Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/44HVnO3Z4jieMM3e9mtUZYHul98.roa
File:                     44HVnO3Z4jieMM3e9mtUZYHul98.roa (raw, json)
Hash identifier:          TTHqepZXsY6G1lk8e19cZfGZ2Xz2Usr1v+owHT8Jq0Q=
Subject key identifier:   E3:81:D5:9C:ED:D9:E2:38:9E:30:CD:DE:F6:6B:54:65:81:EE:97:DF
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       0184C012FCF439DCCC08C6EB4F3E0317AC87
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/44HVnO3Z4jieMM3e9mtUZYHul98.roa
Signing time:             Mon 28 Nov 2022 21:09:40 +0000
ROA not before:           Mon 28 Nov 2022 21:09:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201950
IP address blocks:        2a06:e881:9500::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c0:12:fc:f4:39:dc:cc:08:c6:eb:4f:3e:03:17:ac:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Nov 28 21:09:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e381d59cedd9e2389e30cddef66b546581ee97df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:77:a2:90:19:89:ba:cd:64:e6:06:c5:fb:
                    8f:e4:27:4d:03:fa:8e:d1:b6:e3:f1:f1:0b:4c:4a:
                    6f:d1:78:14:76:31:6f:b2:e6:e4:30:2e:2b:f1:83:
                    82:2b:93:44:6f:62:57:9e:76:6f:bf:84:0a:99:6c:
                    91:93:cb:00:10:a8:15:61:b4:56:bf:ba:77:16:fe:
                    7c:c5:52:ed:31:9b:ec:ed:7e:d1:9c:90:61:d2:fd:
                    77:79:cd:95:6b:ef:99:55:19:7d:e0:ed:02:dc:c1:
                    9e:ae:48:41:7d:bc:95:05:fc:35:7f:5a:db:6f:ac:
                    cc:db:32:70:19:23:c3:29:35:66:d3:69:b0:51:21:
                    c0:93:ad:2f:60:62:2b:6b:86:39:3f:d3:c6:68:32:
                    1e:b2:56:aa:c4:08:16:0d:77:07:8b:a8:3f:56:10:
                    43:c4:f9:e2:77:93:23:16:cd:a2:4c:a2:79:84:8e:
                    a3:c0:31:96:41:86:fc:aa:11:85:8d:cd:d6:8b:7a:
                    2b:4d:e0:02:34:8e:5b:91:56:c5:0e:a4:3e:00:0e:
                    b6:86:dc:13:69:46:b9:a9:f2:cf:09:0c:0c:73:d5:
                    23:9c:86:80:c3:38:3e:c3:f8:25:fa:a1:db:43:77:
                    39:8f:57:ee:cc:51:aa:f2:8a:76:6d:96:5b:68:a1:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:81:D5:9C:ED:D9:E2:38:9E:30:CD:DE:F6:6B:54:65:81:EE:97:DF
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/44HVnO3Z4jieMM3e9mtUZYHul98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:9500::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:8c:84:c9:63:f9:ba:90:c5:42:28:27:51:07:a3:54:55:d4:
         f0:7b:e9:4e:3b:58:89:bb:7f:64:8c:d9:fe:38:ad:6a:ac:95:
         3a:2f:10:db:81:b4:4b:55:49:ff:d4:f5:4f:a5:ea:86:a5:0f:
         78:60:73:47:b4:8b:11:93:cb:a8:9e:a5:f5:db:a4:be:37:dd:
         8d:44:bb:62:1c:66:da:fb:6c:d1:26:ce:6c:4c:27:f8:0b:25:
         35:f3:71:a3:ea:15:13:5c:59:59:f9:c1:08:73:d6:b1:78:f4:
         a3:81:4b:8c:d4:be:f8:6e:43:0e:72:47:7e:25:0a:d4:5e:42:
         e8:eb:42:e5:64:aa:e4:fb:7f:c1:f0:f9:b4:0f:36:12:5e:34:
         02:d5:71:cf:1f:2b:de:74:d7:8e:4f:92:b6:a2:12:7b:4e:57:
         e2:db:af:aa:dd:b4:7d:93:c5:82:b1:89:74:2b:42:5a:ac:9f:
         23:25:8e:46:cd:ca:8f:02:c7:fb:3f:fb:19:01:28:f1:b4:c8:
         a4:fe:9d:6b:92:4e:63:03:f4:99:2c:d6:00:75:2c:7e:47:33:
         4c:4b:d3:1e:19:da:45:ea:1b:d7:6c:7b:87:3a:e0:de:46:dc:
         8b:a5:f5:db:10:54:45:d6:6e:6b:9c:57:6e:7a:15:ce:a1:87:
         e3:e5:a3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----