Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/MZkHrEBrXTww99qr1IyGGaI_Ffk.roa
File:                     MZkHrEBrXTww99qr1IyGGaI_Ffk.roa (raw, json)
Hash identifier:          /FSnM1LV4jKYiwhHeF04snf/WPatG5mWKP7NE1R9zQY=
Subject key identifier:   31:99:07:AC:40:6B:5D:3C:30:F7:DA:AB:D4:8C:86:19:A2:3F:15:F9
Certificate issuer:       /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial:       07C07C2B
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/MZkHrEBrXTww99qr1IyGGaI_Ffk.roa
Signing time:             Sat 01 Jan 2022 06:55:32 +0000
ROA not before:           Sat 01 Jan 2022 06:55:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208562
IP address blocks:        2001:678:ad8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130055211 (0x7c07c2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
        Validity
            Not Before: Jan  1 06:55:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=319907ac406b5d3c30f7daabd48c8619a23f15f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:2e:04:5a:e1:6c:ff:48:7f:29:cf:7c:73:
                    04:6b:c9:e1:8d:1c:0a:a4:76:4e:2a:33:08:e5:be:
                    91:48:cd:76:73:05:4d:7a:9b:5d:bd:57:e8:e9:09:
                    cc:38:2a:9d:07:78:c5:ef:26:24:93:50:07:fb:b5:
                    ce:41:9d:b8:26:b6:76:76:98:f0:5d:13:9a:a6:3e:
                    6c:64:3f:4f:a6:3d:e9:8c:0f:47:a7:08:92:c2:68:
                    57:c8:91:f2:1d:98:8e:2c:f0:6e:49:e2:c3:8a:e1:
                    e7:9b:7d:d9:63:ca:b1:25:cd:b0:2a:f8:db:1d:89:
                    71:3f:66:c6:fa:54:51:40:ba:ad:dd:67:a1:34:3f:
                    1b:e2:22:da:53:56:72:2f:30:12:d9:6d:64:04:6a:
                    ac:fc:42:9e:54:50:5f:9b:a8:b2:08:14:71:41:3a:
                    a4:b0:32:d5:10:57:10:02:94:21:b6:60:49:9d:3e:
                    15:46:96:e7:35:ce:35:ad:da:9b:98:2b:b7:53:5b:
                    76:50:e8:cb:34:21:b4:0a:f8:83:a9:02:33:2d:73:
                    78:a0:05:92:3f:01:73:f2:73:12:8c:b6:7c:ef:d8:
                    67:d6:2a:dd:b4:be:b1:8b:68:b9:6c:78:3f:4a:0d:
                    a7:fd:ad:56:bb:96:ac:f4:58:b9:cb:06:2b:4e:e5:
                    7b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:99:07:AC:40:6B:5D:3C:30:F7:DA:AB:D4:8C:86:19:A2:3F:15:F9
            X509v3 Authority Key Identifier:
                keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/MZkHrEBrXTww99qr1IyGGaI_Ffk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:ad8::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:f1:23:73:bb:26:79:b7:97:99:06:89:ac:62:e1:4c:a7:a9:
         74:4a:d7:f8:7b:ff:10:ca:da:53:20:d8:cc:7e:24:85:9b:20:
         6b:e9:2b:7f:07:c0:6f:31:20:12:e8:44:ff:f8:a2:85:6c:95:
         27:c4:46:09:24:fd:3d:0e:97:ca:f0:95:7b:da:45:97:a1:b6:
         fe:5c:b1:55:21:ce:50:c7:39:5f:74:1d:1c:82:1c:91:23:3b:
         bc:7c:fa:e8:50:94:8b:38:18:4e:8a:7a:60:ff:e6:f4:72:1e:
         87:b7:c9:8a:e6:5e:bf:62:9b:4c:b7:34:16:5e:86:c6:8e:c5:
         d1:7d:b7:0b:12:70:98:8e:28:e0:eb:a0:9f:82:83:3f:10:f4:
         88:eb:5e:4f:79:19:82:a3:94:fe:ed:8d:bc:13:02:a5:48:ea:
         0c:ce:cd:43:47:ec:18:80:fd:91:17:b3:b1:46:e6:9e:c8:22:
         ec:ba:39:62:ba:bd:ac:8d:39:2b:23:8f:ef:5a:bc:ad:07:80:
         9e:9f:20:1a:58:58:ab:62:d6:a1:07:05:d2:39:a2:37:31:88:
         93:6f:23:50:50:bc:ce:8e:64:d8:38:45:79:6d:e8:cb:f1:5f:
         2e:e3:ff:a5:76:f7:25:7b:ee:38:34:82:79:33:a5:e5:45:b5:
         4d:a3:a4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----