Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/R0jl7EACgsQhqPgJBmNQMsqtiN8.roa
File:                     R0jl7EACgsQhqPgJBmNQMsqtiN8.roa (raw, json)
Hash identifier:          sthkXRcFXmiyu15qJitcfmAKcpfs0Vn7LoJrZ498ye0=
Subject key identifier:   47:48:E5:EC:40:02:82:C4:21:A8:F8:09:06:63:50:32:CA:AD:88:DF
Certificate issuer:       /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial:       1951ECDE
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/R0jl7EACgsQhqPgJBmNQMsqtiN8.roa
Signing time:             Sat 01 Jan 2022 11:05:20 +0000
ROA not before:           Sat 01 Jan 2022 11:05:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9112
IP address blocks:        62.3.160.0/19 maxlen: 19
                          2001:808::/35 maxlen: 35

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424799454 (0x1951ecde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
        Validity
            Not Before: Jan  1 11:05:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4748e5ec400282c421a8f80906635032caad88df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:4f:95:0a:d4:c7:6f:bb:7b:42:ad:31:ec:
                    3c:68:9a:28:61:29:d0:3c:98:e3:4e:a3:57:d7:6f:
                    a7:4a:30:5e:dd:b6:6f:6d:e2:87:a2:b7:35:b4:e8:
                    e1:38:08:38:06:23:f3:a1:21:59:82:c3:2e:36:a4:
                    da:b8:13:89:a5:04:3e:f9:f2:b2:93:97:17:0f:d4:
                    cc:e2:02:ec:16:33:75:19:04:28:07:8c:79:9f:31:
                    76:37:65:ca:6a:c6:77:3e:5b:12:e5:c5:8b:91:57:
                    8d:e8:7f:ec:f7:3b:45:f6:e6:8b:17:79:8a:9d:01:
                    de:0b:34:94:86:db:21:9d:a9:d9:d3:63:ac:35:77:
                    aa:6c:a4:65:0c:34:78:55:58:bb:e6:ae:57:4f:ef:
                    77:60:b2:a9:de:d2:de:34:a2:44:ed:46:69:24:41:
                    18:57:f0:4a:49:53:df:2b:f2:71:50:cf:3e:de:ec:
                    be:85:68:4a:0e:fa:ad:c2:61:6b:33:b1:d7:4d:c9:
                    b4:81:84:db:ab:d1:30:7c:e4:f7:b2:5a:05:fb:1e:
                    ed:48:09:e2:61:cb:fc:5a:61:87:a1:0f:3c:9e:83:
                    0f:49:55:30:5c:4e:33:28:fa:cf:eb:86:b8:80:d0:
                    27:48:c3:4d:7a:7a:a0:50:96:61:18:2d:ad:3e:8f:
                    d5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:48:E5:EC:40:02:82:C4:21:A8:F8:09:06:63:50:32:CA:AD:88:DF
            X509v3 Authority Key Identifier:
                keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/R0jl7EACgsQhqPgJBmNQMsqtiN8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.160.0/19
                IPv6:
                  2001:808::/35

    Signature Algorithm: sha256WithRSAEncryption
         a8:b1:0a:d3:2c:95:41:d6:a2:e5:ab:c8:dc:0e:f4:9e:16:1e:
         7b:78:11:b3:9e:f6:67:3d:62:a9:7f:dc:da:3b:9e:59:9c:ad:
         96:f6:c7:3a:a1:f7:fa:59:ef:27:d2:93:97:9e:99:a9:93:69:
         47:21:3a:e5:33:99:16:ac:ce:01:b9:6d:fd:3f:16:22:d5:93:
         1a:54:44:e0:36:28:d7:89:27:3b:00:4b:a2:10:cf:b9:d1:1b:
         b1:bc:1b:d3:64:5a:36:b9:da:04:4f:a3:c5:09:47:cc:5d:60:
         d1:af:61:42:7c:4c:99:15:e6:c6:3b:14:5b:7d:c1:4c:22:4c:
         02:09:57:a1:61:dd:6f:9c:fd:ae:00:13:c5:21:2a:6b:2f:1d:
         eb:dc:b9:e8:a6:be:93:ac:f4:c8:0b:9e:5d:bf:48:27:f3:6c:
         03:1b:80:e4:8c:5e:2a:a2:e3:a9:d4:d5:b7:13:b1:3d:92:b6:
         ff:36:e2:c3:72:96:ec:12:3b:30:76:b0:ae:7a:f7:f5:cd:3e:
         c7:a7:4f:62:58:38:05:34:d9:37:a2:77:bf:63:ed:64:b3:c3:
         85:eb:fc:65:a0:a6:d3:58:ee:45:92:c4:46:cf:47:6f:11:8a:
         6a:b8:8c:2a:7c:6a:cc:7c:17:25:ea:07:2e:01:54:a9:55:6e:
         39:95:c4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----