Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/m2bPvw6e1ao04ZQks8C5lL3XphM.roa
File:                     m2bPvw6e1ao04ZQks8C5lL3XphM.roa (raw, json)
Hash identifier:          CiLn7/rq7xqExdQUsqfHTH36TmljT54GHGfqbOHCD/I=
Subject key identifier:   9B:66:CF:BF:0E:9E:D5:AA:34:E1:94:24:B3:C0:B9:94:BD:D7:A6:13
Certificate issuer:       /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial:       028ECFC8
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/m2bPvw6e1ao04ZQks8C5lL3XphM.roa
Signing time:             Sat 01 Jan 2022 08:56:36 +0000
ROA not before:           Sat 01 Jan 2022 08:56:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     7922
IP address blocks:        2a0c:93c0:c002::/48 maxlen: 48
                          2a0c:93c0:8002::/48 maxlen: 48
                          2a0c:93c0:8000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42913736 (0x28ecfc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
        Validity
            Not Before: Jan  1 08:56:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b66cfbf0e9ed5aa34e19424b3c0b994bdd7a613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:56:ec:84:91:78:38:29:89:31:af:0e:9b:
                    4c:ce:5f:6e:b4:80:80:af:e9:a0:1d:bd:8d:0f:b6:
                    3f:f2:0b:f2:6e:cb:13:7e:49:1c:8d:6d:e7:60:95:
                    9e:66:a1:37:7e:33:d1:4b:36:d1:40:12:af:e8:64:
                    57:c1:39:89:b2:12:c3:45:85:66:d0:0a:50:f4:8e:
                    87:55:e8:9d:3d:8c:ae:2d:9c:56:ac:d4:5d:10:aa:
                    01:25:21:ca:67:62:ec:cf:8c:c6:b7:a5:e3:6b:d3:
                    bd:5c:f1:a3:4a:f4:1c:a1:e1:b1:b6:c8:af:5a:94:
                    bd:f3:38:04:dd:bb:09:df:a0:00:a5:74:db:d8:7c:
                    f3:60:24:e3:e7:33:fc:89:cf:09:1d:89:e1:61:a1:
                    58:d2:fe:d1:e7:a4:6a:98:d1:92:76:80:0b:fd:fc:
                    7c:d9:9d:02:05:ca:7c:45:37:97:12:0d:82:e0:7c:
                    bf:a6:29:84:99:c5:fa:22:17:30:7a:56:6d:75:b5:
                    e0:b2:6e:78:98:20:3d:ae:1a:63:27:76:03:c1:6f:
                    bc:05:e5:6b:83:42:d0:23:72:85:a7:83:3f:b4:ee:
                    01:4f:94:a3:12:68:cb:ae:08:08:b7:59:16:c1:f9:
                    f5:53:fd:e1:08:11:09:89:c1:f0:95:ec:de:4e:52:
                    e9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:CF:BF:0E:9E:D5:AA:34:E1:94:24:B3:C0:B9:94:BD:D7:A6:13
            X509v3 Authority Key Identifier:
                keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/m2bPvw6e1ao04ZQks8C5lL3XphM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:93c0:8000::/48
                  2a0c:93c0:8002::/48
                  2a0c:93c0:c002::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:29:5d:ab:4f:c5:6b:dc:b4:3e:6d:9a:b8:c9:43:34:86:f8:
         ee:2a:79:b3:6e:ac:bf:86:b4:58:c0:fb:45:b2:17:85:f1:48:
         0c:f0:7d:1c:8e:9f:38:3b:08:6c:1c:10:f9:1c:a9:1b:a5:46:
         5c:76:49:c6:1b:1c:a9:01:5f:49:da:30:8d:15:a8:4a:0c:a5:
         1d:e4:cb:3f:8e:b1:02:5e:9f:19:5f:43:9b:57:9f:a2:71:69:
         e5:84:8d:2c:27:c2:6a:1a:d0:f4:a2:f2:ef:9f:73:08:43:ab:
         b2:fb:49:4c:eb:72:63:b3:41:bf:8a:ba:cb:d1:e8:0e:86:a4:
         47:36:a9:fa:b7:19:fe:93:0e:3a:bb:b1:ee:ed:65:0c:d2:93:
         a7:79:46:db:a5:91:a4:3b:23:28:d6:83:d9:c7:f7:52:a1:20:
         7b:5f:39:d3:74:b3:29:85:9e:17:17:bd:70:3e:9d:84:c1:a7:
         3f:bf:34:b7:c3:8d:89:41:6d:93:4e:26:e0:04:18:18:d5:2a:
         93:9c:51:fc:7a:b1:b3:a5:81:57:e4:97:25:41:42:f2:1a:3f:
         a1:2a:38:87:ef:69:6b:97:7f:94:64:55:a6:cc:f3:95:7b:76:
         96:86:8d:0c:42:b2:4e:f2:fa:04:6b:f0:18:cf:b9:1e:97:e7:
         04:f3:fd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----