Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/eyay8k87IZ35zExne_TItpV8sx8.roa
File:                     eyay8k87IZ35zExne_TItpV8sx8.roa (raw, json)
Hash identifier:          R4dfvsdY6rqeKZAy6+PjcZg0XFtA0pn4PmY2bSJ2pqQ=
Subject key identifier:   7B:26:B2:F2:4F:3B:21:9D:F9:CC:4C:67:7B:F4:C8:B6:95:7C:B3:1F
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       2B1968F0
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/eyay8k87IZ35zExne_TItpV8sx8.roa
Signing time:             Thu 21 Apr 2022 09:41:16 +0000
ROA not before:           Thu 21 Apr 2022 09:41:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39150
IP address blocks:        2a02:d0c0::/32 maxlen: 32
                          2a02:ec40::/29 maxlen: 29
                          2a02:d0c1::/32 maxlen: 32
                          2a02:ec40::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723085552 (0x2b1968f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Apr 21 09:41:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b26b2f24f3b219df9cc4c677bf4c8b6957cb31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:0b:b8:b9:76:6b:3d:2c:c5:58:d5:8a:eb:
                    92:ce:ce:ac:f1:5b:e2:0e:74:99:c5:e8:22:aa:62:
                    68:f2:95:66:78:1d:1e:21:96:a4:f0:6c:66:d6:54:
                    5b:aa:98:e6:1c:d9:f5:29:45:88:94:98:28:ae:1c:
                    4a:61:84:07:c8:49:6e:88:5a:3d:ec:18:70:72:82:
                    ed:2c:10:7d:82:17:5e:7c:4d:39:09:20:ba:4b:ae:
                    13:23:25:e0:a2:4b:68:33:43:aa:a2:5c:e9:4f:05:
                    d4:8f:01:82:fb:30:cb:aa:ce:a3:05:e8:a8:e1:8a:
                    21:8b:18:a9:46:d8:57:7c:94:73:a8:6d:26:d9:aa:
                    a4:d9:20:24:e8:97:a8:74:c8:78:de:e1:60:67:da:
                    9c:33:42:d9:92:c3:05:b7:ed:c9:51:97:e5:c1:e1:
                    de:5c:09:21:18:f4:7b:72:d8:bd:2a:3a:64:0b:a4:
                    04:d4:3f:58:1f:34:12:27:a5:73:98:86:e9:93:32:
                    e2:07:0c:8c:a3:62:a7:c0:13:25:44:30:ff:96:b0:
                    af:3a:33:2b:c7:cd:a9:f8:f7:2a:39:f7:7b:f2:f0:
                    d6:60:c3:77:d9:1c:f7:d1:a9:e3:60:e0:cc:cb:51:
                    7b:2f:2a:8e:66:36:c1:fb:13:e3:a8:0b:2d:7e:11:
                    06:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:26:B2:F2:4F:3B:21:9D:F9:CC:4C:67:7B:F4:C8:B6:95:7C:B3:1F
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/eyay8k87IZ35zExne_TItpV8sx8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:d0c0::/31
                  2a02:ec40::/29

    Signature Algorithm: sha256WithRSAEncryption
         5b:18:07:89:d9:32:29:0b:6b:bf:b1:9e:b7:43:1c:90:9f:e6:
         24:ad:60:0c:65:b4:83:1c:ff:05:88:4f:75:fa:f5:f4:36:cd:
         93:e0:51:ee:8a:cd:a6:0b:5c:fe:aa:ad:92:ac:d9:ee:43:3a:
         a2:e4:ba:70:f3:79:6f:58:bc:ee:cb:ed:3f:fe:4e:f1:f0:ed:
         23:45:28:40:2e:d0:c4:e2:72:25:de:f6:f4:50:4d:cb:0a:aa:
         f5:89:88:50:6f:91:b7:9b:14:9e:10:71:4e:45:ec:79:30:20:
         78:e0:6c:f0:a7:46:f2:25:d6:f8:a2:74:f2:2d:12:85:14:c5:
         5e:a8:1d:72:75:ce:d1:9e:5e:df:9d:5d:d6:62:af:29:4f:cd:
         7c:ae:dc:19:12:22:9f:5c:8f:a1:d6:57:a3:37:e2:05:e4:bd:
         f8:b7:5c:fe:75:c5:d7:15:3e:00:48:23:ee:ee:1e:01:b5:c5:
         47:f4:a8:27:c3:da:33:49:f6:4a:09:4d:84:35:bc:ac:ea:3d:
         f0:a2:99:c2:d4:fe:6c:91:89:e7:54:35:df:09:74:80:08:34:
         9d:c2:d1:fb:98:9a:12:cb:4d:1d:5f:f5:76:5f:7b:d2:c1:5f:
         d4:cf:23:71:c9:a0:8d:ff:2b:a3:7c:0b:42:fd:8b:7e:61:58:
         f6:e6:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----