Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MYums6ZkIOO1IDzm93RPAzHJet0.roa
File:                     MYums6ZkIOO1IDzm93RPAzHJet0.roa (raw, json)
Hash identifier:          vzCEkmt9VN1FMmesXVUumkX9YwhwSDmjmn1BoSvTeIQ=
Subject key identifier:   31:8B:A6:B3:A6:64:20:E3:B5:20:3C:E6:F7:74:4F:03:31:C9:7A:DD
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       018C6DA8C5B1D1E4B5F50D154F4335494A53
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MYums6ZkIOO1IDzm93RPAzHJet0.roa
Signing time:             Fri 15 Dec 2023 13:27:06 +0000
ROA not before:           Fri 15 Dec 2023 13:27:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205544
IP address blocks:        2a0f:e6c6:1::/48 maxlen: 48
                          2a13:e101:1::/48 maxlen: 48
                          2a09:17c0::/48 maxlen: 48
                          2a12:ecc0:1::/48 maxlen: 48
                          2a13:3380:1::/48 maxlen: 48
                          2a0f:e6c7:1::/48 maxlen: 48
                          2a12:ecc0:f::/48 maxlen: 48
                          2a0f:e440::/29 maxlen: 29
                          2a13:e101:2::/48 maxlen: 48
                          2a0f:e1c0:2::/48 maxlen: 48
                          2a0f:e1c0:1::/48 maxlen: 48
                          2a13:c700:1::/48 maxlen: 48
                          2a09:17c1::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6d:a8:c5:b1:d1:e4:b5:f5:0d:15:4f:43:35:49:4a:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Dec 15 13:27:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=318ba6b3a66420e3b5203ce6f7744f0331c97add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b7:06:52:25:49:a2:d9:2c:49:af:02:8c:1a:
                    09:80:fb:f8:21:bd:c8:c3:0e:e6:ba:d6:69:2f:65:
                    8a:73:ac:e2:5b:01:7b:06:c4:9e:ca:0c:41:78:2a:
                    49:4b:88:b0:61:b3:7f:0d:67:13:f9:96:3c:3b:0f:
                    7f:f2:82:ca:02:9e:0c:5e:ed:0b:17:7a:61:fe:4d:
                    e5:fa:ab:12:1f:cd:19:93:ad:c3:44:e4:09:0d:91:
                    2f:19:ff:b2:e7:72:cb:70:3a:ec:c6:9a:74:0e:27:
                    8e:2a:e1:57:10:ce:8e:13:3c:8e:d2:d9:11:93:43:
                    e1:2f:24:d8:d5:75:f8:c2:05:b1:a2:93:af:30:ba:
                    9e:c9:b4:d4:2b:e7:ff:88:cf:4e:31:c6:14:e4:ac:
                    50:64:5e:36:ce:78:31:fc:79:b3:72:98:54:65:1b:
                    c7:76:40:a0:51:35:09:0c:80:d9:7c:20:ed:46:06:
                    3c:0c:07:f8:80:0e:eb:6d:48:9d:22:f0:02:c1:92:
                    10:cc:8f:c1:8c:41:60:6b:ff:f1:f6:9f:d3:fd:6b:
                    44:39:5d:8d:fe:ae:5e:48:b4:71:49:d5:74:b3:6b:
                    d8:07:46:78:40:8c:46:c3:24:06:4d:61:a5:d4:e7:
                    03:2f:4e:09:5a:26:3b:cf:72:0e:3e:b3:03:5c:4a:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8B:A6:B3:A6:64:20:E3:B5:20:3C:E6:F7:74:4F:03:31:C9:7A:DD
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MYums6ZkIOO1IDzm93RPAzHJet0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:17c0::/48
                  2a09:17c1::/48
                  2a0f:e1c0:1::-2a0f:e1c0:2:ffff:ffff:ffff:ffff:ffff
                  2a0f:e440::/29
                  2a0f:e6c6:1::/48
                  2a0f:e6c7:1::/48
                  2a12:ecc0:1::/48
                  2a12:ecc0:f::/48
                  2a13:3380:1::/48
                  2a13:c700:1::/48
                  2a13:e101:1::-2a13:e101:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4a:27:e2:4d:71:87:78:d5:d1:2f:64:7d:a7:76:53:7c:6d:83:
         a6:fb:81:9f:00:3b:40:f3:48:5e:e0:55:51:76:f8:87:26:30:
         0e:39:43:08:fd:ec:78:92:d6:7b:b4:e8:7c:71:16:40:ce:f2:
         0c:ef:9d:bd:35:77:2d:c4:9b:0f:9f:d4:8d:ba:57:ae:cc:97:
         6d:cc:a8:7a:60:8e:71:c8:e6:e6:bb:55:e3:1f:31:15:61:17:
         22:79:7a:96:3e:b2:0a:3b:a1:8b:23:e9:3a:aa:99:78:49:7c:
         dd:af:2e:fe:58:c6:9c:c7:a7:1e:94:eb:2d:20:4e:74:83:20:
         b5:11:5d:0c:07:ef:13:4b:4c:4a:58:0d:57:8b:96:a7:21:a2:
         27:90:72:f0:b5:1a:1e:ad:37:0f:ac:93:d7:d5:bb:60:5c:07:
         a6:40:c8:c7:9a:17:6e:c1:fd:1b:bb:a5:c8:62:6e:bd:c3:a0:
         92:c9:14:f1:f4:0f:3b:6b:6c:b1:59:7e:84:81:81:b5:00:5c:
         46:48:0d:b2:20:5e:8e:d6:19:84:f5:ca:4a:cb:99:de:e6:0f:
         ab:34:98:06:73:3c:73:4d:38:f1:25:82:1d:3b:d1:74:78:79:
         e7:74:cd:7b:91:fe:14:c1:05:24:42:29:1e:85:cc:38:c7:6f:
         e4:de:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----