Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/KKtzZmiOPrXlZuDYkdLkWNqMsZI.roa
File:                     KKtzZmiOPrXlZuDYkdLkWNqMsZI.roa (raw, json)
Hash identifier:          nElRftoYhcmnChrVcj1h0qNDuK2P094kSl3btFBE5Sc=
Subject key identifier:   28:AB:73:66:68:8E:3E:B5:E5:66:E0:D8:91:D2:E4:58:DA:8C:B1:92
Certificate issuer:       /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial:       096AC277
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/KKtzZmiOPrXlZuDYkdLkWNqMsZI.roa
Signing time:             Sat 01 Jan 2022 15:58:22 +0000
ROA not before:           Sat 01 Jan 2022 15:58:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3209
IP address blocks:        2a02:45c0:17::/48 maxlen: 48
                          2a02:45c0:16::/48 maxlen: 48
                          2a02:45c0:14::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157991543 (0x96ac277)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
        Validity
            Not Before: Jan  1 15:58:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=28ab7366688e3eb5e566e0d891d2e458da8cb192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:69:69:14:20:73:d8:ad:bb:50:40:95:5c:
                    15:10:ab:c7:fb:33:e1:ab:4d:aa:2c:39:b2:1b:5a:
                    5d:50:d9:b3:71:fc:63:fd:69:74:0f:d6:57:a1:da:
                    e1:12:86:0a:f8:e8:0e:1b:77:72:6f:aa:6d:f0:82:
                    9c:77:02:6e:6f:45:bb:20:5a:dd:e7:d9:74:42:65:
                    d2:9d:a2:2e:43:ec:e3:ab:8a:85:27:a2:41:d8:d7:
                    af:e2:a5:4f:14:c6:4b:2d:10:67:28:d4:aa:f1:98:
                    99:7d:95:f1:1b:c2:25:ae:16:bf:63:76:0d:0a:88:
                    7a:86:56:ac:3f:d8:1c:fb:26:42:e3:59:17:f4:a4:
                    61:31:00:95:fc:5f:7d:1b:1d:ba:a4:99:8d:38:4c:
                    37:a1:44:0c:cf:b3:98:59:e2:3c:86:81:05:d2:57:
                    3a:2d:df:7d:15:6b:d9:79:f2:3d:c4:d4:2f:cd:86:
                    ce:92:86:ad:bf:8f:42:3e:ac:0f:64:ab:af:24:2a:
                    85:08:19:2b:02:d8:e1:28:f8:d3:5b:dc:a2:68:8b:
                    97:6c:72:82:e0:06:7d:2f:4a:c6:83:5d:29:25:9c:
                    8e:07:7a:fa:34:c7:4b:7f:dc:81:8f:f1:60:74:14:
                    23:a2:a1:c4:ee:0d:5d:80:67:74:c4:92:43:fd:d3:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AB:73:66:68:8E:3E:B5:E5:66:E0:D8:91:D2:E4:58:DA:8C:B1:92
            X509v3 Authority Key Identifier:
                keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/KKtzZmiOPrXlZuDYkdLkWNqMsZI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:45c0:14::/48
                  2a02:45c0:16::/47

    Signature Algorithm: sha256WithRSAEncryption
         1f:4b:1f:8b:07:2e:0e:69:ac:4f:0f:ae:9d:19:e7:91:94:6c:
         5a:59:a1:87:62:08:64:d4:a6:ec:96:60:8b:2e:97:cb:38:3d:
         81:16:d4:13:0e:c6:8f:39:37:c0:39:77:4e:4c:21:ca:a1:d1:
         e1:c8:65:08:e4:cc:8e:da:ee:d6:2d:86:28:6d:83:09:58:a6:
         d4:6c:12:ac:d9:a1:4f:f5:da:1d:97:c3:3b:8b:52:2e:13:e0:
         70:51:bc:ee:37:13:e7:49:db:9e:b9:1c:04:57:63:51:2c:6c:
         1f:e3:16:a3:ba:c0:e5:53:b3:91:c7:d2:90:17:12:4a:50:f4:
         7e:76:60:8b:5a:5c:ab:d1:da:3d:42:3a:75:f2:65:d9:a9:a5:
         fa:2b:18:8e:05:66:81:7a:b9:72:f6:8f:f9:05:07:28:72:19:
         fb:83:1a:3a:09:b7:48:88:05:73:66:ce:1b:4d:3d:b1:39:52:
         7b:9f:ef:ee:af:b1:96:cc:b3:99:db:79:de:3f:94:9b:7e:49:
         7a:eb:14:e6:ec:08:9d:db:f6:71:7c:de:c1:cc:e9:86:3f:99:
         a5:b5:05:d6:29:43:47:be:ed:37:2d:5a:a0:ca:f5:b9:91:2a:
         9c:8e:e8:a8:86:63:79:06:2b:36:73:0b:a4:e9:b0:90:1b:d2:
         d2:32:79:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----