Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6y3QejEyWSaeir02cI_4vU7l_OE.roa
File:                     6y3QejEyWSaeir02cI_4vU7l_OE.roa (raw, json)
Hash identifier:          jIOZEfKmZIDh7gLG3Wzps8g22ySMVsj0S59Or2fkeE8=
Subject key identifier:   EB:2D:D0:7A:31:32:59:26:9E:8A:BD:36:70:8F:F8:BD:4E:E5:FC:E1
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       081ADD7F
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6y3QejEyWSaeir02cI_4vU7l_OE.roa
Signing time:             Sat 01 Jan 2022 06:55:58 +0000
ROA not before:           Sat 01 Jan 2022 06:55:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212000
IP address blocks:        2a0f:5707:20::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135978367 (0x81add7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Jan  1 06:55:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eb2dd07a313259269e8abd36708ff8bd4ee5fce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:ba:ce:1f:e1:3b:72:a3:28:fc:1f:3d:1f:
                    2c:75:59:cd:10:d0:7a:e1:16:90:09:c3:35:bb:6f:
                    0b:da:f2:17:e7:a6:a4:88:71:33:a9:28:8e:93:8d:
                    34:39:34:81:58:da:3d:7f:da:1b:7b:4a:19:47:a5:
                    08:15:03:3e:ae:6e:8c:73:f5:a4:4b:57:2b:d4:0b:
                    a9:5b:20:2b:ad:ea:7f:b3:9f:a5:e2:57:b5:7f:5f:
                    b3:9d:a1:5b:56:35:c7:78:79:88:9c:ec:4d:45:ac:
                    95:fc:18:23:72:63:f4:8a:3a:a6:db:23:65:11:7b:
                    cc:2f:59:ab:99:ce:ef:d5:a1:e0:14:15:10:1d:e2:
                    b6:e6:37:1e:49:a9:02:be:3e:4b:f2:83:24:45:e2:
                    d1:e6:26:ff:83:db:cc:49:bf:c1:d6:fb:68:9e:45:
                    27:7b:3f:9d:d9:74:d6:79:0b:e5:35:77:23:ab:74:
                    fc:c5:77:46:38:99:bc:04:cb:f6:46:c5:80:b7:19:
                    b3:61:2a:34:dc:d4:37:87:cd:42:e3:26:cb:ba:e4:
                    46:6b:4f:bf:b2:ca:5d:ad:11:f5:52:9e:ce:86:c6:
                    f4:41:4b:9b:85:c5:4d:1e:ab:3f:92:e3:3b:97:96:
                    20:69:d4:31:4a:5c:30:dd:83:b4:9b:0d:44:ef:79:
                    b8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2D:D0:7A:31:32:59:26:9E:8A:BD:36:70:8F:F8:BD:4E:E5:FC:E1
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/6y3QejEyWSaeir02cI_4vU7l_OE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5707:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:79:fc:ca:47:e1:57:cc:49:32:93:a3:dd:cd:3a:44:85:d3:
         94:43:ce:40:8c:fa:58:74:2b:54:47:6a:3c:8e:81:75:cf:8c:
         d4:dc:11:b4:9f:39:a7:21:77:79:09:f5:ed:5f:2c:4b:36:e5:
         44:f3:b1:85:32:da:16:eb:e4:c9:6a:a3:07:6a:2e:f4:a6:43:
         05:8d:31:f9:c7:c7:f4:1e:a0:5c:8d:65:fb:89:af:ea:c7:77:
         f8:92:c9:8c:fa:6d:9d:cb:2f:d5:85:69:5a:59:95:d3:a6:b1:
         39:08:3a:32:32:08:d8:ee:fa:e9:34:28:9b:6a:f5:06:f8:7f:
         9c:42:7b:a4:c1:b2:f7:df:47:29:90:1c:1a:c6:75:9b:f4:d1:
         7f:2a:d2:93:eb:6e:b9:93:cb:6a:1e:14:f4:7b:9b:25:b8:0a:
         65:5e:c4:af:e2:47:62:ab:a9:29:52:dd:ec:88:28:40:a7:d6:
         48:08:32:f1:04:a0:bb:bc:44:a9:26:f4:56:8e:97:4e:d5:c9:
         97:f6:18:9e:f4:d5:56:ef:35:31:34:a2:5b:91:8d:9b:ce:f9:
         ca:39:29:15:ff:cf:48:39:40:83:1a:f5:5a:8e:5b:09:35:2b:
         53:f7:4a:e0:df:91:95:ea:b7:77:29:a8:6b:64:d4:3c:e4:3c:
         06:38:36:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----