Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466643a3a2f34382d3438203d3e203531303139.roa
File:                     326131323a646434373a383466643a3a2f34382d3438203d3e203531303139.roa (raw, json)
Hash identifier:          K6QoNilfoWfE1aXS19ArlmaD68BmoWkr7n0ab3VITWI=
Subject key identifier:   38:1B:92:C2:D9:EF:0C:06:28:A7:57:19:2C:49:32:F9:5F:07:17:A3
Certificate issuer:       /CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Certificate serial:       08312BBA7F6B174C3DCBB1A27077D53A8AD0386D
Authority key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Authority info access:    rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466643a3a2f34382d3438203d3e203531303139.roa
Signing time:             Tue 11 Apr 2023 01:14:11 +0000
ROA not before:           Tue 11 Apr 2023 01:09:11 +0000
ROA not after:            Tue 09 Apr 2024 01:14:11 +0000
asID:                     51019
IP address blocks:        2a12:dd47:84fd::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:31:2b:ba:7f:6b:17:4c:3d:cb:b1:a2:70:77:d5:3a:8a:d0:38:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
        Validity
            Not Before: Apr 11 01:09:11 2023 GMT
            Not After : Apr  9 01:14:11 2024 GMT
        Subject: CN=381B92C2D9EF0C0628A757192C4932F95F0717A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:87:aa:d5:2e:c0:ef:16:55:db:81:cb:c9:
                    9b:70:3b:00:2f:91:40:36:02:0a:07:0f:12:11:55:
                    fe:3e:e4:c8:03:ce:31:1b:15:3e:af:c7:9c:55:08:
                    bf:6b:fd:ff:01:db:dc:48:a2:bf:bf:ff:ff:e6:56:
                    c6:97:59:f4:14:59:b0:da:50:eb:15:0a:fd:ec:7c:
                    33:d8:32:f5:79:c4:2d:59:b4:b9:ab:cd:be:9d:b3:
                    69:3c:f8:8a:19:b7:e6:1d:aa:2f:8e:36:aa:ae:fa:
                    65:2f:1b:9e:75:0b:79:7f:a8:fe:50:57:c7:05:21:
                    d9:02:85:16:74:de:cd:76:44:de:c6:de:a9:ab:37:
                    fe:d8:21:76:f7:bc:69:e6:8b:e7:e5:e1:65:e5:75:
                    fa:ab:26:77:49:f8:cc:69:4f:59:fa:bf:4c:d1:84:
                    0d:de:77:95:ed:18:c0:ff:96:86:b2:d3:6b:26:ff:
                    18:9d:d0:e1:0f:97:30:9d:59:6f:8c:ff:81:c1:f1:
                    fc:d4:cb:25:43:eb:d3:fb:9c:3e:4e:37:f2:80:01:
                    1d:c8:6b:63:77:e1:30:c1:de:70:4a:5f:03:a5:bd:
                    c1:bb:ed:6d:c1:05:c9:bc:0f:4b:00:47:a6:8b:0e:
                    c2:9d:10:b7:fe:31:35:46:10:ae:ad:5f:b3:3c:08:
                    b3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1B:92:C2:D9:EF:0C:06:28:A7:57:19:2C:49:32:F9:5F:07:17:A3
            X509v3 Authority Key Identifier:
                keyid:34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466643a3a2f34382d3438203d3e203531303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:71:55:e9:78:5e:c4:79:c0:40:4a:d7:bb:fa:d3:e9:16:3c:
         b3:db:41:66:bd:1a:37:fe:3a:20:d7:60:cd:10:7b:f8:4a:d8:
         8e:b6:3f:ed:f2:c6:9b:09:27:f5:0b:83:39:45:f2:d5:ba:87:
         9b:bf:78:15:24:31:85:d1:80:71:90:c0:98:7f:a9:61:bc:10:
         84:20:08:5b:2f:b5:81:27:24:55:c2:45:26:7d:1e:65:3c:01:
         96:69:f5:af:47:4b:7a:8c:21:32:c1:5f:b9:cc:15:77:6d:f0:
         f1:65:66:fb:04:e7:3c:36:43:f7:dc:ff:0b:10:18:1e:a8:75:
         de:16:a0:1e:c3:00:0a:d8:bc:7a:b3:ad:7e:2b:45:ef:6e:70:
         25:37:97:7e:c1:36:21:f0:70:f8:ec:12:cb:ec:a4:80:37:a0:
         27:1d:5b:b1:56:0e:89:6f:c7:4f:41:72:83:71:c7:83:2f:c5:
         5b:21:16:43:af:06:22:9d:5f:5d:41:8c:60:af:42:26:fe:e6:
         a4:05:d3:38:cd:1a:ef:d8:20:67:a0:cb:51:cd:09:60:1b:b9:
         a9:0a:0c:1b:8d:38:af:fe:5c:5a:0a:01:4d:81:f2:f1:62:c1:
         55:5e:89:b5:74:b5:47:a6:09:c7:a6:bd:29:52:ba:3c:1a:76:
         9f:4a:c8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----