Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/m6dnydm6a2N_QW_D_el6FMe_NW4.roa
File:                     m6dnydm6a2N_QW_D_el6FMe_NW4.roa (raw, json)
Hash identifier:          atPts4D2aiqTe5s7FLgWZK/kRROo9Kj/tpERn0pJXPc=
Subject key identifier:   9B:A7:67:C9:D9:BA:6B:63:7F:41:6F:C3:FD:E9:7A:14:C7:BF:35:6E
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       07E08364
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/m6dnydm6a2N_QW_D_el6FMe_NW4.roa
Signing time:             Fri 18 Feb 2022 12:40:43 +0000
ROA not before:           Fri 18 Feb 2022 12:40:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51659
IP address blocks:        81.28.254.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132154212 (0x7e08364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Feb 18 12:40:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9ba767c9d9ba6b637f416fc3fde97a14c7bf356e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:6f:8f:71:f9:7c:d0:14:1f:26:6a:04:d6:
                    57:bb:13:79:b4:e7:e9:98:01:d3:1f:23:e5:f7:d0:
                    d5:66:ed:71:4e:36:ba:71:53:5f:b2:21:fd:81:65:
                    a5:09:94:3e:07:e1:8b:9a:7f:d9:ea:10:d8:5c:36:
                    d4:38:88:e8:2f:ac:14:22:af:f9:e5:6e:31:65:3a:
                    a5:21:c6:bc:8c:a7:70:fd:bf:4a:2b:67:06:4b:0b:
                    15:d2:b3:0f:00:da:c6:ff:e2:f3:75:64:19:1c:34:
                    4d:fa:87:48:36:67:9e:88:be:8a:03:a6:44:ca:41:
                    16:32:44:7b:b5:7e:7d:20:62:57:fe:f9:7c:88:23:
                    d8:08:eb:bc:9b:a5:b6:01:a2:d9:35:4d:29:2a:e5:
                    c9:ec:cd:6c:9a:a5:a8:5a:93:1a:bf:07:aa:a0:53:
                    14:6d:17:9f:0d:09:f5:85:0d:c9:4e:3b:3c:65:a5:
                    56:93:8c:e2:f6:f4:9f:cd:2a:e0:60:81:e0:e9:9e:
                    64:44:dd:09:f0:d4:80:31:ef:89:74:8e:a6:d9:a8:
                    4c:57:92:60:38:79:5d:54:f9:8f:e2:7e:3b:5b:25:
                    84:09:2d:2e:0e:33:ca:06:73:19:27:fe:14:7a:f7:
                    61:78:3b:93:ec:ab:d8:ac:ed:0f:51:7a:83:8a:1c:
                    f8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A7:67:C9:D9:BA:6B:63:7F:41:6F:C3:FD:E9:7A:14:C7:BF:35:6E
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/m6dnydm6a2N_QW_D_el6FMe_NW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.28.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:ef:ce:ca:38:78:0b:ce:a5:af:94:d7:2d:ce:f6:41:11:6e:
         fb:c3:4b:c5:be:d1:57:f6:6f:90:a4:f8:9f:34:5a:c4:7d:f9:
         92:d3:6e:7a:8d:90:fd:db:38:00:2b:5c:12:0f:c5:39:f4:ff:
         17:03:1b:fa:40:6e:63:71:a1:65:67:41:44:9e:08:5d:9a:25:
         2f:8f:39:06:6c:1c:da:e0:12:a8:e6:a6:4d:c0:1b:37:61:9c:
         18:98:3f:db:b1:4e:d0:34:7e:48:de:2f:f5:3e:af:c4:75:b7:
         04:16:2f:2f:13:1c:e7:86:50:5c:26:71:12:24:1a:f7:e5:ff:
         49:d5:07:09:d5:51:4b:3b:f7:59:25:0b:e6:03:2b:05:d4:fc:
         25:cb:34:4b:91:8f:36:3f:b7:f6:c0:a0:ac:8b:10:24:b6:90:
         6c:8f:69:aa:cb:60:5d:31:a3:36:31:79:64:3f:a2:86:49:7c:
         67:30:74:e6:7c:db:2d:a0:92:1f:d1:ed:dc:51:3e:73:d0:e6:
         80:dd:11:81:a5:72:ef:79:f4:d3:2a:55:0f:02:fe:9d:78:b0:
         97:6e:a0:17:b0:9a:e4:97:4c:22:58:bc:7f:09:d2:c3:1c:e9:
         45:a6:04:2b:43:ad:eb:ee:cb:bc:40:78:fd:b9:68:2f:d8:bc:
         3c:59:a9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----