Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/1--nV6EZwzIoYVI7aIVV48q68oZw.roa
File:                     1--nV6EZwzIoYVI7aIVV48q68oZw.roa (raw, json)
Hash identifier:          Ozdp0f4bzpCpmxkl0lOhvuwhRKGMLnY6XZLMenJ1BIg=
Subject key identifier:   FB:E9:D5:E8:46:70:CC:8A:18:54:8E:DA:21:55:78:F2:AE:BC:A1:9C
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       08087937
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/1--nV6EZwzIoYVI7aIVV48q68oZw.roa
Signing time:             Sat 01 Jan 2022 06:55:49 +0000
ROA not before:           Sat 01 Jan 2022 06:55:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205593
IP address blocks:        2a0f:5701:3100::/40 maxlen: 48
                          2a0f:5701:3500::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134773047 (0x8087937)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Jan  1 06:55:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fbe9d5e84670cc8a18548eda215578f2aebca19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f5:ea:b0:c6:20:a8:58:8b:6e:32:70:1d:a7:
                    e5:3f:35:68:ce:b4:8e:f1:73:a0:2a:91:ce:02:44:
                    77:92:de:24:d6:9f:c8:28:59:06:f4:73:ed:1f:55:
                    c7:91:66:69:3b:54:0e:53:9d:1d:f0:3d:35:f7:a0:
                    c6:75:9b:0f:cd:d5:c2:49:b9:e9:54:6b:eb:29:8c:
                    5a:b8:ba:e1:cd:98:70:59:5e:82:19:e7:c7:ef:c1:
                    05:13:cc:46:f4:42:84:91:57:17:18:0e:c4:d9:07:
                    24:e8:01:79:e5:42:0e:12:b4:37:4f:ed:c4:f5:8b:
                    bf:93:46:b3:01:f1:5b:87:9d:19:be:08:8f:13:f9:
                    9d:de:41:a0:79:0e:1b:5a:41:52:69:01:0c:46:e9:
                    48:c7:75:d2:60:60:16:62:ac:ee:d1:a7:50:cc:a3:
                    9c:1a:59:97:25:c9:c9:a5:e1:5b:75:ef:2e:41:db:
                    d8:30:9c:28:f6:4f:91:1f:b3:05:5f:6c:04:0b:e4:
                    c5:96:e6:69:f5:73:25:5c:cc:91:af:e3:1a:c7:4e:
                    7e:c1:87:a9:db:2a:4e:86:f8:2d:b0:de:34:ea:f9:
                    fa:71:f1:80:e1:c9:40:2a:47:4b:32:c1:57:a9:ed:
                    e8:45:ec:bf:52:bc:f9:aa:00:b3:72:e6:6f:49:2c:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E9:D5:E8:46:70:CC:8A:18:54:8E:DA:21:55:78:F2:AE:BC:A1:9C
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/1--nV6EZwzIoYVI7aIVV48q68oZw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5701:3100::/40
                  2a0f:5701:3500::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:84:9c:a5:f2:3c:ad:74:92:9e:8f:86:4a:05:b2:ab:20:8a:
         66:6a:bd:0c:ea:71:c3:4f:35:f7:d1:10:3d:ce:02:d5:e8:69:
         40:74:fe:df:48:d5:1e:5e:86:74:e9:4a:ab:58:d4:c9:a8:b9:
         a6:9d:42:bf:7c:69:8d:33:ec:4d:b9:32:62:9d:3b:08:10:42:
         af:88:e1:f0:d8:c0:be:f1:c1:70:cc:4c:3f:5b:f2:9e:f3:7c:
         fc:a3:01:16:f2:27:f6:9a:7d:c7:d5:d8:6a:ca:ea:6e:13:bd:
         38:90:18:77:e3:c0:af:dc:b1:40:10:1f:61:47:76:ab:df:2a:
         c4:74:b6:26:37:3d:8c:f7:f6:7a:36:85:4f:4a:09:06:2c:07:
         b9:d8:46:3b:70:04:bc:1a:24:66:be:d9:66:22:83:e1:fa:42:
         db:7f:40:95:4e:19:24:f0:af:99:7e:2f:30:58:51:ee:10:52:
         ad:82:5b:a0:42:6f:1e:6c:bd:11:e3:e7:a2:fb:d0:86:f0:55:
         11:9d:89:3d:c2:f3:76:1b:2a:86:0b:3e:83:4c:62:12:93:4d:
         80:86:31:15:a3:63:6e:c7:81:1c:2d:75:31:fb:db:52:64:69:
         00:f1:0e:61:56:be:5c:3d:3c:1c:08:36:17:6b:ed:e9:33:69:
         3b:3b:14:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----