Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/f_EOkK-jWq6ciEpiHzaN9Y0er_4.roa
File:                     f_EOkK-jWq6ciEpiHzaN9Y0er_4.roa (raw, json)
Hash identifier:          UBQw7AkukfzsnIksCakRdS07O1+2lMGgxRJypE4MxGg=
Subject key identifier:   7F:F1:0E:90:AF:A3:5A:AE:9C:88:4A:62:1F:36:8D:F5:8D:1E:AF:FE
Certificate issuer:       /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial:       060B7D9D
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/f_EOkK-jWq6ciEpiHzaN9Y0er_4.roa
Signing time:             Sat 01 Jan 2022 16:01:28 +0000
ROA not before:           Sat 01 Jan 2022 16:01:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212448
IP address blocks:        2a0d:f407:1017::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101416349 (0x60b7d9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
        Validity
            Not Before: Jan  1 16:01:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ff10e90afa35aae9c884a621f368df58d1eaffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:b7:43:d9:e3:15:28:92:59:5b:03:57:fb:
                    84:a8:79:c4:71:d4:32:07:9d:45:da:60:a0:da:0a:
                    5b:2a:7a:67:a1:51:6e:85:c4:5b:d9:e2:6d:75:98:
                    a8:46:d5:1f:5e:cb:15:6a:22:63:fa:d8:cb:5a:61:
                    3e:48:15:86:82:40:22:e5:9d:e2:1d:e1:7c:cd:19:
                    ef:66:09:88:64:ca:b4:55:84:e9:6a:90:64:05:3e:
                    b4:f7:70:5e:ae:d7:ed:4b:13:03:21:75:10:1d:99:
                    f6:43:77:d0:ad:67:ab:da:d5:4b:10:23:e0:9c:c9:
                    e1:bc:79:51:86:2a:cc:a0:d4:f5:8b:68:2e:03:48:
                    2b:d0:ae:00:c4:9d:3f:f2:68:6e:8a:f0:fa:e7:3a:
                    9f:3b:ba:52:dd:29:d4:89:2f:7a:44:33:5f:34:dd:
                    24:ae:cf:a0:2d:0c:cc:c5:d6:e1:2e:fe:8c:5a:48:
                    2d:d2:c3:8c:fa:d4:eb:a1:67:bf:9f:96:8f:71:e1:
                    9e:7f:67:4d:e1:8d:bc:c2:ba:c3:fa:89:a3:cc:b2:
                    e8:df:df:13:fc:60:0d:cd:9d:4c:6c:20:37:9a:49:
                    70:54:d7:89:ce:b2:90:40:2a:fe:06:d8:05:d7:f6:
                    ca:80:fc:9e:e7:00:f1:b5:dc:62:92:af:32:70:73:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F1:0E:90:AF:A3:5A:AE:9C:88:4A:62:1F:36:8D:F5:8D:1E:AF:FE
            X509v3 Authority Key Identifier:
                keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/f_EOkK-jWq6ciEpiHzaN9Y0er_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:f407:1017::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:86:61:9b:6f:77:d4:f0:2a:0d:3a:9b:45:78:d5:35:13:f0:
         d0:ca:53:eb:06:e8:2c:6d:20:4b:a3:a7:8f:c5:3a:80:f1:38:
         1d:ba:5a:3c:3f:93:c4:08:3f:02:f1:32:31:58:21:71:1a:ef:
         ef:56:73:8d:73:d8:21:c6:69:19:53:f3:8a:24:92:8f:82:35:
         8a:46:71:f4:7e:6b:39:a3:94:4e:12:9f:78:d9:5a:09:30:c5:
         09:de:2e:28:d6:65:44:7c:95:82:71:32:c8:ec:3b:92:79:1f:
         d7:3e:ec:ae:05:1d:1a:78:01:2f:71:c9:e6:d8:fa:56:82:51:
         8f:81:96:51:64:18:bf:c6:ce:e6:a4:d2:49:52:9f:b3:00:62:
         41:34:7f:ca:0d:c6:0e:5c:75:2c:fc:e5:8b:2d:a5:12:b5:06:
         f4:5f:dc:ca:d6:98:18:3c:45:bc:7b:48:88:d0:61:90:87:f2:
         49:6e:82:b9:ba:38:7a:ca:19:65:3f:18:cb:bc:a2:fd:5c:39:
         01:89:2c:54:2f:ce:53:43:3b:a5:a5:2b:fb:59:a7:c6:17:6a:
         92:15:83:1f:cf:98:22:cf:5a:82:14:cc:94:5c:3b:8a:2d:d8:
         17:8c:cf:14:2a:d8:70:f5:f6:a3:69:61:f8:20:dd:f7:a2:4d:
         9a:95:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----