Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/Ds-kr_toyYPEvTgQDSi-j3JKgRI.roa
File:                     Ds-kr_toyYPEvTgQDSi-j3JKgRI.roa (raw, json)
Hash identifier:          TuciFAxALWMjlfLC88L1bRp6Jitxps7Vdz/LE12ib9U=
Subject key identifier:   0E:CF:A4:AF:FB:68:C9:83:C4:BD:38:10:0D:28:BE:8F:72:4A:81:12
Certificate issuer:       /CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
Certificate serial:       08BCDEA6
Authority key identifier: CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/Ds-kr_toyYPEvTgQDSi-j3JKgRI.roa
Signing time:             Sat 01 Jan 2022 12:59:53 +0000
ROA not before:           Sat 01 Jan 2022 12:59:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51013
IP address blocks:        213.188.156.0/23 maxlen: 23
                          2a02:250:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146595494 (0x8bcdea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd65ee23bff42ccf679d7377fe4da695d341aef0
        Validity
            Not Before: Jan  1 12:59:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0ecfa4affb68c983c4bd38100d28be8f724a8112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ad:8e:7c:32:16:c9:8a:d6:7e:9e:ec:7e:36:
                    b6:a2:e4:ae:fe:9c:86:7c:43:64:f1:c7:8f:dc:b2:
                    2e:7b:b5:c2:bb:45:d8:60:ee:1a:9c:eb:d2:9d:a4:
                    9c:98:2a:f1:c5:d3:da:38:59:32:60:bb:c7:ee:2e:
                    05:26:7f:60:81:22:23:59:db:06:05:c6:75:28:cb:
                    69:ce:46:ff:49:11:a6:2a:4f:1a:39:8b:58:23:7c:
                    62:19:04:38:18:54:8c:b4:08:59:4a:70:8d:e0:e5:
                    b1:a7:b2:e5:1d:ca:0a:30:0f:e4:81:73:bc:cc:76:
                    1d:c4:1c:3e:34:00:68:5e:9d:a5:ba:34:ce:e8:be:
                    b2:95:d2:88:48:71:ad:49:f4:bf:33:9e:fd:25:93:
                    bd:ed:c0:e5:15:19:ef:d0:c4:eb:48:ec:03:b3:5c:
                    16:c6:1d:e3:9d:6c:0d:e7:3c:58:f2:e7:bf:07:d8:
                    93:a1:97:b3:91:6f:fb:3b:e0:88:b6:64:94:af:bb:
                    59:3f:61:28:1b:bf:0a:6f:1f:ff:36:d7:d8:64:4c:
                    d2:57:35:f9:e6:f7:42:0d:fb:45:09:da:d8:1e:cc:
                    88:44:6e:eb:02:d9:82:0b:e7:f7:51:9f:21:6c:aa:
                    4c:3b:51:34:58:ca:42:21:a3:f6:a5:40:6d:d2:00:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CF:A4:AF:FB:68:C9:83:C4:BD:38:10:0D:28:BE:8F:72:4A:81:12
            X509v3 Authority Key Identifier:
                keyid:CD:65:EE:23:BF:F4:2C:CF:67:9D:73:77:FE:4D:A6:95:D3:41:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWXuI7_0LM9nnXN3_k2mldNBrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/Ds-kr_toyYPEvTgQDSi-j3JKgRI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/006d43-3dbf-4cf8-815d-5dc2fa6a3503/1/zWXuI7_0LM9nnXN3_k2mldNBrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.188.156.0/23
                IPv6:
                  2a02:250:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:54:48:5b:21:24:d8:35:54:15:ec:8b:a9:7b:c6:ba:5b:77:
         9a:9d:a0:86:06:e4:f7:d7:02:63:be:7b:83:57:01:13:af:cc:
         01:dc:e4:7a:b1:e2:19:cf:86:54:31:e2:71:6c:f8:f0:62:fc:
         8f:f5:25:06:0b:20:a0:79:40:ba:a4:47:eb:b9:6d:e4:f9:8a:
         1a:ca:51:09:fb:32:e5:82:92:fe:85:6d:bc:8d:9a:97:d1:78:
         fd:26:06:ac:6e:03:af:3d:df:29:4f:d0:9d:11:27:1a:d8:80:
         28:e5:9f:b1:f8:51:03:09:02:4d:e3:65:91:65:79:a7:5c:df:
         1f:72:9d:e4:85:10:6c:75:f2:ca:fa:be:b2:89:0b:59:08:3c:
         db:84:70:fe:17:cd:b1:b3:4e:ec:37:96:4a:59:0a:2b:a5:c4:
         87:8b:8e:e7:13:a5:45:ad:33:29:5b:74:2b:1e:1f:62:d9:42:
         e0:fb:59:74:47:ae:ed:34:7b:1d:3e:07:f3:2a:4e:34:6d:20:
         66:8a:c2:35:35:6c:b2:0d:37:e6:25:ed:6c:c0:f3:9f:57:db:
         7d:aa:a3:d3:c3:10:85:70:93:c4:d1:5b:b5:15:4c:9c:08:3c:
         55:51:7d:91:b9:ad:9f:51:7b:e0:b1:a1:2e:68:d1:27:ac:a0:
         d2:2c:94:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----