Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/Ee6_SCfqsr-d6OPrq7X4HCeY0zU.roa
File:                     Ee6_SCfqsr-d6OPrq7X4HCeY0zU.roa (raw, json)
Hash identifier:          vQkq/utmCCUgO2SmvHROyTAbprfQlpTqigFeF0g2Yng=
Subject key identifier:   11:EE:BF:48:27:EA:B2:BF:9D:E8:E3:EB:AB:B5:F8:1C:27:98:D3:35
Certificate issuer:       /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial:       0183141B05BD6DC458BA830D188F7CE674D1
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/Ee6_SCfqsr-d6OPrq7X4HCeY0zU.roa
Signing time:             Tue 06 Sep 2022 18:40:58 +0000
ROA not before:           Tue 06 Sep 2022 18:40:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     52423
IP address blocks:        2a11:840:29::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:14:1b:05:bd:6d:c4:58:ba:83:0d:18:8f:7c:e6:74:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
        Validity
            Not Before: Sep  6 18:40:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11eebf4827eab2bf9de8e3ebabb5f81c2798d335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ea:d9:a1:b9:69:f8:4a:58:f6:84:03:ab:f4:
                    61:1f:a1:19:97:e3:12:e8:68:16:20:fb:1c:05:95:
                    ce:96:b3:a7:9d:3a:5b:3a:21:b7:b0:db:98:30:bb:
                    7a:a4:91:68:e0:3e:32:08:41:40:20:13:de:12:70:
                    d1:f1:0e:b9:40:b6:63:82:01:c0:7d:af:4f:47:cc:
                    fd:9e:85:0e:28:0f:2c:c1:0c:a4:96:54:5e:b3:2e:
                    e7:40:34:c6:f3:61:e1:e9:bb:9e:58:a9:0e:12:a6:
                    2a:81:be:16:23:19:75:f1:e9:b5:36:0e:07:31:2d:
                    ee:f2:87:bd:7f:b5:63:53:62:b1:a7:e6:fa:78:6e:
                    cd:ee:25:ad:ff:db:f3:4a:2f:3c:66:1c:68:60:a8:
                    f8:35:23:06:36:f4:0e:79:1c:06:b9:a1:53:8a:f6:
                    c5:41:40:80:3c:a5:f3:99:0c:a6:47:4e:e6:bb:9c:
                    0b:91:40:55:f8:9f:99:b5:16:92:a3:60:e1:69:f5:
                    d1:72:76:12:ec:f2:97:b2:bd:e8:c3:91:79:3b:ac:
                    d9:84:ee:a6:1b:a8:65:8e:d7:cf:42:28:9f:4b:1f:
                    68:78:49:e7:0a:84:e3:9e:86:87:c5:27:56:97:9d:
                    2b:12:0d:ef:e0:d5:9f:cb:89:4b:74:3d:5b:b2:60:
                    9c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EE:BF:48:27:EA:B2:BF:9D:E8:E3:EB:AB:B5:F8:1C:27:98:D3:35
            X509v3 Authority Key Identifier:
                keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/Ee6_SCfqsr-d6OPrq7X4HCeY0zU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:840:29::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:94:bf:fe:7b:9c:04:44:0f:9a:52:74:16:77:0e:bd:53:36:
         04:4f:4a:1f:e1:52:7a:7f:e0:7e:0d:18:3e:19:60:db:82:5b:
         ce:2f:20:1f:ff:c3:b2:40:ba:2f:a0:9f:07:bf:a7:52:86:ba:
         ce:05:12:92:2d:e4:3d:2c:ec:01:77:d2:7b:48:32:38:79:24:
         22:78:8e:17:0b:29:48:c6:d2:84:a8:5e:5a:c7:f7:0e:87:d4:
         9c:34:7e:40:83:ab:9c:38:90:d5:2b:05:a0:d4:c2:2b:3f:06:
         1c:9e:9d:8e:1c:dd:23:4d:ba:7f:aa:57:d5:77:19:a4:b0:83:
         1f:c0:29:3f:c4:26:f4:39:6f:e9:89:9a:c8:77:15:ad:10:2a:
         50:ce:b3:56:84:9d:af:9c:6f:26:cf:7b:dd:a3:93:6d:d7:75:
         46:1f:03:9c:71:ff:6e:e3:79:4e:73:6b:d9:50:a3:47:8e:1b:
         78:8f:c5:e8:2d:bd:26:00:d0:2d:87:35:67:af:4a:be:23:8d:
         98:b0:cf:3e:60:d3:92:5a:e5:4e:73:1e:8f:0e:2e:ce:8b:3e:
         fc:7d:1a:f6:0b:bc:6c:bc:bc:fa:78:70:89:8b:d9:5f:a4:57:
         42:fd:83:eb:25:9e:85:7a:36:9d:ed:63:9b:cf:72:c1:5a:e3:
         e9:bd:87:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----