Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/Ime2ReXo0VZ_QC5dVjAt1kpOkBs.roa
File:                     Ime2ReXo0VZ_QC5dVjAt1kpOkBs.roa (raw, json)
Hash identifier:          W8nmVysFnrOqKBemXIHIV25FPWA/5KWHkRDR1Har3qM=
Subject key identifier:   22:67:B6:45:E5:E8:D1:56:7F:40:2E:5D:56:30:2D:D6:4A:4E:90:1B
Certificate issuer:       /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial:       08F3DA9D
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/Ime2ReXo0VZ_QC5dVjAt1kpOkBs.roa
Signing time:             Fri 04 Mar 2022 13:37:44 +0000
ROA not before:           Fri 04 Mar 2022 13:37:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47837
IP address blocks:        2a0e:e704:50::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150198941 (0x8f3da9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
        Validity
            Not Before: Mar  4 13:37:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2267b645e5e8d1567f402e5d56302dd64a4e901b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:42:88:e7:7b:0b:dd:20:cb:31:7c:ac:fb:e0:
                    0f:e9:55:f9:c8:85:8d:e2:dd:e2:ff:fc:68:7a:d0:
                    60:a2:73:9c:ad:1e:3f:a0:d0:b1:01:2a:87:fc:96:
                    4b:bd:78:41:37:de:67:ac:6b:4c:51:8d:1a:f9:fe:
                    3b:7a:6a:a7:62:5a:3d:25:83:25:a8:eb:35:dd:46:
                    12:c6:fa:77:76:11:e0:86:f3:bf:66:c2:1b:ac:65:
                    35:56:55:e9:34:bc:09:73:c0:fc:5d:e2:79:3f:c4:
                    6a:53:83:46:e4:f5:ca:3f:41:b2:1c:6e:c4:85:1f:
                    07:35:02:27:bf:f6:66:e6:43:0c:58:af:83:df:33:
                    f2:d8:be:94:79:10:bf:0f:8f:41:0f:27:a1:66:f2:
                    db:3d:3f:d7:90:d5:3e:97:3d:e0:68:8b:7e:b7:cc:
                    f0:48:1c:6f:9d:3e:9d:bd:f8:9a:3e:ce:cb:b8:73:
                    28:ac:5f:e5:51:4b:fe:0f:2e:4a:73:de:c0:d8:b5:
                    3f:79:ef:36:fd:ef:89:d6:d2:5d:ac:40:94:9a:d9:
                    e0:3a:dc:96:41:32:51:e4:bc:12:3b:d0:5b:6c:08:
                    23:e0:40:5b:c4:20:6a:65:db:70:51:cd:96:04:4e:
                    dd:a1:40:ba:62:de:a2:d3:00:57:4a:ab:96:1a:75:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:67:B6:45:E5:E8:D1:56:7F:40:2E:5D:56:30:2D:D6:4A:4E:90:1B
            X509v3 Authority Key Identifier:
                keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/Ime2ReXo0VZ_QC5dVjAt1kpOkBs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:e704:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         1e:94:00:92:68:40:9d:e5:83:84:64:6a:5e:a3:ed:79:db:20:
         22:5e:8d:f6:33:ea:06:76:55:bf:f8:28:35:ad:4a:cc:54:8a:
         e7:ab:96:fe:99:71:10:5a:6b:48:81:15:38:22:48:fc:83:fd:
         33:98:16:19:15:fd:e8:4c:70:7c:cf:bb:c1:43:2c:99:e7:92:
         cf:2a:13:8e:ae:7e:63:1b:b4:0f:46:1e:6e:a5:3f:f2:c3:49:
         6f:85:ae:9e:d6:73:e9:d2:6d:43:3c:8e:a6:5e:a0:f7:33:66:
         5a:59:c8:fa:d6:f3:43:a1:dc:76:4a:b1:6e:d6:90:eb:a3:7e:
         e7:35:db:ca:b3:e3:b7:22:e9:f7:51:af:52:3f:a5:5f:7f:92:
         61:59:79:c8:de:8c:9e:b8:de:d3:d0:5b:17:a6:c7:f8:29:cc:
         f6:e2:a4:f2:6b:ec:37:10:56:5b:a0:71:cd:78:8b:de:f6:47:
         8b:98:8b:81:20:48:9f:c3:d6:5f:19:7a:b6:92:26:d6:07:de:
         ef:ea:65:9f:6f:6c:79:2e:42:76:64:b7:94:d6:ac:a8:ac:b3:
         2b:8a:10:d1:e5:c1:eb:7f:ea:1e:8e:eb:86:99:48:16:26:68:
         1d:61:55:e4:a6:d2:92:34:f5:b3:80:1c:06:35:77:18:57:91:
         f7:29:d0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----