Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/LU_ytzcXPCLRYWspxJX2nC1WLmY.roa
File:                     LU_ytzcXPCLRYWspxJX2nC1WLmY.roa (raw, json)
Hash identifier:          OMf9hEvof9xIZ6HDIZ6X9k46VhO0Krc3dIoVlx8Dxns=
Subject key identifier:   2D:4F:F2:B7:37:17:3C:22:D1:61:6B:29:C4:95:F6:9C:2D:56:2E:66
Certificate issuer:       /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Certificate serial:       0880EF5A
Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/LU_ytzcXPCLRYWspxJX2nC1WLmY.roa
Signing time:             Sat 28 May 2022 08:29:13 +0000
ROA not before:           Sat 28 May 2022 08:29:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34427
IP address blocks:        2a0f:4280::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142667610 (0x880ef5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
        Validity
            Not Before: May 28 08:29:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d4ff2b737173c22d1616b29c495f69c2d562e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:17:b3:dd:9e:80:1e:26:f0:51:b5:d9:77:c4:
                    5a:40:35:c3:27:db:bd:70:e3:bc:44:74:b9:b3:63:
                    09:2e:94:f9:40:70:f0:f7:7c:a5:69:e4:50:ce:79:
                    0f:7e:70:d2:56:f6:d2:f2:a8:37:a5:6c:75:4d:ce:
                    e0:67:b6:e6:53:f0:99:35:15:cb:c9:77:42:0a:ed:
                    18:3e:f6:de:8c:2c:0a:1c:5c:56:05:17:f1:32:e8:
                    b7:09:03:d1:ae:cd:dc:24:61:a5:d1:20:89:a2:f7:
                    ab:ca:74:1e:69:c7:7a:17:98:65:27:20:65:3c:72:
                    38:ca:58:dc:b2:f6:3d:8d:95:63:23:9e:a9:ae:38:
                    a2:49:4e:04:8a:c2:e0:0c:60:ac:8b:9d:c8:69:16:
                    0f:64:0a:be:bb:dc:7e:e7:3b:7b:f5:ab:fb:99:8f:
                    08:88:a2:82:3f:ea:60:bf:88:7e:00:08:96:63:b3:
                    ce:c3:8c:4c:9b:d4:55:1a:3d:de:0c:5e:d5:97:83:
                    8d:e2:c8:db:50:e8:bb:6d:ca:15:96:1a:2c:d5:c6:
                    9a:36:91:26:f2:7d:e9:55:ec:62:4e:a6:7b:a1:3a:
                    c5:02:17:96:32:d5:55:51:a2:83:0a:3a:13:8d:c7:
                    30:8f:82:e0:28:08:af:82:ec:f9:ee:8e:29:cb:29:
                    50:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4F:F2:B7:37:17:3C:22:D1:61:6B:29:C4:95:F6:9C:2D:56:2E:66
            X509v3 Authority Key Identifier:
                keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/LU_ytzcXPCLRYWspxJX2nC1WLmY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:4280::/29

    Signature Algorithm: sha256WithRSAEncryption
         2c:d2:ee:cc:d4:22:27:34:33:4e:3b:00:b2:0d:75:09:49:21:
         d1:98:ea:e3:e2:aa:31:c9:c3:8d:0a:46:23:64:ff:be:41:a1:
         3e:2c:cd:ec:58:a2:2c:b1:4e:56:52:c8:79:e6:a5:88:01:5c:
         1f:af:d6:ea:ca:e9:86:c7:12:95:87:17:59:eb:73:90:97:db:
         9f:4e:e7:55:b2:cb:46:c4:bc:44:c7:86:d2:f0:f7:5f:65:90:
         6e:a8:f3:4c:af:62:d1:bd:f2:d6:5e:b1:ae:32:1b:6a:5b:1b:
         ba:dc:c6:81:54:8a:00:99:53:12:cc:8c:26:a1:9c:d4:91:59:
         42:b2:e0:ac:0b:5b:7a:ff:a0:bf:cb:d7:38:76:9d:a1:94:97:
         89:e1:a8:a1:b4:17:3c:e6:a3:df:74:08:74:78:27:fb:96:1f:
         55:f9:82:ec:61:7b:c7:fe:ee:f1:e2:51:42:37:32:cd:c6:db:
         b7:c6:eb:94:b3:e8:24:9c:a3:a8:ff:94:5b:5d:d0:16:e6:3f:
         20:a2:bc:1e:bd:e9:bf:bb:2c:99:a3:e9:28:16:7a:56:7a:3c:
         f4:a0:86:04:e1:4b:22:ef:d9:84:6e:a2:6a:e5:26:17:55:52:
         03:ae:d5:51:a5:f0:0f:dd:79:b7:f1:3b:62:ba:ee:91:a0:e4:
         f1:60:19:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----