Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/ELT3VGE4UGNlytaDlFHdJGVl02Q.roa
File:                     ELT3VGE4UGNlytaDlFHdJGVl02Q.roa (raw, json)
Hash identifier:          pXSmLI+sTrEE9no3PqhttbG48Szw+VkaJmkgLktkTg8=
Subject key identifier:   10:B4:F7:54:61:38:50:63:65:CA:D6:83:94:51:DD:24:65:65:D3:64
Certificate issuer:       /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial:       0E9022
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/ELT3VGE4UGNlytaDlFHdJGVl02Q.roa
Signing time:             Tue 11 Jan 2022 16:26:46 +0000
ROA not before:           Tue 11 Jan 2022 16:26:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210251
IP address blocks:        5.1.120.0/23 maxlen: 23
                          2a02:e740::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954402 (0xe9022)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
        Validity
            Not Before: Jan 11 16:26:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10b4f7546138506365cad6839451dd246565d364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:77:c0:9a:1f:38:9e:e9:30:69:54:a5:e5:94:
                    00:0e:02:ae:fa:bb:c3:b8:a0:0e:d1:50:27:35:dc:
                    31:b2:91:47:e0:53:0e:de:b4:68:52:19:c4:a5:be:
                    73:c0:4f:b2:71:d9:62:40:a5:01:54:c5:7b:b5:3e:
                    68:0f:11:c5:65:c6:f6:a3:3a:51:3b:df:4a:b8:04:
                    2e:64:92:da:63:52:2e:2c:b9:67:7a:62:c6:d9:2d:
                    2f:a7:64:4b:97:37:d3:c6:13:90:90:cb:97:c1:ac:
                    37:33:7a:e0:93:0e:f2:64:30:2e:5a:bb:8e:8b:ca:
                    ef:62:dd:6f:09:61:ee:5d:19:12:93:7c:81:5b:38:
                    c0:f9:72:62:1d:41:7b:ba:8c:4f:0a:74:7e:95:9b:
                    b0:c3:f4:09:cb:67:67:fe:8f:2c:3d:61:01:38:62:
                    96:5e:05:aa:87:66:a4:04:c1:ea:81:e2:6d:36:04:
                    cb:90:0d:90:b6:b0:88:5a:07:a1:74:93:3b:c2:72:
                    f1:60:aa:a8:d4:f4:e7:a6:2e:25:90:f5:ca:b9:c6:
                    e0:e9:1d:db:d8:b5:08:13:6f:e8:09:be:d7:0a:52:
                    b7:20:1e:c4:a8:86:5f:c3:c5:48:5c:85:a9:7f:27:
                    8d:00:82:d0:13:14:6d:8e:18:65:d4:dc:6d:93:cc:
                    ff:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B4:F7:54:61:38:50:63:65:CA:D6:83:94:51:DD:24:65:65:D3:64
            X509v3 Authority Key Identifier:
                keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/ELT3VGE4UGNlytaDlFHdJGVl02Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.1.120.0/23
                IPv6:
                  2a02:e740::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:f9:26:7d:c7:b3:7d:2d:94:9d:bf:67:b0:1c:f5:69:b2:24:
         f2:2f:fe:b4:89:c6:6c:ad:55:e0:c1:ca:34:02:60:3d:1c:3e:
         7d:fe:9c:57:05:0d:66:8b:df:5e:3d:a3:91:cd:38:c3:d6:79:
         59:9c:0d:63:94:26:ee:d7:77:8f:62:fd:0a:cc:a1:d4:80:27:
         73:29:97:61:6a:9d:cd:87:0e:f2:57:77:93:dd:b2:05:98:36:
         08:37:11:29:f9:2d:c7:d7:6a:04:63:0b:d3:3b:82:c8:24:12:
         ac:59:28:03:dc:34:1d:c9:39:cf:d3:ca:2f:83:93:5d:c6:e2:
         50:c4:4d:61:46:3e:4f:9b:79:6f:5e:87:b1:28:cf:a0:06:ba:
         5f:62:97:3b:87:5a:86:e0:bb:94:f8:ed:1c:fa:3b:e5:cd:6d:
         64:7b:74:11:4e:ca:90:7d:66:40:18:73:7e:02:ec:21:46:f7:
         1b:7c:28:51:fe:bf:b4:1d:05:ce:02:f8:9b:7d:ab:ff:1f:e5:
         1c:ba:ec:f7:a0:47:50:bc:da:67:02:45:b3:2a:6e:68:4c:21:
         e5:07:8c:a5:6d:e3:10:1f:4c:26:42:8f:d9:c7:8e:71:96:84:
         27:49:dc:bf:56:80:f1:d3:92:84:17:e0:dd:1c:8c:8e:6f:81:
         70:db:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----