Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/326130653a363930343a3a2f33312d3438203d3e203439353539.roa
File:                     326130653a363930343a3a2f33312d3438203d3e203439353539.roa (raw, json)
Hash identifier:          qetr3mKPaQQUc1hQ3GJ56Hpgzr5p5tYSBog8JRIUWWM=
Subject key identifier:   1F:CA:BB:3F:9E:CF:58:F0:D3:20:0C:3E:69:C1:AB:49:98:CB:2A:97
Certificate issuer:       /CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
Certificate serial:       027350736AA7AC94CB40010D2C54162B698E23E2
Authority key identifier: E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/326130653a363930343a3a2f33312d3438203d3e203439353539.roa
Signing time:             Tue 14 Jun 2022 23:15:04 +0000
ROA not before:           Tue 14 Jun 2022 23:10:04 +0000
ROA not after:            Tue 13 Jun 2023 23:15:04 +0000
asID:                     49559
IP address blocks:        2a0e:6904::/31 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:73:50:73:6a:a7:ac:94:cb:40:01:0d:2c:54:16:2b:69:8e:23:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e36a3cbcb6635d140f694b0cd99d1cd62456de2e
        Validity
            Not Before: Jun 14 23:10:04 2022 GMT
            Not After : Jun 13 23:15:04 2023 GMT
        Subject: CN=1FCABB3F9ECF58F0D3200C3E69C1AB4998CB2A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:32:7d:30:27:35:f4:a7:b3:25:b3:08:53:
                    a7:03:84:68:aa:2b:08:51:fd:0c:78:6c:03:04:d4:
                    f3:d2:6d:5e:0d:eb:4b:d5:49:36:6c:42:33:5b:bc:
                    15:32:e6:50:7e:61:90:29:97:de:31:ab:50:f1:df:
                    85:33:a4:df:ab:3b:33:d3:d1:cc:23:22:32:c0:38:
                    e5:29:4a:63:c9:c9:1c:f8:dc:fc:19:1b:95:7e:85:
                    cc:e1:82:ac:b9:22:dc:87:0d:da:c2:96:24:16:70:
                    d5:57:78:ab:e6:2c:26:5d:4e:20:6c:a0:ba:42:f4:
                    a4:dd:9d:e8:2b:f6:75:89:66:9e:d5:11:82:d0:c7:
                    77:ba:c7:01:c6:b4:06:a2:7c:a7:d5:03:e2:54:ea:
                    02:8d:22:c7:bf:3b:a3:13:04:75:e3:f8:31:c1:33:
                    28:80:c1:d3:fb:bc:c8:7e:b6:53:b0:9f:f8:89:79:
                    f9:1f:c8:fc:4b:fe:4b:90:1a:54:d3:41:44:9d:cc:
                    d2:24:d7:6f:65:37:92:7b:2e:c8:c2:22:31:3f:9a:
                    7a:52:97:ab:fa:a9:1b:9c:81:ca:a3:44:4f:a0:f8:
                    b4:e0:de:94:30:17:3b:31:32:39:b7:f4:4c:f9:9d:
                    9d:56:b0:7b:58:cb:45:eb:01:39:4f:67:29:a3:ec:
                    e5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CA:BB:3F:9E:CF:58:F0:D3:20:0C:3E:69:C1:AB:49:98:CB:2A:97
            X509v3 Authority Key Identifier:
                keyid:E3:6A:3C:BC:B6:63:5D:14:0F:69:4B:0C:D9:9D:1C:D6:24:56:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/E36A3CBCB6635D140F694B0CD99D1CD62456DE2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42o8vLZjXRQPaUsM2Z0c1iRW3i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/326130653a363930343a3a2f33312d3438203d3e203439353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:6904::/31

    Signature Algorithm: sha256WithRSAEncryption
         00:1c:47:0e:f0:57:6c:69:bd:ff:13:ff:cd:92:cc:ee:a3:4c:
         31:60:6d:6a:b9:e9:70:46:00:e3:89:8d:9b:62:b0:cb:09:c3:
         e6:e1:9b:08:d8:f4:4d:48:b3:52:f0:c5:c1:d9:ea:8f:4f:10:
         49:e8:db:6d:99:74:54:6d:a3:26:6e:10:2b:9b:cd:5b:10:80:
         72:06:63:5b:7a:41:20:92:7c:6d:15:c0:3c:e1:58:69:e4:f0:
         cc:b5:57:f6:b0:55:0f:f3:5d:ff:ef:b1:46:f1:95:ee:8a:14:
         72:bb:e3:bf:05:f0:aa:91:1f:2c:57:b0:db:79:06:aa:22:a6:
         4c:5e:90:07:66:4c:fb:f8:f9:4f:6b:43:6a:a9:2a:6f:9f:d0:
         19:aa:28:90:fb:93:95:46:ad:76:45:15:23:8a:d1:a0:b2:69:
         10:9f:c6:3e:25:94:4d:5a:0e:9e:cc:c3:f7:79:2e:1d:62:07:
         7b:ac:c8:d1:32:8e:31:b7:73:61:a8:12:f9:46:2a:96:2d:77:
         2b:94:73:01:96:05:07:c7:71:c0:1c:e6:2e:75:18:10:ae:b6:
         53:03:8a:5e:34:4f:23:87:43:96:84:95:4b:12:6a:30:db:37:
         1f:7f:d6:fd:dd:16:33:f9:81:0f:f1:4d:49:44:a1:51:ed:2f:
         e3:aa:40:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----