Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/j0vGwuzxrTNl9gfgvEyttQFl7Gk.roa
File:                     j0vGwuzxrTNl9gfgvEyttQFl7Gk.roa (raw, json)
Hash identifier:          Q5DgZyI0iCqwRImKMgU3N/BpJy8k2QOvPyITdpWM6n4=
Subject key identifier:   8F:4B:C6:C2:EC:F1:AD:33:65:F6:07:E0:BC:4C:AD:B5:01:65:EC:69
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       07A10B82
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/j0vGwuzxrTNl9gfgvEyttQFl7Gk.roa
Signing time:             Sat 01 Jan 2022 08:01:43 +0000
ROA not before:           Sat 01 Jan 2022 08:01:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24013
IP address blocks:        2a09:7:1000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127994754 (0x7a10b82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jan  1 08:01:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f4bc6c2ecf1ad3365f607e0bc4cadb50165ec69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:19:0d:28:c1:dc:82:b8:b5:c9:b9:1d:36:84:
                    51:5f:1a:5c:d6:60:71:37:9a:ff:6c:fa:04:98:79:
                    e6:02:7c:25:7b:5b:43:29:cc:b3:d1:3d:85:46:02:
                    d1:c8:28:9a:08:eb:16:ad:50:1f:fa:5d:da:1d:7d:
                    2a:e2:8d:3c:36:90:91:cc:a2:df:47:88:f1:85:97:
                    39:50:42:31:16:e8:49:30:2b:74:dd:3b:60:4f:39:
                    29:5a:04:34:35:b6:05:33:e3:5e:05:67:6d:0c:05:
                    ca:19:a4:07:72:6e:2f:af:b9:dd:65:f6:60:f9:d9:
                    5a:94:4a:c5:b8:91:da:a9:7c:0c:fd:46:27:bd:53:
                    8f:b5:42:f9:6c:cf:f5:be:52:29:9a:73:bc:e9:59:
                    4b:cd:fa:13:a3:5e:cf:a0:ef:14:3a:36:4e:d5:8c:
                    3b:6d:12:9a:9f:a3:3d:43:69:7c:da:2b:ce:18:c8:
                    42:d1:24:c6:d0:42:8b:2f:6b:41:ba:1e:c4:6c:07:
                    96:63:50:d0:85:ed:a7:df:08:51:03:22:ec:49:78:
                    c9:9a:e5:76:e0:17:b1:0c:42:34:cc:c2:e2:09:ac:
                    d9:98:32:66:21:21:5f:58:00:f4:2b:2b:83:99:ef:
                    d4:c2:ad:e0:01:93:ab:44:19:71:ef:75:71:54:7b:
                    1d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4B:C6:C2:EC:F1:AD:33:65:F6:07:E0:BC:4C:AD:B5:01:65:EC:69
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/j0vGwuzxrTNl9gfgvEyttQFl7Gk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:7:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         05:0c:8a:da:17:93:0a:3c:4b:55:d5:18:2b:b0:ed:6a:aa:03:
         bd:ae:ed:ab:5a:40:1c:6e:1c:4e:fc:76:e7:0c:f4:71:d9:44:
         ff:cf:9a:8a:cf:aa:45:a0:6f:9e:2c:e5:4b:54:fc:35:e0:cb:
         da:2c:e2:6a:2e:7f:63:df:f3:31:c2:e4:5c:6a:f1:b2:a4:5a:
         dd:b3:25:7d:62:23:43:39:c4:e2:d9:93:cd:1b:bb:0f:7a:02:
         5b:98:49:6e:82:e5:5b:ac:04:f2:eb:8b:26:6a:3f:1b:d3:61:
         1d:ab:29:be:ca:5a:4d:4b:1f:3c:41:5d:50:55:54:c0:78:e6:
         fe:e9:f6:50:e8:21:7f:72:5e:30:ea:0b:66:0d:2a:c3:b7:9a:
         35:a8:5f:65:f4:60:2a:4a:87:05:74:b4:c4:cf:e1:a0:c7:44:
         e8:da:56:d1:f2:44:1d:70:8d:39:1f:c3:3a:a1:f8:9c:ca:c8:
         80:b3:c9:66:5b:89:a3:e6:de:8d:55:74:84:bf:1c:0a:0c:fe:
         f9:94:15:7d:94:5d:0e:50:94:de:fb:b4:f5:68:0a:67:6e:5e:
         bc:00:0e:14:85:63:53:f7:e8:97:c1:8e:82:2d:b0:41:4b:4a:
         1a:f4:aa:4a:4c:f2:c6:d4:0e:0a:76:a5:84:89:d1:c4:4b:c6:
         84:49:d8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----