Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/uBDHCxE6waQ8SMGHboA7kgwEE9M.roa
File:                     uBDHCxE6waQ8SMGHboA7kgwEE9M.roa (raw, json)
Hash identifier:          ubaRD9oveNF0z2/yZgW86EmHJ33MIiRJJJchDzjBzns=
Subject key identifier:   B8:10:C7:0B:11:3A:C1:A4:3C:48:C1:87:6E:80:3B:92:0C:04:13:D3
Certificate issuer:       /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial:       01828022D20122AC3EFF6233B15B53B138F4
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/uBDHCxE6waQ8SMGHboA7kgwEE9M.roa
Signing time:             Tue 09 Aug 2022 01:05:41 +0000
ROA not before:           Tue 09 Aug 2022 01:05:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210542
IP address blocks:        2a0e:da40:10::/44 maxlen: 128
                          2a0e:da40:1::/48 maxlen: 128

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:80:22:d2:01:22:ac:3e:ff:62:33:b1:5b:53:b1:38:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
        Validity
            Not Before: Aug  9 01:05:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b810c70b113ac1a43c48c1876e803b920c0413d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:47:d9:50:db:c5:0d:67:a6:b3:f3:4f:40:
                    2c:37:33:7b:80:ba:0e:83:73:28:fa:38:0b:84:d4:
                    41:0a:f1:a4:38:e2:3e:47:2f:e9:17:a1:25:24:9a:
                    18:86:2b:80:f3:5f:e7:2c:5c:eb:6f:a9:1a:08:f2:
                    b6:e5:05:25:03:39:93:8c:71:f0:14:d4:4e:33:73:
                    37:35:f8:ed:1f:de:d6:13:e3:88:d9:14:dd:bf:5a:
                    32:38:e8:43:06:e4:c1:9a:b2:54:2f:af:ee:fc:b7:
                    d5:1e:04:44:2b:55:4c:ca:ea:d3:cc:60:c6:11:7a:
                    7c:8c:85:75:39:7c:3f:6f:39:6f:1d:c7:5d:6a:a9:
                    6d:7b:6e:dd:7b:98:13:7a:b1:0f:c8:08:9c:c3:cf:
                    85:c0:9b:2b:a5:58:82:9f:f4:fe:85:29:01:75:8c:
                    e8:55:26:26:ba:74:ce:cd:0a:88:43:37:02:a4:bd:
                    ab:3f:0d:e3:e2:2f:95:8f:5a:4c:5a:a4:7b:0b:31:
                    6a:04:36:4c:01:c3:ff:0e:ec:6a:5c:6f:f7:60:ae:
                    f0:b2:47:fb:e8:c9:b7:5f:dc:14:5e:ef:81:53:87:
                    d3:aa:21:0f:51:75:ed:d5:b7:96:5c:62:e6:31:0b:
                    7a:d9:6e:ee:ed:f4:d6:6b:fc:1a:8a:a1:a2:97:19:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:10:C7:0B:11:3A:C1:A4:3C:48:C1:87:6E:80:3B:92:0C:04:13:D3
            X509v3 Authority Key Identifier:
                keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/uBDHCxE6waQ8SMGHboA7kgwEE9M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:da40:1::/48
                  2a0e:da40:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         08:5e:16:7b:02:d3:90:f3:51:e4:ce:b3:31:60:2b:8d:21:15:
         ff:e2:e8:65:91:26:cc:21:eb:26:43:78:84:72:e8:b9:36:5e:
         e7:81:70:09:bd:58:12:4e:01:cc:49:f1:75:e5:3e:8a:06:d0:
         01:06:4f:10:4e:f5:af:d5:bf:01:da:a6:ff:ac:a5:b0:bd:a4:
         d6:48:2c:a6:a7:cb:3a:f6:56:71:4b:d4:d2:25:e8:8b:bb:d2:
         9b:02:6b:4e:77:6a:46:bd:e2:da:38:2c:c0:18:ef:13:92:5e:
         e3:d7:08:0f:af:03:8c:ed:60:2b:54:a5:ba:04:da:ec:a4:5a:
         41:06:30:93:23:a1:51:08:6f:8b:13:cc:8a:b7:18:50:26:e9:
         e3:3c:4c:d4:ba:d3:34:eb:69:e5:58:cc:04:88:b4:96:55:db:
         de:10:51:4a:76:5f:0b:c4:e0:ad:52:df:06:1a:d5:2e:98:84:
         1d:82:01:fa:86:90:54:b5:7b:7c:56:ed:5a:31:ed:f7:a9:42:
         bb:71:4d:47:92:10:af:93:bf:a3:5d:fd:df:3c:c1:83:af:8b:
         1b:27:24:a8:1e:18:6f:9a:66:2e:dd:ef:41:ed:3a:0f:5d:d8:
         ac:35:09:1d:35:57:67:22:76:d3:7b:dc:fc:3a:1d:38:ea:11:
         a5:b7:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----