Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/0eCpfi1qBd64kGrYjFH3L0GOnj4.roa
File:                     0eCpfi1qBd64kGrYjFH3L0GOnj4.roa (raw, json)
Hash identifier:          qs8Xom9HOqyDUCe/j04RdUhNkjHV1pNYNVjezsVpn7w=
Subject key identifier:   D1:E0:A9:7E:2D:6A:05:DE:B8:90:6A:D8:8C:51:F7:2F:41:8E:9E:3E
Certificate issuer:       /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial:       041665BD
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/0eCpfi1qBd64kGrYjFH3L0GOnj4.roa
Signing time:             Fri 21 Jan 2022 13:32:18 +0000
ROA not before:           Fri 21 Jan 2022 13:32:18 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3573
IP address blocks:        2a02:ee80:4171::/48 maxlen: 48
                          2a02:ee80:415c::/47 maxlen: 47
                          2a02:ee80:4170::/48 maxlen: 48
                          2a02:ee80:41a8::/47 maxlen: 47
                          2a02:ee80:4170::/47 maxlen: 47

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68576701 (0x41665bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
        Validity
            Not Before: Jan 21 13:32:18 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d1e0a97e2d6a05deb8906ad88c51f72f418e9e3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:9e:ed:ae:a8:08:a4:1e:ec:f2:cb:bc:a4:
                    d2:75:d0:ed:e9:06:c4:0f:d2:16:eb:d7:10:6c:73:
                    b1:d7:c0:15:06:6b:fa:8c:2c:2f:05:82:b5:8d:50:
                    1d:b9:93:44:83:9a:3f:8d:83:52:ce:df:6b:dc:40:
                    c6:0b:9e:15:b5:97:51:84:0b:74:7e:94:df:56:cf:
                    58:3a:06:61:51:62:7a:e8:24:1d:e0:a5:fd:27:7c:
                    09:4d:13:59:fa:79:1d:ed:14:a0:e3:8d:ce:9d:7e:
                    3c:c9:25:46:b8:96:fa:95:88:cc:7a:d0:8d:91:cb:
                    3d:9c:57:c0:c2:4a:18:03:c6:8d:73:d2:72:32:d6:
                    e5:1d:82:55:ec:10:b4:e8:29:ae:aa:4c:d8:af:46:
                    2e:d8:bc:09:93:6a:51:3a:d3:ad:78:c5:f8:c6:df:
                    14:cb:31:00:32:d4:1d:ee:39:ac:ed:cf:40:0e:66:
                    fc:8b:9f:ea:10:69:a1:1c:b6:e9:ba:83:76:0c:01:
                    3d:4e:7f:07:22:a0:8f:79:3e:12:2a:37:7b:84:f8:
                    a1:74:02:c7:69:43:04:ff:26:38:94:7d:4e:84:54:
                    99:cf:a7:e9:11:8e:12:00:92:ce:31:fb:14:81:2c:
                    9c:a5:64:70:a6:00:61:7f:bd:f0:c0:f1:76:a9:a4:
                    51:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E0:A9:7E:2D:6A:05:DE:B8:90:6A:D8:8C:51:F7:2F:41:8E:9E:3E
            X509v3 Authority Key Identifier:
                keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/0eCpfi1qBd64kGrYjFH3L0GOnj4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:ee80:415c::/47
                  2a02:ee80:4170::/47
                  2a02:ee80:41a8::/47

    Signature Algorithm: sha256WithRSAEncryption
         66:6e:fe:6c:26:54:df:01:29:7f:7b:e3:0a:08:23:09:03:03:
         0b:69:e3:55:1a:d4:00:1b:f5:e2:8d:ea:42:32:6d:ec:df:b9:
         6e:e8:d3:83:fb:5d:06:75:11:37:c4:ee:bd:12:78:ba:53:b4:
         e1:47:0a:5a:b4:28:ce:e8:f0:d4:6e:07:c6:59:66:80:b9:9e:
         0d:48:39:81:ff:74:e6:5e:d3:1b:30:6c:87:3b:42:ca:8a:81:
         7a:73:eb:50:f3:76:10:ad:e3:c8:4b:82:ec:18:78:fc:ec:e2:
         73:09:47:f2:70:b9:49:e2:21:35:9f:87:0f:a6:c8:d5:82:27:
         8c:e7:05:69:db:3d:33:d5:a3:31:59:b1:06:f6:c2:e6:a4:8d:
         47:e4:8a:08:c4:64:0b:d4:a5:28:fa:81:9b:43:bc:31:1d:bb:
         66:2c:54:25:53:0b:61:64:d5:71:ea:a3:58:85:00:b7:0f:66:
         79:a0:b6:dd:59:6f:93:38:78:e1:0b:48:46:94:9e:5e:16:ec:
         1a:aa:10:77:26:6f:49:60:d2:01:45:6c:e0:d1:b1:65:60:11:
         2c:c7:33:c7:74:f4:fc:1e:d8:64:e0:18:84:48:51:2c:fe:cf:
         a0:50:54:34:fc:a6:18:c5:6b:ac:57:86:a7:c3:9c:f3:94:70:
         c7:b0:46:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----