Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/ZEuYvVHaY1jy-Ltya6o7fYon1is.roa
File:                     ZEuYvVHaY1jy-Ltya6o7fYon1is.roa (raw, json)
Hash identifier:          /pvrsJ4TSTtsAq+bXuEgAwdptajv1IGw75rKjQf08iU=
Subject key identifier:   64:4B:98:BD:51:DA:63:58:F2:F8:BB:72:6B:AA:3B:7D:8A:27:D6:2B
Certificate issuer:       /CN=fb744006eac3084bf88f128349b0e733bb3d79e3
Certificate serial:       096D789F
Authority key identifier: FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/ZEuYvVHaY1jy-Ltya6o7fYon1is.roa
Signing time:             Sat 12 Feb 2022 10:57:08 +0000
ROA not before:           Sat 12 Feb 2022 10:57:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35133
IP address blocks:        2.58.59.0/24 maxlen: 24
                          2a09:e240:2::/48 maxlen: 48
                          2a09:e240:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158169247 (0x96d789f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb744006eac3084bf88f128349b0e733bb3d79e3
        Validity
            Not Before: Feb 12 10:57:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=644b98bd51da6358f2f8bb726baa3b7d8a27d62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:78:27:3f:94:5b:4c:b2:20:06:11:b6:1b:e4:
                    ae:30:d9:23:58:2f:99:3b:9d:af:fa:32:87:1b:e4:
                    f8:9a:03:01:fe:6d:ec:fb:22:e1:73:2f:09:54:ef:
                    74:ac:04:b9:7b:82:03:84:1f:7b:f3:90:4b:36:80:
                    89:32:56:04:b4:2e:fa:45:fc:f8:35:ea:34:28:94:
                    f8:bd:fa:cd:1d:82:98:69:ba:5e:e3:64:51:d2:b8:
                    d4:94:c3:d9:a2:5a:72:36:4f:23:dc:cb:9f:72:bc:
                    30:e5:2f:b7:6a:cc:73:e5:b3:b8:98:3d:e5:84:8b:
                    13:cf:8c:18:1c:d1:bc:09:4b:d8:96:31:ff:06:70:
                    f0:d6:2b:a0:13:01:7d:45:12:48:63:2a:54:25:30:
                    52:87:9c:5a:ba:18:a3:19:41:28:40:ed:10:7a:34:
                    9c:2e:02:4f:79:7e:c4:e4:91:a7:73:30:92:b3:65:
                    d1:e9:35:3e:97:fd:8c:3e:21:a1:f5:94:da:6b:69:
                    50:c1:08:4d:c7:84:e3:ac:62:61:1d:36:23:26:73:
                    26:3c:82:04:62:b1:22:2e:48:45:70:13:4d:e0:c7:
                    65:ce:fd:f4:d7:33:c2:6b:a1:e5:67:cc:a0:d6:b5:
                    4e:f3:4f:58:34:50:d3:62:c1:60:73:bf:cc:8a:82:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4B:98:BD:51:DA:63:58:F2:F8:BB:72:6B:AA:3B:7D:8A:27:D6:2B
            X509v3 Authority Key Identifier:
                keyid:FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/ZEuYvVHaY1jy-Ltya6o7fYon1is.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/1-3RABurDCEv4jxKDSbDnM7s9eeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.58.59.0/24
                IPv6:
                  2a09:e240:1::-2a09:e240:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:ce:28:c0:1f:f0:08:17:fe:76:2f:ed:7e:88:df:74:11:
         62:98:35:ff:9f:16:e7:1f:44:2f:4b:32:2e:b5:55:69:80:e3:
         9a:1c:4e:0e:40:2a:fc:30:fd:c4:53:a2:e8:53:0e:57:14:96:
         8f:39:8d:fd:3e:20:f7:15:ab:7e:c3:85:bb:7f:91:9b:05:5d:
         5d:c7:3f:04:b2:3a:13:00:03:b0:56:d4:1f:4b:ce:52:a6:d5:
         69:e2:33:53:7d:dd:ad:5e:85:98:c9:6c:98:ab:81:1b:2e:42:
         cd:7e:5a:40:21:b3:ae:c1:33:b6:05:3a:97:55:e0:9e:e4:c8:
         0e:44:32:69:53:a2:64:db:76:46:be:da:f5:a2:b5:a1:5e:43:
         6e:2c:e2:33:43:6f:83:05:36:78:d2:7b:8c:35:5e:42:6f:08:
         26:57:be:ad:61:42:e6:18:a2:79:a3:fe:62:d5:51:b2:1c:57:
         93:59:e8:a6:6c:85:7b:6a:e7:ae:f9:de:be:69:9d:b2:6a:b6:
         36:9e:6e:2e:13:85:a2:3c:dd:f0:81:53:c5:1a:c5:de:89:49:
         b1:c4:e4:5d:87:54:a6:92:fa:f5:51:a8:85:5d:8f:71:a9:5c:
         3a:7e:4b:98:cf:ca:53:9e:9b:cc:ab:62:c9:ce:dd:cf:0e:cb:
         e6:1a:06:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----