Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/ogEZcMQj3050Ic7KmByz6ZAfc7Q.roa
File:                     ogEZcMQj3050Ic7KmByz6ZAfc7Q.roa (raw, json)
Hash identifier:          pHuZ/rNRHDrlUAsUJ2nr9ytWRPK6mksjIhAf82CCoRY=
Subject key identifier:   A2:01:19:70:C4:23:DF:4E:74:21:CE:CA:98:1C:B3:E9:90:1F:73:B4
Certificate issuer:       /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial:       01822A0BF5FAABF2499587B41B9DCD9C7283
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/ogEZcMQj3050Ic7KmByz6ZAfc7Q.roa
Signing time:             Sat 23 Jul 2022 07:53:23 +0000
ROA not before:           Sat 23 Jul 2022 07:53:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204828
IP address blocks:        2001:67c:2284::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:2a:0b:f5:fa:ab:f2:49:95:87:b4:1b:9d:cd:9c:72:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
        Validity
            Not Before: Jul 23 07:53:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a2011970c423df4e7421ceca981cb3e9901f73b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:00:91:5f:b2:8e:0d:55:59:cb:99:ae:66:60:
                    3e:e5:d2:1d:ac:6f:ee:1d:4f:98:9f:1c:11:7a:f4:
                    cc:80:ae:99:9d:2a:ce:01:0b:e4:15:e4:02:b8:9b:
                    3e:13:12:6f:f3:56:e3:6c:c3:c7:87:14:a4:69:85:
                    d7:c4:c9:a7:4f:11:13:f1:3d:e4:aa:3c:69:cb:22:
                    f6:49:c8:bc:01:7f:f3:da:8e:b2:60:4a:f6:11:d9:
                    6b:7d:9f:9f:87:06:8e:63:92:4b:92:10:a4:a5:c5:
                    0f:e5:39:42:83:ca:e0:d5:4c:26:44:50:91:40:41:
                    4b:ad:fd:ba:57:f8:cd:a3:94:15:4c:dc:da:2a:6d:
                    86:8c:c0:21:2d:7d:fe:4b:28:75:5f:36:4c:86:c0:
                    06:8b:13:f7:fe:92:e5:ac:38:56:cd:c7:81:81:a5:
                    02:01:b6:06:05:e6:7b:f1:02:3b:34:b0:46:d4:a5:
                    53:23:92:e5:d8:02:69:6b:e9:5c:13:4d:7f:2b:10:
                    e6:24:69:cf:ea:fe:d0:31:2b:72:83:a3:f9:7b:ef:
                    39:47:d1:86:0c:dd:4a:f7:d5:53:68:fb:1c:c4:dd:
                    85:6b:36:1e:29:7c:78:bf:dc:a2:fe:6c:44:a3:68:
                    b2:71:ff:92:3d:f7:19:45:b9:7d:9a:ea:42:7b:19:
                    af:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:01:19:70:C4:23:DF:4E:74:21:CE:CA:98:1C:B3:E9:90:1F:73:B4
            X509v3 Authority Key Identifier:
                keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/ogEZcMQj3050Ic7KmByz6ZAfc7Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:2284::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:df:58:88:c9:f5:f9:76:1d:67:f5:fb:6b:ef:6d:88:be:a4:
         22:93:9a:20:4a:23:a9:b6:23:43:9a:1c:21:2c:83:30:ff:cf:
         de:55:ec:79:d0:3d:68:bc:df:41:70:9d:55:1d:dd:c2:37:97:
         54:13:d4:e0:d3:38:b5:77:2c:c2:5e:59:d5:97:67:bc:78:00:
         0b:46:a9:60:78:8d:00:03:18:9e:57:5f:6f:bd:31:ea:37:48:
         bd:d4:96:e1:62:6c:16:3d:61:e1:fd:6b:eb:08:1f:67:83:10:
         a5:c7:8a:10:a5:59:49:2f:56:ea:a0:36:77:51:44:0a:19:ff:
         97:4d:36:00:22:78:f9:fc:8c:68:d6:a5:18:98:0d:e1:c3:0e:
         d8:52:93:c3:88:6d:2e:1c:02:90:7c:40:58:d2:0a:12:53:dd:
         fd:c6:e7:3c:4a:26:bb:8f:0d:6b:c6:01:9d:b1:9b:5f:96:a1:
         08:1a:43:29:0c:36:d9:69:f5:35:38:73:9c:e8:e4:2f:72:a4:
         38:eb:9f:4d:72:02:37:97:5a:eb:eb:90:3d:77:cd:90:bc:3c:
         dc:ce:50:ed:da:44:a0:45:4d:ac:a3:4f:90:55:4b:03:58:16:
         95:9e:5c:7b:bf:b0:4a:12:47:13:4b:b0:4d:56:ac:08:b0:b1:
         58:e9:84:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----