Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/g8iSY8MeZAdkPGDvZ3KKeBrupF4.roa
File:                     g8iSY8MeZAdkPGDvZ3KKeBrupF4.roa (raw, json)
Hash identifier:          sZ1AgiFylQqTP1e9fB9BDY0FGEYY7w+AF7c/xFfSFjY=
Subject key identifier:   83:C8:92:63:C3:1E:64:07:64:3C:60:EF:67:72:8A:78:1A:EE:A4:5E
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       05C1B9F9
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/g8iSY8MeZAdkPGDvZ3KKeBrupF4.roa
Signing time:             Sat 01 Jan 2022 11:59:15 +0000
ROA not before:           Sat 01 Jan 2022 11:59:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12778
IP address blocks:        2a0e:ce40::/29 maxlen: 29
                          2a02:d80::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96582137 (0x5c1b9f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Jan  1 11:59:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83c89263c31e6407643c60ef67728a781aeea45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:b7:87:02:7d:f6:3c:54:8a:2d:26:6e:24:
                    80:c8:a4:56:44:79:2e:4e:e9:4c:a9:71:ad:94:b5:
                    69:28:e8:f9:b1:bf:d6:48:d0:9a:10:2a:12:76:ab:
                    86:bc:c2:52:12:9c:d6:c4:8d:38:1d:8d:32:8a:fe:
                    b0:f3:e3:30:98:ea:ab:a6:0e:0b:27:5b:32:54:90:
                    b3:79:1a:c1:3a:88:d0:99:12:44:b6:62:6b:69:93:
                    fd:2c:03:e7:d1:e5:d2:d3:a4:6e:f7:d4:5d:a7:9a:
                    25:3e:c4:8a:2f:ce:34:b7:dc:6f:9c:3d:83:e7:07:
                    8a:f2:9b:01:14:c2:2e:7b:3b:8a:83:47:0a:98:ad:
                    25:ca:c9:94:8f:3a:b9:89:a1:84:1b:50:0c:22:df:
                    36:0b:c6:e3:72:c4:ac:04:cc:95:bf:8e:92:8b:85:
                    f3:d2:07:9c:d4:b6:48:3c:45:c6:5c:3d:b8:66:a9:
                    c0:91:b5:70:f4:0a:ac:d7:b0:a8:70:d5:4d:52:95:
                    a5:d0:b5:06:36:fd:57:8b:f2:dd:90:65:d0:57:4c:
                    23:e7:3a:85:bb:11:f5:21:9e:38:1f:34:a3:01:41:
                    8c:c0:47:a7:0f:d8:20:9c:ed:a1:32:41:30:c3:97:
                    5e:91:a1:54:e8:bf:9b:56:1c:de:87:0a:40:98:54:
                    de:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C8:92:63:C3:1E:64:07:64:3C:60:EF:67:72:8A:78:1A:EE:A4:5E
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/g8iSY8MeZAdkPGDvZ3KKeBrupF4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:d80::/32
                  2a0e:ce40::/29

    Signature Algorithm: sha256WithRSAEncryption
         75:14:af:08:76:dd:2c:8a:66:8c:d0:94:c1:a4:2d:0a:06:d2:
         27:c0:a6:fc:dc:2a:69:c7:ea:3c:c4:dc:80:94:f7:27:71:0f:
         76:93:69:57:cf:67:91:01:f1:02:c1:3e:9d:be:69:72:5f:5e:
         65:4b:ee:2a:56:58:2a:10:d2:49:45:95:2a:06:c1:6f:8d:84:
         38:fe:5b:f3:b1:3c:b4:bf:f6:d9:0d:f1:6f:87:3d:9e:92:ce:
         b5:9d:be:87:b9:72:99:98:9f:46:56:bb:d7:8c:d4:8c:2a:4d:
         71:dc:2d:c3:3b:62:dc:64:03:b1:34:04:b5:3d:96:36:86:a6:
         dd:72:1a:c3:5a:cd:5a:c3:fe:4d:5f:3f:c2:f0:33:e6:cb:5c:
         84:d1:fb:6d:e5:4c:77:c2:dc:34:2f:09:ab:2e:e9:43:40:b8:
         64:7b:e9:c5:46:06:85:90:11:e9:36:50:1e:bf:f7:11:64:29:
         a1:2a:4a:8c:69:05:9d:95:75:c5:c5:82:b2:5c:df:b7:33:df:
         cc:fa:22:eb:36:17:47:c3:fc:4e:76:5a:cd:c6:dd:54:71:6f:
         09:98:3d:4e:2f:5c:e0:c7:11:5d:a8:e7:36:1b:92:a3:9d:4c:
         bb:3d:30:7a:20:b9:cc:9b:f1:ad:df:56:11:33:e4:58:30:f5:
         b0:d7:f3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----