Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/Y_5Hx_rZzl5AubK6ZKkrLplvyEc.roa
File:                     Y_5Hx_rZzl5AubK6ZKkrLplvyEc.roa (raw, json)
Hash identifier:          WiDvlOqogMOTG16zc+iR/+9LK+BPgIsNGomVzpyhPXQ=
Subject key identifier:   63:FE:47:C7:FA:D9:CE:5E:40:B9:B2:BA:64:A9:2B:2E:99:6F:C8:47
Certificate issuer:       /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial:       0787BA6A
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/Y_5Hx_rZzl5AubK6ZKkrLplvyEc.roa
Signing time:             Sat 01 Jan 2022 05:52:19 +0000
ROA not before:           Sat 01 Jan 2022 05:52:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7603
IP address blocks:        2a0f:607:1300::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126335594 (0x787ba6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
        Validity
            Not Before: Jan  1 05:52:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=63fe47c7fad9ce5e40b9b2ba64a92b2e996fc847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:1f:21:1e:bc:45:6d:e3:12:95:9f:df:dc:
                    bc:61:af:41:1a:c6:39:eb:ed:1a:94:94:91:e2:d0:
                    42:41:cd:74:1b:99:4e:0b:8d:6c:23:f7:24:50:75:
                    c7:1f:12:73:37:3a:f8:68:0f:89:84:17:f8:b9:35:
                    cf:1b:a4:12:bc:5b:61:21:a3:c9:88:77:79:5f:78:
                    e4:c4:eb:5d:45:9f:0d:8e:bf:d1:3e:cf:fd:45:24:
                    01:1d:1e:60:82:e0:de:7d:d9:59:c7:e4:7e:99:1d:
                    71:55:ce:4f:98:52:71:c9:a6:e7:9b:92:64:dd:fb:
                    63:66:da:58:74:60:19:c8:8a:09:78:9f:9b:e7:d8:
                    c3:8c:a9:59:84:c5:2d:8f:64:51:50:a6:50:f1:4e:
                    91:29:db:04:1c:d6:4a:3d:7c:98:0b:8b:6b:e5:33:
                    f5:18:3c:cf:54:0d:bf:c9:bd:44:ba:19:08:f0:ff:
                    fa:da:9e:48:b8:b2:66:97:25:61:a1:95:3e:a3:28:
                    82:60:82:18:cc:86:74:b2:a0:6b:45:a9:fa:7c:a0:
                    c6:32:7e:d7:92:8b:a0:75:21:f7:6a:83:a6:1d:4c:
                    e2:fd:4e:6e:d2:67:f9:6b:cd:94:0e:00:79:b6:0d:
                    a6:90:07:92:c5:6e:14:48:e0:86:39:27:4a:39:f6:
                    1d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FE:47:C7:FA:D9:CE:5E:40:B9:B2:BA:64:A9:2B:2E:99:6F:C8:47
            X509v3 Authority Key Identifier:
                keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/Y_5Hx_rZzl5AubK6ZKkrLplvyEc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:607:1300::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:79:b9:6d:19:27:cf:8d:c9:ee:6d:07:de:e0:03:8e:dd:a9:
         b6:c3:f0:d8:4c:99:11:bd:e9:60:82:a5:cb:db:54:ec:c4:ef:
         4c:3d:ac:00:67:a6:1f:64:1d:b5:a7:80:ab:b8:c5:ea:ea:01:
         4c:69:1b:2d:9a:a1:8a:26:c8:41:60:9b:d5:26:1f:7a:da:2c:
         f2:59:da:35:67:80:22:cc:78:99:6d:08:56:ff:09:5c:f9:bd:
         90:68:91:d3:d4:d6:dc:14:eb:70:e0:8b:dd:44:c4:21:67:cd:
         8d:d4:5a:82:52:47:cf:5f:eb:93:b4:4c:84:7d:e7:cd:c2:d8:
         53:ab:31:f5:b3:f3:f3:99:d0:de:4b:88:6a:0b:02:45:b6:a1:
         4f:d9:2e:85:6f:53:9c:09:e9:43:96:c0:65:6a:56:16:c9:76:
         1c:60:97:dd:e8:32:bd:2d:eb:77:43:16:d7:63:07:30:40:34:
         be:8c:42:61:98:2d:a6:f8:83:1e:ed:ef:83:c7:eb:93:87:f2:
         ce:63:08:15:2b:ee:1a:5a:b8:04:9c:66:8e:89:7a:da:62:0d:
         e4:06:09:b8:e7:29:61:1c:a8:ee:b5:8a:59:e3:ad:20:da:b4:
         9a:f0:bb:d6:c3:6e:fe:1b:f6:4d:44:60:a7:50:ed:7e:f6:88:
         07:ed:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----