Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KyPNUBaxKLrNFVvfTahIT-zmeys.roa
File:                     KyPNUBaxKLrNFVvfTahIT-zmeys.roa (raw, json)
Hash identifier:          EyWk0fOQv6eKVaZT4qEjeKtOqYSAof0JR5zmJYjt+ts=
Subject key identifier:   2B:23:CD:50:16:B1:28:BA:CD:15:5B:DF:4D:A8:48:4F:EC:E6:7B:2B
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       018C24C026BFDAB3359C9B4FF77AABEAFC26
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KyPNUBaxKLrNFVvfTahIT-zmeys.roa
Signing time:             Fri 01 Dec 2023 09:40:21 +0000
ROA not before:           Fri 01 Dec 2023 09:40:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205544
IP address blocks:        2a0f:e6c6:1::/48 maxlen: 48
                          2a13:e101:1::/48 maxlen: 48
                          2a0f:e1c0:1::/48 maxlen: 48
                          2a12:ecc0:1::/48 maxlen: 48
                          2a13:3380:1::/48 maxlen: 48
                          2a0f:e6c7:1::/48 maxlen: 48
                          2a12:ecc0:f::/48 maxlen: 48
                          2a13:c700:1::/48 maxlen: 48
                          2a0f:e440::/29 maxlen: 29
                          2a0f:e1c0:2::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:24:c0:26:bf:da:b3:35:9c:9b:4f:f7:7a:ab:ea:fc:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Dec  1 09:40:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2b23cd5016b128bacd155bdf4da8484fece67b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6b:53:14:19:ec:02:95:26:0f:53:8a:43:ee:
                    89:7c:07:20:fa:0b:4f:01:a8:b7:8c:64:b9:96:a9:
                    3a:74:a5:63:e0:c3:1b:94:82:23:8c:4d:2d:a0:13:
                    f9:65:99:a4:58:e0:f7:0a:71:eb:fc:c5:01:c2:a9:
                    90:a8:ff:e0:26:2c:7d:07:92:53:56:fa:e7:ef:ba:
                    bf:bc:a1:5a:d0:b4:8b:79:5f:12:b1:5c:7a:b0:24:
                    df:88:c7:30:5e:84:09:61:3d:a6:f0:34:e9:d9:a1:
                    99:09:8b:17:fb:57:74:54:ba:e5:4d:a5:15:35:6e:
                    5c:da:50:2a:93:20:1b:dd:3d:03:ed:e5:e6:b8:43:
                    b9:21:65:18:85:21:10:5b:16:e6:6d:3b:48:dd:b9:
                    9d:17:bd:8a:5a:d9:87:cf:99:2f:e2:bb:e2:42:98:
                    c1:9b:69:d9:06:97:ae:65:e3:75:f3:4f:15:fd:d5:
                    4d:d4:99:8b:b3:72:46:22:ef:62:b4:73:1c:c3:18:
                    1b:91:03:f0:5f:e7:12:0c:3f:04:cc:e9:06:79:87:
                    22:f7:b0:4e:b0:bd:17:d1:91:27:59:5a:df:16:30:
                    c0:15:12:5e:73:4d:fd:6c:d7:54:2f:e1:dd:c3:66:
                    72:05:1d:bb:6a:88:c5:a9:2d:ad:3b:ca:ea:b4:ee:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:23:CD:50:16:B1:28:BA:CD:15:5B:DF:4D:A8:48:4F:EC:E6:7B:2B
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/KyPNUBaxKLrNFVvfTahIT-zmeys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:e1c0:1::-2a0f:e1c0:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:e440::/29
                  2a0f:e6c6:1::/48
                  2a0f:e6c7:1::/48
                  2a12:ecc0:1::/48
                  2a12:ecc0:f::/48
                  2a13:3380:1::/48
                  2a13:c700:1::/48
                  2a13:e101:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:2d:54:cd:5c:41:5d:a4:7f:10:a0:f3:14:97:0f:fd:b3:04:
         03:cc:61:b2:ac:4e:0b:cd:83:cc:55:63:f6:1f:b8:84:d2:34:
         35:ae:82:05:08:3a:d0:3f:f1:e7:14:9c:a1:d0:3f:d1:c4:11:
         d9:c8:61:80:07:32:a3:48:1f:4b:3f:d7:37:8d:dd:50:39:e9:
         fc:96:47:7d:d4:14:04:45:ca:7c:35:28:86:b5:6d:f3:b0:10:
         17:86:99:a8:03:41:53:ff:07:82:ea:f0:8a:ad:d2:e6:be:86:
         7c:dd:62:f2:b0:0b:cf:8a:0f:c2:96:f3:50:44:4e:95:81:7b:
         3a:78:1e:a4:9d:31:81:0a:fe:6f:96:18:08:d7:3a:4a:04:03:
         72:ae:e6:2b:88:8a:ee:cd:4a:d7:19:cb:4b:a6:2e:b0:2d:fa:
         1b:1a:61:32:73:bf:9e:ce:b7:dd:a8:5a:c8:ff:f7:6a:59:3e:
         34:00:de:0a:25:5f:0e:de:bd:ee:03:87:02:cb:e7:22:7f:ca:
         8a:e0:57:be:81:81:9a:4d:71:67:9b:ae:c2:1c:84:ca:01:2b:
         53:25:e0:42:e9:d7:47:a6:71:60:3d:8d:da:d9:69:1e:69:42:
         7c:89:6d:59:d5:e6:7b:49:e1:e2:d4:11:a7:6c:e6:aa:d8:38:
         bd:c4:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----