Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/L21KCZR4rVA_SV3QbyfaHcWbIFc.roa
File:                     L21KCZR4rVA_SV3QbyfaHcWbIFc.roa (raw, json)
Hash identifier:          ulu/NwU+rklHA5isnG6atZUwnnwpYH4wq6IPssKD4UA=
Subject key identifier:   2F:6D:4A:09:94:78:AD:50:3F:49:5D:D0:6F:27:DA:1D:C5:9B:20:57
Certificate issuer:       /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial:       34ED3833
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/L21KCZR4rVA_SV3QbyfaHcWbIFc.roa
Signing time:             Sat 01 Jan 2022 03:58:51 +0000
ROA not before:           Sat 01 Jan 2022 03:58:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41860
IP address blocks:        2a03:8880::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887961651 (0x34ed3833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
        Validity
            Not Before: Jan  1 03:58:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f6d4a099478ad503f495dd06f27da1dc59b2057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3d:be:da:b2:01:0e:7c:e9:92:89:48:0c:80:
                    e2:c3:a9:f4:d5:1e:15:80:43:98:5c:61:e8:93:be:
                    de:00:7d:cf:21:ad:67:b4:0d:af:9d:81:b0:0e:be:
                    1b:ef:f5:55:ac:ae:8b:0a:53:1f:32:69:6d:d7:91:
                    dc:42:37:b1:82:a6:73:7a:b5:36:38:ec:d3:5d:db:
                    c1:b7:6e:98:97:21:d8:2c:e4:d6:77:86:b4:6f:b0:
                    46:cd:47:46:b0:c9:bd:0c:19:3d:9a:79:aa:28:f5:
                    16:87:30:81:1b:e8:bf:fa:2f:e5:c7:85:d2:74:bd:
                    dc:60:f9:9b:93:ff:8d:dc:0c:25:71:c4:92:a1:c3:
                    63:a1:03:cc:2f:23:44:d7:97:3f:e7:7e:f7:51:66:
                    24:be:f2:2c:25:c7:a3:09:54:eb:02:16:09:49:8c:
                    55:fa:d5:45:72:e1:9e:4d:0c:48:87:65:5e:31:dd:
                    28:22:42:fe:8e:c0:ac:d9:46:ad:8d:42:a9:0f:66:
                    7d:13:65:3e:91:44:5a:c9:11:c7:b6:f6:e1:96:e9:
                    81:61:ae:a1:1d:46:d2:14:35:86:4a:4e:20:50:b7:
                    64:dc:21:12:44:ac:4f:1e:a0:bc:de:f0:c2:f3:17:
                    96:09:11:cc:a0:49:ff:85:4d:b3:a7:51:25:aa:69:
                    4c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6D:4A:09:94:78:AD:50:3F:49:5D:D0:6F:27:DA:1D:C5:9B:20:57
            X509v3 Authority Key Identifier:
                keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/L21KCZR4rVA_SV3QbyfaHcWbIFc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:8880::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:39:a9:13:14:03:92:a3:93:7f:23:20:8f:1a:b6:2b:df:b4:
         31:b1:82:ed:c7:f7:55:59:f8:a1:0e:91:ad:ae:1c:b2:08:81:
         e9:1c:b6:78:92:61:e8:83:d0:f3:a6:cf:18:f1:3b:66:48:b2:
         fd:83:18:5d:30:73:e1:0b:18:70:63:d8:91:a7:2b:98:a7:85:
         dd:87:93:e3:26:25:2e:cf:b0:c5:19:5f:b1:b4:58:83:a2:b2:
         56:38:d3:db:b4:47:ba:12:a3:f7:22:28:f2:a4:5c:ef:b3:78:
         eb:78:93:20:f4:b4:71:91:f2:e4:1d:6c:25:81:19:92:b2:aa:
         26:1b:0d:b8:3b:c6:fd:c9:3b:e4:45:bf:24:1d:f7:dc:67:ae:
         6f:02:59:14:a7:a0:59:3d:73:d6:e0:51:c7:0e:ed:a3:4b:c3:
         e8:f1:23:4d:a3:3d:c8:d5:1f:e2:5e:5e:d9:46:f3:6d:cc:de:
         77:2a:92:85:13:10:94:d3:de:9e:87:c3:f9:f8:62:cd:5f:c1:
         d3:f3:8d:1a:0f:64:2b:54:e9:d3:ba:71:35:1b:25:a7:93:55:
         f0:3d:7f:4f:a7:7b:3e:b6:ba:4f:63:2d:2c:8d:70:69:5a:bf:
         29:6b:a5:a4:b0:f2:3a:3b:1b:02:57:d1:4e:0b:90:b9:0f:21:
         8a:e5:e6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----