Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/87FpLe0IPdr_cdm2o_2WeuFB7qA.roa
File:                     87FpLe0IPdr_cdm2o_2WeuFB7qA.roa (raw, json)
Hash identifier:          zMszwDhPMxA3PbrTq0/3nfpL3z8m70pD3k3RLVbs0yI=
Subject key identifier:   F3:B1:69:2D:ED:08:3D:DA:FF:71:D9:B6:A3:FD:96:7A:E1:41:EE:A0
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       01847164D163B4E9796F118F756AD5AE671D
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/87FpLe0IPdr_cdm2o_2WeuFB7qA.roa
Signing time:             Sun 13 Nov 2022 14:29:03 +0000
ROA not before:           Sun 13 Nov 2022 14:29:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31898
IP address blocks:        2a06:e881:116::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:71:64:d1:63:b4:e9:79:6f:11:8f:75:6a:d5:ae:67:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Nov 13 14:29:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f3b1692ded083ddaff71d9b6a3fd967ae141eea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:04:99:82:c0:3e:b1:e8:ff:f1:a2:d5:82:
                    c3:41:a4:8e:a1:86:56:33:82:a6:16:57:bd:ae:62:
                    bf:48:39:99:20:6a:05:e0:6a:8f:ee:34:8d:46:d5:
                    90:ef:66:c0:8d:bb:b0:44:d0:48:ab:92:a4:bf:38:
                    32:3e:29:7d:6c:ba:cc:2b:6d:3e:7c:7a:e4:e5:6b:
                    4a:f3:50:0d:d9:60:f7:d7:bf:0f:5a:d9:d8:1b:02:
                    0d:3c:71:73:6a:38:2c:7e:06:57:e1:b4:e4:c2:e3:
                    66:5d:d0:9a:ca:27:18:54:8b:2c:0f:af:ff:97:1b:
                    40:14:ac:21:28:60:47:db:96:c0:0c:b7:e5:a3:e4:
                    47:c9:83:7a:8a:b5:65:62:c3:0e:df:82:9d:1b:34:
                    bc:5f:fe:46:e5:02:5f:ac:f4:4f:9b:85:ef:ea:91:
                    7d:a5:76:c9:ab:6c:aa:66:19:ee:85:4d:32:e5:8b:
                    20:8d:1b:1f:65:2f:d2:87:f1:af:d2:30:31:0a:de:
                    ae:8f:03:b0:7f:01:2a:45:ae:a4:df:b9:77:1d:82:
                    3f:54:fb:8d:1f:d3:56:47:8a:cb:9f:fe:91:1b:6f:
                    61:cb:85:00:6d:0d:69:31:19:fc:ac:52:1c:73:1d:
                    51:5c:48:5c:a0:a8:05:b2:3b:b6:c8:81:1b:10:f2:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B1:69:2D:ED:08:3D:DA:FF:71:D9:B6:A3:FD:96:7A:E1:41:EE:A0
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/87FpLe0IPdr_cdm2o_2WeuFB7qA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:116::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:5e:9a:c2:5e:56:f2:8c:d4:d7:a3:a9:98:09:8e:88:72:
         b2:95:d9:07:ca:2e:f3:bf:a1:e9:e0:41:f5:30:74:9a:ae:0b:
         b7:99:a9:8b:1a:55:46:f7:ae:58:72:cb:0d:50:7d:de:3a:9c:
         8e:81:59:34:70:a0:3f:31:c7:eb:4d:5e:f9:0d:fc:8f:85:a1:
         14:cd:56:db:3e:39:7c:2f:69:19:1f:ad:6a:c4:50:66:4c:26:
         f1:43:8f:e9:9f:7e:f6:f3:a0:c2:81:e9:19:2c:94:23:19:e1:
         09:f2:39:26:8f:2a:c9:59:d3:02:5a:7c:ed:97:3f:7d:35:98:
         6d:75:85:e5:23:e0:99:f1:f5:fd:a0:a9:35:ae:fb:e7:21:92:
         67:46:d6:1a:ea:76:e8:1a:1c:4d:f5:1b:5d:6c:b7:cd:25:3e:
         e5:f8:11:8d:ec:55:a3:ef:5f:f2:7f:b9:f0:a3:ff:b5:2c:c9:
         40:e2:76:a0:82:b8:a3:a9:5c:84:21:53:b6:e3:29:9b:51:65:
         6e:84:c6:01:76:b3:a3:85:c0:dc:1b:08:be:09:45:82:f5:e9:
         3f:4b:ac:10:f1:af:7d:4c:3c:cc:c2:0c:67:c2:c7:af:b1:b8:
         94:9a:16:73:f8:a5:28:97:27:19:a7:d4:07:e5:82:bd:9b:da:
         57:4c:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----