Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/VTyQGpWYAC-37zLJcZTAJwrl0jc.roa
File:                     VTyQGpWYAC-37zLJcZTAJwrl0jc.roa (raw, json)
Hash identifier:          eijuTbhtwIu0K2bwC3Ja+Yk8adSsWHGUB7NY86rNcoE=
Subject key identifier:   55:3C:90:1A:95:98:00:2F:B7:EF:32:C9:71:94:C0:27:0A:E5:D2:37
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       09903DD5
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/VTyQGpWYAC-37zLJcZTAJwrl0jc.roa
Signing time:             Wed 08 Jun 2022 14:27:03 +0000
ROA not before:           Wed 08 Jun 2022 14:27:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     10753
IP address blocks:        2a0d:4180::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160447957 (0x9903dd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: Jun  8 14:27:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=553c901a9598002fb7ef32c97194c0270ae5d237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6b:ad:65:6f:b5:24:3c:0e:45:d4:94:65:1d:
                    2d:08:c6:94:9b:67:31:e3:6f:32:d6:33:df:9b:5b:
                    61:0f:5e:59:94:73:05:94:d7:09:3d:39:2b:e9:2c:
                    15:74:4a:83:0e:40:67:6b:c1:a7:cc:53:2f:62:c7:
                    e9:e5:da:c5:58:6a:61:1b:8c:27:bc:90:1f:b1:b9:
                    6c:a2:af:85:a8:c1:17:36:99:41:75:cf:5f:2f:92:
                    2c:01:68:9a:0c:31:95:89:a0:a4:6d:a0:37:6b:6d:
                    38:dd:ed:08:fe:f2:f6:74:e7:d6:af:d8:fd:7a:b0:
                    5b:72:1e:5c:bd:41:24:ec:cc:fc:0c:04:92:35:0a:
                    96:6c:53:bf:db:76:2c:00:9c:c9:49:36:de:a5:e3:
                    be:c4:14:26:79:6f:e6:33:72:cb:63:b8:ca:e9:09:
                    6e:8f:c8:43:02:ee:62:d3:22:15:a4:38:14:f0:d2:
                    59:67:48:86:2c:52:55:66:d8:77:a2:07:82:06:87:
                    bb:32:f8:69:bb:0c:00:b2:4f:84:e2:b9:d1:9e:7d:
                    b8:9a:49:67:3f:6a:0e:9e:20:45:06:33:2b:36:ae:
                    46:b0:65:70:1a:59:dd:11:5e:7c:34:cb:df:b9:63:
                    40:4c:a1:21:e4:64:4b:49:50:a2:4e:12:fe:e2:b3:
                    c2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3C:90:1A:95:98:00:2F:B7:EF:32:C9:71:94:C0:27:0A:E5:D2:37
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/VTyQGpWYAC-37zLJcZTAJwrl0jc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:4180::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:6b:fa:ca:18:a1:b6:34:25:bb:81:1c:ad:87:23:82:16:f0:
         08:76:06:21:f5:e7:2c:46:9a:40:d3:27:45:ae:7a:a6:3d:a0:
         41:22:c4:71:1f:0e:f4:0a:c5:27:7b:55:e9:02:35:2b:a7:68:
         eb:30:a5:f6:1a:54:6d:5a:95:b8:ac:1f:e6:d8:a5:99:da:b4:
         05:32:09:9a:82:46:ff:90:f4:7a:d1:98:25:3d:7d:29:a4:c9:
         7b:5b:1d:8d:9f:73:82:4e:de:a2:85:25:3f:86:5f:6e:b3:0c:
         86:93:24:87:59:8c:cf:c0:7e:7c:3c:01:11:36:52:f7:b4:c3:
         a3:ab:53:ca:fe:3a:25:a6:c2:e7:8d:03:c6:fd:2e:51:75:3f:
         65:12:e5:d1:30:9b:cb:f0:16:69:d0:a8:20:bf:aa:7a:08:f3:
         a5:dd:42:b2:a0:ab:4f:3a:bb:b1:25:f2:90:4b:d1:78:fc:03:
         1e:02:66:8c:13:65:e1:5d:8f:b2:32:f5:d5:88:05:75:4b:f4:
         5a:21:57:e7:e1:75:7e:e5:c8:a9:d7:60:2a:6a:39:47:74:d9:
         37:ea:74:50:0f:06:f7:f0:b8:96:1e:ef:ef:d8:66:dc:83:ab:
         00:02:07:07:e5:cb:eb:b3:39:1f:7f:5c:b2:ba:59:f9:4c:e2:
         d0:d7:09:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----