Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/uPc7JKiYmnaf-aiTbjA7s-ed-ZU.roa
File:                     uPc7JKiYmnaf-aiTbjA7s-ed-ZU.roa (raw, json)
Hash identifier:          NiNWeiUVWVxG14ZcsZN8XdB8C+YjJwKUBWJL4XVSycc=
Subject key identifier:   B8:F7:3B:24:A8:98:9A:76:9F:F9:A8:93:6E:30:3B:B3:E7:9D:F9:95
Certificate issuer:       /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial:       07979C04
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/uPc7JKiYmnaf-aiTbjA7s-ed-ZU.roa
Signing time:             Sat 01 Jan 2022 02:58:45 +0000
ROA not before:           Sat 01 Jan 2022 02:58:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0e:aa47::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127376388 (0x7979c04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
        Validity
            Not Before: Jan  1 02:58:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b8f73b24a8989a769ff9a8936e303bb3e79df995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:75:93:fa:74:b2:4e:15:13:f1:5e:eb:5b:
                    18:f3:2c:ee:1f:e7:ba:21:b7:8e:76:04:86:35:6b:
                    2a:00:42:2f:72:94:11:ca:79:02:90:80:ad:fc:69:
                    c0:90:86:c8:ce:58:18:34:c0:c7:6d:2c:b6:56:87:
                    f5:ab:6d:3e:8f:d1:b5:e3:e8:7e:42:58:86:7b:b5:
                    03:8a:7d:7b:76:a6:e5:56:6a:14:21:64:e2:8b:07:
                    71:b7:52:91:3b:ae:66:5f:bf:55:e0:85:af:61:70:
                    73:06:fe:83:85:9b:84:01:30:03:54:7a:cc:3c:a4:
                    da:65:75:f6:c7:c5:f0:20:b5:36:8c:4e:21:82:7e:
                    64:00:e4:6f:b7:04:84:af:38:84:d0:ef:75:f9:69:
                    16:45:27:57:99:1c:04:0c:50:e6:cc:e3:6f:4d:a5:
                    b9:fe:3a:81:d4:99:a5:1a:c0:1d:51:36:59:ee:6f:
                    b8:96:ba:5b:83:68:a4:1c:c0:7f:c5:af:61:1d:45:
                    91:3e:41:42:04:da:dc:72:8a:21:45:4a:b9:82:2a:
                    20:16:69:04:c4:cc:0d:cf:52:60:8c:dd:73:a0:97:
                    2b:20:0b:ca:fe:9d:9e:77:26:9d:c3:cc:93:9e:60:
                    3f:ec:fc:41:d3:a2:5e:da:d9:f4:15:32:fb:5e:7b:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F7:3B:24:A8:98:9A:76:9F:F9:A8:93:6E:30:3B:B3:E7:9D:F9:95
            X509v3 Authority Key Identifier:
                keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/uPc7JKiYmnaf-aiTbjA7s-ed-ZU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa47::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:b4:78:f6:a6:35:03:76:42:dc:db:4a:06:51:c6:ce:40:14:
         2c:21:7a:ba:84:f9:7f:a3:98:35:df:08:40:f1:99:40:1e:6c:
         a8:0e:bc:27:cf:aa:10:60:a0:6b:a0:fb:cb:19:46:e8:2c:a7:
         a7:d1:c4:0b:6e:d1:c4:56:e5:c7:cc:42:9e:8c:3f:6a:fe:2b:
         88:40:df:55:00:18:69:9c:c1:3c:a4:7c:d4:7a:73:04:00:6b:
         94:bc:83:4d:01:19:94:82:8b:f1:a3:99:4f:33:36:3c:0a:48:
         0d:2e:b6:87:71:84:b0:7c:3b:15:84:32:8e:48:e1:e6:bc:2d:
         e6:5b:34:0a:db:16:c3:6c:1e:d8:67:5c:8a:8e:d6:5b:fd:06:
         77:7a:13:cf:e6:cb:1d:d4:e0:f0:94:20:95:49:6d:3d:f1:c2:
         1d:a3:04:16:14:7a:7a:76:b8:45:9b:74:c6:de:a3:09:ac:10:
         c7:12:9a:65:33:1a:c4:90:09:b0:aa:4f:3e:29:ed:cd:87:b7:
         f7:83:3a:67:c8:c6:e1:6e:0d:46:56:29:25:5b:14:87:6f:8c:
         72:06:66:f1:09:19:31:b6:4e:db:c6:a9:af:e4:6a:af:c7:7a:
         d9:6d:5a:b8:77:bd:d1:91:63:de:d5:ad:1b:8b:96:49:62:40:
         85:2b:3a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----