Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fPPjfZpctWw2Z65POz7fbktmGqs.roa
File:                     fPPjfZpctWw2Z65POz7fbktmGqs.roa (raw, json)
Hash identifier:          Ug6m72/IzjAGW6BLGxTV91DiQrvyFP4pP7dPHQrkuJw=
Subject key identifier:   7C:F3:E3:7D:9A:5C:B5:6C:36:67:AE:4F:3B:3E:DF:6E:4B:66:1A:AB
Certificate issuer:       /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial:       01854A2ED8DB85F6CC585E4A6D91BD0CFBD6
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fPPjfZpctWw2Z65POz7fbktmGqs.roa
Signing time:             Sun 25 Dec 2022 16:47:42 +0000
ROA not before:           Sun 25 Dec 2022 16:47:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     16509
IP address blocks:        2a06:e881:73ef::/48 maxlen: 48
                          2a06:e881:73ff::/48 maxlen: 48
                          2a06:e881:650f::/48 maxlen: 48
                          2a06:e881:9208::/45 maxlen: 48
                          2a06:e881:9200::/45 maxlen: 48
                          2a06:e881:9700::/44 maxlen: 44
                          2a06:e881:9300::/44 maxlen: 48
                          2a06:e881:9700::/48 maxlen: 48
                          2a06:e881:9600::/48 maxlen: 48
                          2a06:e881:9701::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:4a:2e:d8:db:85:f6:cc:58:5e:4a:6d:91:bd:0c:fb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
        Validity
            Not Before: Dec 25 16:47:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7cf3e37d9a5cb56c3667ae4f3b3edf6e4b661aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2c:74:59:6b:44:9c:59:9b:d2:bc:dd:27:1f:
                    1c:cb:3b:4c:aa:2e:6b:46:b6:f8:44:f3:e2:ab:ca:
                    ad:09:c3:be:e6:ff:03:81:e4:6c:40:6e:0f:6d:de:
                    d7:3a:47:ef:78:9d:34:1a:7c:d5:94:98:28:a7:29:
                    b5:d0:7d:b3:4c:ab:7c:c7:ee:0d:cb:9a:4a:8b:51:
                    57:b3:b3:0c:a2:f7:fe:6e:e3:47:f8:3d:bb:36:87:
                    fc:d7:38:f8:a4:27:ee:d0:67:20:41:b1:9b:95:71:
                    2b:dc:14:b2:65:92:54:4c:72:04:73:15:da:c0:d4:
                    7c:ab:e3:ff:4f:2b:00:b3:66:16:de:20:6c:cf:7e:
                    21:ac:9d:8a:e2:a4:52:d5:c8:19:7b:c1:71:35:8e:
                    a7:36:a3:c5:9f:42:63:0d:06:d2:d7:e4:21:1b:b1:
                    6c:bf:7e:ef:84:17:1d:65:d1:dd:44:ec:a3:6a:38:
                    99:1b:e6:75:f6:b1:1f:5f:dc:8a:d5:99:0d:88:33:
                    ab:88:36:2c:03:73:60:15:89:99:55:47:de:5e:aa:
                    5f:ff:bf:11:8d:f6:63:87:c4:b3:92:e8:b1:ed:cd:
                    b6:f2:11:52:e5:d2:7c:7e:0c:c1:89:40:8e:44:93:
                    b3:c9:2f:b1:0c:79:47:76:06:df:31:b6:19:b2:a4:
                    d2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F3:E3:7D:9A:5C:B5:6C:36:67:AE:4F:3B:3E:DF:6E:4B:66:1A:AB
            X509v3 Authority Key Identifier:
                keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/fPPjfZpctWw2Z65POz7fbktmGqs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:e881:650f::/48
                  2a06:e881:73ef::/48
                  2a06:e881:73ff::/48
                  2a06:e881:9200::/44
                  2a06:e881:9300::/44
                  2a06:e881:9600::/48
                  2a06:e881:9700::/44

    Signature Algorithm: sha256WithRSAEncryption
         da:9c:63:64:cd:57:d4:53:14:e8:55:f2:c8:3b:3d:64:5b:49:
         ad:af:1e:30:9d:f4:5b:45:dd:07:32:71:d2:8a:67:f7:eb:3b:
         b3:b8:3c:9a:2b:b5:e4:f4:ae:1c:a2:ac:c0:1e:65:1e:2a:9e:
         cc:3d:6b:87:a6:37:ed:47:df:46:75:40:62:4b:33:9e:97:09:
         e4:28:57:9b:d3:21:a0:85:c5:9b:3d:38:b2:98:69:7c:d4:47:
         a6:b5:f7:7e:94:58:84:89:c6:10:6b:81:db:5e:70:23:78:f7:
         2e:91:eb:27:c8:53:95:b3:30:c4:2d:37:08:9b:27:c7:70:fb:
         5e:fc:73:fd:5e:62:79:91:0c:60:4c:48:92:19:f4:a6:8d:76:
         0f:4b:7b:17:20:47:48:23:20:11:12:69:b9:4a:07:2e:26:4b:
         39:82:10:d8:12:9c:5b:dd:1b:f1:79:a7:3c:1b:d6:39:64:d6:
         0d:8d:61:8d:2c:63:dd:15:c1:fc:5c:b1:2a:7d:2f:fa:50:2f:
         10:71:c0:81:30:c3:70:2b:af:02:fd:23:b9:93:54:e3:ce:99:
         f0:06:04:d1:18:62:1a:5a:1c:cf:53:ba:ca:9c:53:bf:c1:ae:
         3c:a1:bb:21:fd:e3:ef:9c:2d:88:93:98:ea:80:30:50:44:dd:
         b9:ec:ca:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----