Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/nCDLQs27BZWp8CFuN9Zvh5WsCrk.roa
File:                     nCDLQs27BZWp8CFuN9Zvh5WsCrk.roa (raw, json)
Hash identifier:          ni5ri7NAtfnbpWAeIF26XCdL0snyvx3zYkjMQKBcMhs=
Subject key identifier:   9C:20:CB:42:CD:BB:05:95:A9:F0:21:6E:37:D6:6F:87:95:AC:0A:B9
Certificate issuer:       /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial:       23C74FEF
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/nCDLQs27BZWp8CFuN9Zvh5WsCrk.roa
Signing time:             Sat 05 Feb 2022 20:12:52 +0000
ROA not before:           Sat 05 Feb 2022 20:12:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60975
IP address blocks:        2a00:43e0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600264687 (0x23c74fef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
        Validity
            Not Before: Feb  5 20:12:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9c20cb42cdbb0595a9f0216e37d66f8795ac0ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:a0:11:9b:6a:ab:f8:25:ad:d4:ab:b4:28:
                    2b:32:f4:ed:43:af:73:42:47:70:32:77:2d:16:6b:
                    c9:8a:0f:c8:44:71:fd:69:92:06:e4:6a:ca:23:8a:
                    a4:d7:7a:d7:d7:71:80:dd:e5:00:49:5f:9b:6b:5f:
                    61:e6:27:ee:d2:7b:97:67:d7:eb:3f:f6:b7:a9:ef:
                    8c:85:66:cd:73:35:c4:09:db:b8:9b:f1:42:40:c7:
                    1c:8e:0c:22:de:1b:f3:bc:58:f6:07:fc:b4:c6:e0:
                    52:c4:56:5c:4f:b2:c0:a8:6f:21:d3:91:8d:24:d9:
                    19:b7:f6:9d:65:b7:e1:c4:b2:00:15:c9:24:be:55:
                    e6:9f:73:85:c8:ea:cc:47:a5:86:33:fa:db:4e:5b:
                    a4:ae:05:76:86:70:50:40:6f:2c:73:ab:dc:95:40:
                    d5:3e:b0:c5:5b:9e:2e:e3:40:18:5c:e2:f9:99:6e:
                    cb:ad:fd:74:f4:39:03:c9:ae:c0:84:19:73:db:56:
                    38:6f:05:d4:93:a7:46:f4:5c:25:52:08:45:fb:c9:
                    b5:da:2d:54:68:93:08:c0:5f:b2:e9:86:66:f1:3e:
                    40:9c:fb:ec:19:a2:2c:76:7c:05:80:d2:61:38:78:
                    43:02:28:e6:3b:10:ba:13:2e:9e:bc:ca:95:52:29:
                    4f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:20:CB:42:CD:BB:05:95:A9:F0:21:6E:37:D6:6F:87:95:AC:0A:B9
            X509v3 Authority Key Identifier:
                keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/nCDLQs27BZWp8CFuN9Zvh5WsCrk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:43e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:3e:a0:c6:1d:60:4f:f8:08:4e:34:04:42:09:9e:6b:43:54:
         7a:ab:6b:ea:cc:98:ca:e1:80:cd:61:ab:ae:b6:7b:52:b5:07:
         8d:c6:6a:7a:fe:7e:90:00:64:ef:95:c7:15:6d:e8:d7:ec:40:
         fe:4a:e9:e5:9a:09:35:51:fe:85:d9:f2:e6:cb:13:77:a7:2c:
         2c:f7:de:f2:23:a7:56:d6:02:64:3f:30:a4:65:ef:82:93:01:
         bb:cd:e5:df:6c:bc:d9:19:f3:d9:cc:83:4c:42:a9:2c:48:80:
         aa:55:74:8f:b8:ab:b1:2f:5d:1a:18:0c:7c:16:7c:c2:b7:e1:
         79:bd:51:7c:26:0c:c7:98:29:21:e9:28:8d:0c:1c:28:36:4c:
         28:66:15:14:c4:e3:94:ec:2a:6c:fa:e0:27:c0:d8:41:70:d7:
         dc:fd:1f:01:53:63:d2:d4:cb:ee:be:19:37:bc:7a:ff:2f:3b:
         c1:00:c1:79:41:07:e4:bb:a1:79:0d:66:17:45:97:8c:20:1a:
         7a:84:19:cf:52:20:26:a4:e5:62:69:f2:6c:8c:1b:89:72:00:
         b1:aa:43:33:d4:c5:5f:af:13:6c:7e:40:1e:9a:5c:30:43:45:
         c8:13:02:03:e1:f2:1d:09:1a:39:25:fd:33:32:56:50:93:13:
         44:fd:8f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----