Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/H72K0UFG5vaeOx3k-9Z08MRqDy0.roa
File:                     H72K0UFG5vaeOx3k-9Z08MRqDy0.roa (raw, json)
Hash identifier:          Dulgh94UfKJcujSu0EH519VmStTvfKUKbgFIj7rjquE=
Subject key identifier:   1F:BD:8A:D1:41:46:E6:F6:9E:3B:1D:E4:FB:D6:74:F0:C4:6A:0F:2D
Certificate issuer:       /CN=6eeb10f0a4b91964541a5e19a9cb83cb7268950e
Certificate serial:       018419254F9A6B772FCC94A1EAD5990CCFB6
Authority key identifier: 6E:EB:10:F0:A4:B9:19:64:54:1A:5E:19:A9:CB:83:CB:72:68:95:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/busQ8KS5GWRUGl4ZqcuDy3JolQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/H72K0UFG5vaeOx3k-9Z08MRqDy0.roa
Signing time:             Thu 27 Oct 2022 11:13:06 +0000
ROA not before:           Thu 27 Oct 2022 11:13:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12859
IP address blocks:        2.56.226.0/23 maxlen: 23
                          2a09:d240:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:19:25:4f:9a:6b:77:2f:cc:94:a1:ea:d5:99:0c:cf:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eeb10f0a4b91964541a5e19a9cb83cb7268950e
        Validity
            Not Before: Oct 27 11:13:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1fbd8ad14146e6f69e3b1de4fbd674f0c46a0f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:48:68:18:80:7b:2c:25:06:2b:80:e0:15:ad:
                    e1:dc:a8:0f:fc:3e:d9:90:5a:d0:a9:3c:4a:0b:81:
                    94:36:44:25:79:c3:e9:e5:54:25:5e:00:00:ce:99:
                    64:88:39:0e:ac:88:67:d7:27:c3:fb:fc:fd:23:cb:
                    3a:33:2a:ee:72:da:14:3d:3c:0f:d9:2c:e6:28:95:
                    42:f0:53:8a:f8:cc:9d:a7:c8:59:bb:87:b7:2a:dc:
                    e2:6b:3a:08:cf:a9:02:21:cb:a4:c1:73:69:24:0d:
                    e3:75:1f:69:8e:26:45:00:ff:f5:0b:f3:18:c2:28:
                    1e:ea:0f:39:83:d5:7b:4e:35:48:11:65:61:62:47:
                    85:04:af:a2:19:23:1d:e8:f3:38:69:74:45:d7:62:
                    61:13:bf:48:4b:1c:43:76:27:e8:e9:cb:55:86:34:
                    b4:44:25:15:4a:7d:fa:6b:43:a3:8a:0e:0e:f4:fc:
                    b2:a4:6b:2f:5a:49:f1:db:7f:2a:93:f7:3f:63:7a:
                    cd:56:a9:28:f1:c7:69:23:77:46:e6:38:1c:ec:12:
                    d1:42:ac:c5:e8:93:bf:e4:d0:da:26:bd:fb:50:cc:
                    64:3c:ca:5e:b3:b1:80:c0:b9:13:ad:71:18:6b:b3:
                    fb:83:ca:dc:98:0f:1c:a7:01:3a:ef:84:35:a2:d6:
                    55:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BD:8A:D1:41:46:E6:F6:9E:3B:1D:E4:FB:D6:74:F0:C4:6A:0F:2D
            X509v3 Authority Key Identifier:
                keyid:6E:EB:10:F0:A4:B9:19:64:54:1A:5E:19:A9:CB:83:CB:72:68:95:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/busQ8KS5GWRUGl4ZqcuDy3JolQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/H72K0UFG5vaeOx3k-9Z08MRqDy0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/busQ8KS5GWRUGl4ZqcuDy3JolQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.56.226.0/23
                IPv6:
                  2a09:d240:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:ec:18:5d:74:a0:45:cc:92:59:39:3c:6f:70:3f:ee:36:6f:
         01:6d:68:15:45:f8:41:59:af:78:8a:e8:77:f5:37:84:be:5e:
         b8:cd:4b:a0:e9:4d:fa:e4:3b:61:bf:97:1a:91:62:df:97:6d:
         e0:00:b4:66:31:ba:7a:91:62:82:ce:8c:9c:ff:24:29:58:2b:
         fa:ea:2f:55:24:7e:ff:df:9a:6c:6c:0e:0c:dd:35:ee:f6:5b:
         90:fe:8f:0c:f7:78:47:c7:bd:2f:70:a5:70:d5:e1:64:c4:9d:
         88:13:ea:02:a6:fc:4b:c9:54:fc:05:3a:98:04:c4:31:b3:b6:
         dc:2a:d7:29:64:82:de:75:66:cc:c0:d7:8c:bc:ab:14:72:3b:
         97:28:50:71:7c:1c:36:4f:4a:05:9c:9b:55:85:3a:70:ae:3c:
         9c:71:7c:37:32:42:41:28:d2:35:85:23:9c:e9:4e:d4:7e:4c:
         de:7a:46:05:39:b1:6b:d5:1b:78:68:dd:c3:17:61:67:18:01:
         71:4d:14:8b:94:40:53:48:3c:5d:c9:cc:47:82:f5:9b:c7:1d:
         9d:fd:33:ec:20:ad:36:63:b0:2b:5c:a8:52:2a:93:00:8f:53:
         4e:2a:d5:39:1d:71:34:f5:ad:a6:01:5d:35:9a:49:57:ef:29:
         4c:9e:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----