 01 Jan 2022 14:07:17 +0000
ROA not before:           Sat 01 Jan 2022 14:07:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15683
IP address blocks:        2a01:6d80:2000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62809475 (0x3be6583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
        Validity
            Not Before: Jan  1 14:07:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7992404ae55c2abaab4fdbc2f76b6b0e9ceec721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:07:cd:01:96:cb:cb:60:d7:b3:e2:e7:16:6f:
                    5d:34:e0:1e:e9:ca:dc:8b:7c:8b:2c:83:e7:ec:21:
                    fe:73:83:d1:20:c3:5c:c0:ee:da:8a:fc:de:09:67:
                    2a:73:49:e0:39:f7:37:5c:2f:30:a8:dd:2c:15:4a:
                    f4:00:31:e8:30:2b:e3:b4:ca:c2:b3:44:20:b1:e1:
                    6d:c9:bf:5e:0a:32:9a:9c:4f:e6:88:d3:ec:02:d2:
                    57:b7:1b:b7:44:fd:50:79:80:59:1d:e7:01:66:16:
                    cb:03:fc:bb:4c:1b:13:b6:79:e4:d7:4a:06:a9:b0:
                    46:97:e7:1d:e4:d7:1d:dc:e3:53:32:4a:d1:98:1f:
                    bb:f7:3a:00:8d:ed:a4:bf:7e:eb:41:51:8f:da:81:
                    3c:b9:7c:c4:25:e7:9d:2e:12:09:54:ac:0e:34:07:
                    26:ff:dd:9b:25:c0:44:53:00:43:2f:d9:8e:fe:70:
                    74:72:1e:64:7d:fa:f0:a7:60:d1:b8:8d:c1:7e:1c:
                    ae:41:c6:46:26:f6:eb:b4:00:4b:10:a6:a0:63:e9:
                    46:a1:7c:99:af:49:89:29:bf:1d:ea:63:15:bf:6a:
                    06:19:b5:72:99:eb:43:85:f3:e5:30:18:4d:b2:c8:
                    d7:e6:be:af:d9:cf:9c:ea:a3:75:66:3d:38:99:42:
                    f7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:92:40:4A:E5:5C:2A:BA:AB:4F:DB:C2:F7:6B:6B:0E:9C:EE:C7:21
            X509v3 Authority Key Identifier:
                keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/eZJASuVcKrqrT9vC92trDpzuxyE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:6d80:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ab:4a:f3:d2:ec:c4:28:f7:ff:86:97:7f:9d:ae:ba:96:26:18:
         cc:b0:e3:e6:d0:d5:c3:63:98:80:12:cc:30:b6:ba:5d:5a:e7:
         c2:7d:2b:0d:45:29:d9:f4:ca:d7:b8:6c:37:15:8a:49:ff:71:
         af:ca:40:6f:6c:ff:36:08:b1:c4:3e:a3:de:e4:52:e7:44:22:
         d1:49:48:0a:a2:98:8a:5a:d2:ee:17:75:ee:ea:4e:4f:3b:de:
         d1:36:91:73:4d:90:54:21:f4:72:aa:bb:d9:55:91:72:74:24:
         e7:c5:40:fc:b9:3a:f8:50:a3:b7:e1:b2:53:bd:00:c0:e1:52:
         6f:fe:d8:d3:3e:63:69:b4:e0:26:84:1c:b9:1e:fa:d3:f7:c0:
         23:ac:b3:5c:fa:81:84:57:68:26:20:cd:26:b5:f4:08:52:42:
         58:a6:29:43:df:48:d6:6b:2e:9b:af:21:69:31:bd:c8:37:40:
         4c:dc:b2:e3:49:36:a0:0f:b5:35:68:6b:58:40:d8:e5:02:38:
         a8:bd:78:6d:5d:cf:c1:be:32:5a:69:d7:93:0f:e1:f4:e9:e7:
         8d:80:69:82:2f:e0:c5:f1:7c:dd:e7:73:31:a7:7d:70:a4:45:
         f0:77:91:c0:61:b0:0a:85:a8:0e:b8:25:32:2a:3e:07:f7:ca:
         59:d6:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----