Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/1qQGtAPaVReJ6ebVTdVBHD4q8KM.roa
File:                     1qQGtAPaVReJ6ebVTdVBHD4q8KM.roa (raw, json)
Hash identifier:          bdkTblx1x7TdtA7gmoJ8atYncoQB6QnhyAMsijd52yk=
Subject key identifier:   D6:A4:06:B4:03:DA:55:17:89:E9:E6:D5:4D:D5:41:1C:3E:2A:F0:A3
Certificate issuer:       /CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
Certificate serial:       0242EA
Authority key identifier: DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/1qQGtAPaVReJ6ebVTdVBHD4q8KM.roa
Signing time:             Mon 28 Feb 2022 13:58:37 +0000
ROA not before:           Mon 28 Feb 2022 13:58:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8605
IP address blocks:        2001:67c:2198::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148202 (0x242ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da73a39a0e045ddfaef502f1fd91c6cc16509459
        Validity
            Not Before: Feb 28 13:58:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d6a406b403da551789e9e6d54dd5411c3e2af0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:da:ab:43:6f:e3:e1:78:05:03:96:9a:06:35:
                    36:ac:92:ee:ac:0f:dd:71:6e:f0:58:c8:7a:4e:f0:
                    4e:24:89:cc:85:c5:fc:84:02:6f:75:26:62:16:27:
                    db:b4:4d:13:c4:f6:9b:ec:a6:f0:4a:10:59:3a:a8:
                    1c:82:02:50:3e:31:f8:7c:c6:84:de:6c:34:fa:a8:
                    5a:d8:ec:40:af:59:46:41:50:9f:4b:5f:4e:1b:4f:
                    71:d3:f2:31:df:9d:31:35:15:2b:7c:6f:20:d5:12:
                    12:c2:b2:e2:22:2f:3c:77:50:a5:6c:c2:ba:a3:99:
                    90:65:37:8f:36:07:19:67:22:21:81:50:4c:b7:d7:
                    57:09:72:ae:2a:46:ee:77:4e:99:2c:ad:fe:23:b3:
                    de:38:9a:99:89:94:bb:04:7a:e1:46:44:2f:b9:b4:
                    8f:e4:60:cb:ff:07:ef:09:52:20:2a:2b:15:3c:1c:
                    0c:cf:d0:c8:b7:92:e9:3c:42:55:10:97:34:c8:46:
                    fb:04:dd:b6:16:4d:5b:9d:1b:9d:51:b3:2d:29:8d:
                    50:50:31:1a:09:e5:e4:e0:07:67:dc:da:98:49:e7:
                    2a:ea:c3:30:ef:f2:14:6e:4f:76:34:ae:98:85:9d:
                    5e:da:91:59:8b:57:69:69:f7:80:ed:3c:45:ca:fb:
                    0b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A4:06:B4:03:DA:55:17:89:E9:E6:D5:4D:D5:41:1C:3E:2A:F0:A3
            X509v3 Authority Key Identifier:
                keyid:DA:73:A3:9A:0E:04:5D:DF:AE:F5:02:F1:FD:91:C6:CC:16:50:94:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/1qQGtAPaVReJ6ebVTdVBHD4q8KM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1737fc-b221-4ff0-bfa7-5d674caddd6f/1/2nOjmg4EXd-u9QLx_ZHGzBZQlFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2198::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:db:dc:43:f2:cb:41:c2:b1:67:ad:44:f7:54:eb:b0:79:ba:
         29:ec:d1:11:fd:af:dd:8a:e1:83:14:b9:63:9f:ce:6f:5b:c2:
         6b:e9:08:df:4d:e4:3b:bb:47:43:08:84:7a:bf:08:ca:4e:83:
         8f:4d:e7:ba:89:6d:2e:38:f6:d0:f5:05:d5:0b:dd:b8:7d:51:
         27:42:51:fa:4d:6d:4f:ec:a9:c3:e9:89:2d:00:69:41:3b:0e:
         10:c9:8a:ea:b0:6f:70:de:b0:f7:fb:88:82:93:50:50:2e:e1:
         b0:b5:4a:30:ab:8a:37:c0:a5:0b:51:21:22:c7:d7:8c:b5:cd:
         66:4e:dd:3b:62:24:04:6b:ac:8c:c4:65:e0:b7:df:1b:29:4d:
         16:41:c5:de:04:3e:ae:d0:a2:17:ed:65:42:34:d9:8c:90:22:
         a3:41:49:29:df:33:63:b4:25:a7:bf:11:93:46:4a:e2:37:d2:
         ec:a9:2a:c0:30:30:3f:e9:df:ad:03:a9:c9:c2:a6:7a:7f:55:
         90:b3:a0:f2:61:7c:96:d6:a9:82:98:50:1d:6e:bc:3e:e6:c2:
         c1:2d:df:15:fb:89:82:77:f5:6c:78:89:cb:49:ce:d7:86:dd:
         c8:4d:3b:51:59:fa:60:69:02:6c:43:c9:c9:76:3b:d2:c8:7a:
         a9:d5:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----