Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/zvZdGD6FOUthssog0qIuMGNqu8A.roa
File:                     zvZdGD6FOUthssog0qIuMGNqu8A.roa (raw, json)
Hash identifier:          1W2QRy9jtchpIpd11obgU6mZEuUo2iGphh0C6qh2AIk=
Subject key identifier:   CE:F6:5D:18:3E:85:39:4B:61:B2:CA:20:D2:A2:2E:30:63:6A:BB:C0
Certificate issuer:       /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial:       05F8D499
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/zvZdGD6FOUthssog0qIuMGNqu8A.roa
Signing time:             Sat 01 Jan 2022 16:01:15 +0000
ROA not before:           Sat 01 Jan 2022 16:01:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17818
IP address blocks:        2a0e:9300::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100193433 (0x5f8d499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
        Validity
            Not Before: Jan  1 16:01:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cef65d183e85394b61b2ca20d2a22e30636abbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b7:4d:57:d7:b0:63:47:1c:07:48:c2:ea:74:
                    e5:53:db:be:dc:2c:d9:94:e7:41:6c:27:cf:e3:99:
                    25:f9:c1:c0:25:f0:0c:3f:51:80:6b:c0:fe:7c:2f:
                    63:b3:bc:d5:8c:65:7e:e8:3a:bf:b7:5b:3b:5b:69:
                    5b:36:a8:be:4e:da:06:28:4f:95:f0:7f:84:b1:d3:
                    b8:18:e3:ac:cb:c3:6e:e8:8c:cd:1d:19:c8:8c:55:
                    38:d1:69:a5:87:c5:75:20:a0:16:07:e7:0a:d6:18:
                    a0:75:4c:c2:bf:fb:72:e6:3e:be:a2:06:12:d2:55:
                    ea:f6:8c:df:d4:7e:ec:c2:80:d9:5b:5a:4d:e2:20:
                    69:ba:8a:f2:9f:4a:ab:53:4a:7c:a7:b2:6d:42:57:
                    2c:98:cf:f8:dc:05:6e:63:2a:35:e8:72:41:2d:96:
                    48:a9:04:5d:f7:15:e2:4f:c0:29:87:7f:cb:6d:08:
                    dc:cc:de:3f:58:83:1b:b8:fc:fa:d3:18:9a:41:de:
                    b6:d7:e7:2d:ab:2c:39:2f:ac:45:4c:b7:b2:2f:b7:
                    62:36:d3:84:cf:49:3a:05:56:a2:1f:ff:88:36:22:
                    eb:1d:ca:0e:5f:06:fa:6b:77:d9:44:f4:ce:8a:37:
                    d6:80:27:cd:01:80:4c:79:d2:38:99:1e:b5:82:a9:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F6:5D:18:3E:85:39:4B:61:B2:CA:20:D2:A2:2E:30:63:6A:BB:C0
            X509v3 Authority Key Identifier:
                keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/zvZdGD6FOUthssog0qIuMGNqu8A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:9300::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:98:81:a5:00:96:04:d6:d7:50:d3:71:dd:15:c3:5b:1f:ac:
         08:f7:32:eb:63:c9:39:5c:8e:e8:93:5b:51:9e:c5:a6:69:01:
         2b:37:16:e2:d3:96:0d:52:5e:da:59:f9:22:84:d6:87:a4:f0:
         12:5b:37:d0:40:d8:d5:a7:9c:31:b5:7b:f1:5a:c8:86:55:0f:
         be:e7:7b:8d:7c:90:fe:32:4e:72:32:9a:83:a3:17:e9:bb:9f:
         71:9b:77:5f:74:25:72:70:2a:13:2a:21:6e:83:0b:29:2b:91:
         f3:af:bd:00:1f:42:69:0b:6e:2a:0a:67:1c:36:0e:5e:7b:58:
         0c:34:28:7c:1e:36:ba:a4:fc:15:ec:d4:7a:66:c4:65:89:7a:
         94:e7:84:03:46:50:24:d8:29:5c:b2:ac:50:24:d4:d6:03:70:
         cb:57:e8:71:0d:70:0e:5f:a2:72:93:54:42:b4:37:6a:33:51:
         93:e2:61:af:55:03:e9:3f:30:ea:2a:3f:43:32:51:e6:ed:6d:
         18:ae:d3:b5:82:4f:ac:cd:b6:76:c4:b9:49:fe:df:43:b0:66:
         a6:bb:47:cf:17:0c:f4:24:a9:bc:a3:67:28:2d:33:c4:05:b9:
         ce:ea:81:af:30:b3:f1:bc:88:72:b4:09:3c:3e:37:68:f6:38:
         e9:36:cc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----