Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/i2VC3tXviOCB5JgwHonIjThXT2c.roa
File:                     i2VC3tXviOCB5JgwHonIjThXT2c.roa (raw, json)
Hash identifier:          lppSQwIokFbMEpNhzBvypUg4FppasTg5FuZSTsk0OUM=
Subject key identifier:   8B:65:42:DE:D5:EF:88:E0:81:E4:98:30:1E:89:C8:8D:38:57:4F:67
Certificate issuer:       /CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
Certificate serial:       D232
Authority key identifier: 08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/i2VC3tXviOCB5JgwHonIjThXT2c.roa
Signing time:             Wed 13 Apr 2022 16:52:14 +0000
ROA not before:           Wed 13 Apr 2022 16:52:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205929
IP address blocks:        2a06:89c3:5010::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53810 (0xd232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fcaaf8d17dd1a65795f714b267f1bce21938b9
        Validity
            Not Before: Apr 13 16:52:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8b6542ded5ef88e081e498301e89c88d38574f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:21:b4:7b:b4:51:f6:37:ae:01:d6:11:fc:6e:
                    ad:21:8e:5e:85:c4:35:8a:bc:c6:c0:fd:d2:ff:4d:
                    cc:8e:5f:8f:09:c9:c1:6c:df:3e:54:82:e7:f7:57:
                    00:55:89:87:eb:a0:02:fa:5b:0c:8b:f0:81:1f:b1:
                    2b:88:74:07:4f:54:30:67:d5:51:93:8c:3e:bc:48:
                    41:01:ff:7e:49:44:05:fc:44:d8:ff:94:01:04:7b:
                    a0:fc:9e:97:96:d0:ee:ed:30:2a:e8:bf:0f:be:4d:
                    1b:5f:12:df:15:c5:85:96:a4:68:7e:14:d0:fb:76:
                    14:8f:fb:39:31:fc:85:55:4c:f0:60:a9:b4:7f:23:
                    a2:7b:2b:95:f3:ea:fa:9d:e9:8d:8e:4d:18:86:d9:
                    c0:e9:1f:42:68:43:ad:23:79:c3:46:8f:b1:98:ea:
                    23:85:6f:27:6d:96:96:c8:71:ef:3c:aa:c8:fa:56:
                    be:d4:c9:d8:b1:b7:2a:3f:f9:de:7e:16:b5:b7:59:
                    d8:8e:08:f1:57:1b:03:0e:99:f7:b8:5e:75:15:ea:
                    69:d6:cc:29:ec:51:8a:e0:7f:d5:aa:d4:87:90:de:
                    54:38:15:0b:cd:20:43:23:8d:f0:a3:3f:c1:c9:59:
                    19:f3:6f:b2:35:76:70:42:48:62:78:ef:e4:b0:2c:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:65:42:DE:D5:EF:88:E0:81:E4:98:30:1E:89:C8:8D:38:57:4F:67
            X509v3 Authority Key Identifier:
                keyid:08:FC:AA:F8:D1:7D:D1:A6:57:95:F7:14:B2:67:F1:BC:E2:19:38:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPyq-NF90aZXlfcUsmfxvOIZOLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/i2VC3tXviOCB5JgwHonIjThXT2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/0680ae-22f9-43be-90a8-77eeeaf71d08/1/CPyq-NF90aZXlfcUsmfxvOIZOLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:89c3:5010::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:f5:cc:76:38:d9:a6:90:a7:e4:1f:b9:cd:4b:04:94:6f:e0:
         7b:12:b2:07:ec:11:78:b8:ec:67:35:9b:21:cd:6f:44:ce:f5:
         ff:d2:25:f7:46:a5:a3:42:d3:98:f1:f4:c5:51:cf:db:a4:0a:
         15:86:24:cd:5b:80:8f:be:9e:3e:79:db:90:9d:bb:36:35:66:
         37:42:aa:aa:f3:19:8d:cd:dc:fa:1a:bd:7e:3b:01:e4:c2:bd:
         ca:c4:1a:31:6b:01:24:b4:5f:cf:bf:b9:87:00:74:66:35:da:
         91:ab:79:24:a0:48:d4:c8:ce:5c:0e:23:6b:a7:11:23:2e:01:
         b4:6a:f9:00:9d:7d:85:a4:a0:20:85:3e:88:5d:2c:5b:87:d2:
         7f:1e:0e:de:b4:e4:77:fb:9c:18:d0:18:dd:89:d8:1c:17:4c:
         26:ea:c6:78:80:86:01:13:ea:80:21:af:27:25:27:f3:33:81:
         a9:5f:d8:42:c9:2f:13:88:a0:37:09:71:08:4a:c5:02:9f:96:
         55:31:7f:c9:fa:92:c7:d3:ac:c3:cc:1b:6d:28:67:ce:7e:7d:
         67:bb:f3:31:cb:d7:5f:df:81:ef:be:fd:fc:dd:54:fd:34:97:
         61:aa:67:b2:27:ae:98:44:11:99:77:f4:80:b1:86:b6:7c:68:
         6d:dc:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----