Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/9vOZdvF5dwA979NFrHw9sYKySOI.roa
File:                     9vOZdvF5dwA979NFrHw9sYKySOI.roa (raw, json)
Hash identifier:          F4yFwi7o7XLV7rgLPjJnX5OtBC05mu3symNlj9bMlYE=
Subject key identifier:   F6:F3:99:76:F1:79:77:00:3D:EF:D3:45:AC:7C:3D:B1:82:B2:48:E2
Certificate issuer:       /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial:       093E3707
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/9vOZdvF5dwA979NFrHw9sYKySOI.roa
Signing time:             Wed 22 Jun 2022 09:32:44 +0000
ROA not before:           Wed 22 Jun 2022 09:32:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203871
IP address blocks:        2a00:4cc6::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155072263 (0x93e3707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
        Validity
            Not Before: Jun 22 09:32:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6f39976f17977003defd345ac7c3db182b248e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:32:2f:40:2f:6d:4e:da:df:3b:28:b5:be:
                    e5:70:27:c9:4c:4e:27:ac:b9:d8:34:44:0f:38:00:
                    dd:32:98:6d:12:c6:16:13:2c:58:64:4c:0e:61:3d:
                    d9:93:53:0b:92:c4:df:2f:46:09:5b:f8:9a:78:aa:
                    1b:97:d7:f1:79:46:59:5f:0b:39:fb:da:74:bd:43:
                    60:79:6e:7c:39:d3:84:37:1d:50:a1:16:db:d0:04:
                    96:3d:0c:4f:69:dc:00:7c:4a:bf:ac:91:66:85:f2:
                    40:e2:64:cf:82:bf:38:a0:ae:69:74:8b:ed:f8:ec:
                    25:a0:23:2f:5a:4f:d2:ec:8a:5f:64:a8:5f:c2:fa:
                    f9:c4:8b:87:d2:c3:e1:c6:e7:85:8a:cf:dc:51:b2:
                    e9:e3:ae:41:a8:89:43:a2:8a:dd:62:db:f9:4a:df:
                    66:95:a7:16:d8:62:ab:7e:39:37:cf:fc:2e:5c:76:
                    41:84:2a:dd:90:1f:88:56:b2:4e:d2:60:45:85:3c:
                    ed:63:17:48:06:a1:a2:f7:59:47:b6:cc:69:6c:04:
                    2b:6c:e0:0c:c1:d1:42:5e:f6:47:02:e2:a9:67:93:
                    d9:b3:df:17:12:2b:dd:99:00:e6:63:01:17:f7:e4:
                    89:17:f1:d4:05:2f:b3:45:99:81:b5:e6:0d:0d:b8:
                    8a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F3:99:76:F1:79:77:00:3D:EF:D3:45:AC:7C:3D:B1:82:B2:48:E2
            X509v3 Authority Key Identifier:
                keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/9vOZdvF5dwA979NFrHw9sYKySOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:4cc6::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:da:85:b1:12:54:bd:51:e6:8c:5d:dd:62:bc:9b:61:0f:91:
         83:d8:41:98:e4:62:57:d3:8b:3c:40:43:9b:98:7a:3c:c2:bb:
         ce:92:1c:4b:98:ff:a3:c5:1a:5c:de:a3:1f:75:65:f4:42:80:
         9d:67:c9:c6:16:d3:ee:0b:32:fd:5a:9e:69:1b:87:2d:ef:d2:
         ef:3c:34:d5:1e:ef:73:3e:4a:08:30:18:4b:ff:be:2e:be:79:
         6d:a6:25:69:e2:82:01:80:46:a7:a8:99:a5:e9:93:d0:9c:01:
         c4:87:00:e1:df:c6:dd:7b:f9:4a:5e:70:22:01:2f:b9:a1:6c:
         01:26:55:6f:1b:d2:c7:20:f5:2e:c7:71:a0:da:1a:8c:1c:22:
         e3:98:a2:c1:06:38:cf:1a:01:7d:9f:af:71:b6:ba:af:ff:9d:
         55:54:6c:5a:aa:5a:1c:ce:64:23:54:27:7d:72:cf:66:d2:ed:
         38:04:b8:b9:06:3d:33:e9:5e:30:91:ed:aa:2e:bc:eb:c0:67:
         05:36:c3:fe:a6:e2:d5:0c:bb:8a:6a:8a:cc:d6:d2:d8:8b:05:
         d5:fe:96:e6:08:a8:30:7b:c7:ab:9f:65:7d:f4:33:fc:ab:d1:
         a7:c4:f2:ef:05:10:15:1c:41:0e:ed:b5:ee:b1:59:6b:db:8a:
         04:ad:75:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----