Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/wXrNkcJBPP_9zn_ujrHIIbkl8dE.roa
File:                     wXrNkcJBPP_9zn_ujrHIIbkl8dE.roa (raw, json)
Hash identifier:          TcOU/kWhDP+mhb7eU7wj/U+tpUTtPT5tNFm8mz5FelA=
Subject key identifier:   C1:7A:CD:91:C2:41:3C:FF:FD:CE:7F:EE:8E:B1:C8:21:B9:25:F1:D1
Certificate issuer:       /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial:       0184ABCA947CF9318FB49D31454DAC5D319D
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/wXrNkcJBPP_9zn_ujrHIIbkl8dE.roa
Signing time:             Thu 24 Nov 2022 22:38:10 +0000
ROA not before:           Thu 24 Nov 2022 22:38:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209505
IP address blocks:        2a13:3840::/47 maxlen: 47

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ab:ca:94:7c:f9:31:8f:b4:9d:31:45:4d:ac:5d:31:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
        Validity
            Not Before: Nov 24 22:38:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c17acd91c2413cfffdce7fee8eb1c821b925f1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:81:4a:60:44:82:0e:61:4c:36:ce:18:14:
                    fb:0d:c2:47:ee:2a:4b:9d:9b:b4:30:3b:b1:f0:06:
                    ac:e2:25:8d:d1:76:fe:7d:f8:25:67:af:55:04:07:
                    18:ee:35:c0:84:f3:da:0d:a4:1d:24:b8:65:13:37:
                    cd:98:64:7e:16:48:cb:c3:da:bf:95:24:65:58:e2:
                    21:8b:10:c6:48:b3:2f:1a:78:c5:d1:92:e7:46:37:
                    f6:cf:c0:74:cb:9f:9b:22:6b:4b:90:94:cb:48:64:
                    a4:9a:80:14:c2:8c:83:1d:e4:b9:a3:12:ee:cf:70:
                    63:11:af:9a:34:d9:03:8a:b2:95:7f:4d:29:f4:d9:
                    80:a5:02:d6:aa:06:07:98:50:71:c6:43:45:a1:bf:
                    94:0b:17:3e:65:30:cc:81:ae:50:2d:ea:24:dd:8f:
                    da:16:68:c0:2c:9e:98:c0:4d:02:ef:a4:01:db:e1:
                    db:f4:74:1a:9a:b5:61:fe:71:16:84:2a:41:99:61:
                    b3:ac:fc:ad:6c:85:7d:7b:9b:10:6c:92:f8:79:d6:
                    18:17:8c:e3:0a:06:0c:c0:35:f6:b5:51:f6:60:87:
                    ff:b4:b8:69:ed:92:07:f7:2a:16:84:98:13:67:1e:
                    fd:b8:75:2b:06:54:86:ff:2f:c9:11:52:8f:9d:e1:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7A:CD:91:C2:41:3C:FF:FD:CE:7F:EE:8E:B1:C8:21:B9:25:F1:D1
            X509v3 Authority Key Identifier:
                keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/wXrNkcJBPP_9zn_ujrHIIbkl8dE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:3840::/47

    Signature Algorithm: sha256WithRSAEncryption
         64:90:65:91:7d:c7:e2:95:8c:e7:d2:a7:37:2f:ab:d4:e0:8a:
         39:44:37:f5:fd:77:64:70:bd:18:24:1f:74:08:dc:66:cf:6e:
         24:e6:09:08:08:31:6f:f0:f3:06:c9:78:61:e4:48:7e:d9:8e:
         6f:6f:99:c6:a8:d7:95:2e:5f:2d:ff:b5:28:2d:cd:eb:f0:32:
         02:2e:48:4c:b2:3c:cd:9c:9d:48:83:5d:8c:d2:85:bb:12:e8:
         cd:d9:b6:3f:0f:71:95:82:d4:bd:54:77:fa:f7:25:6c:57:d0:
         fb:aa:10:2c:7f:f4:6e:ea:ab:11:2e:73:72:b6:28:cf:2a:81:
         4a:2b:1f:33:0e:5a:ee:bd:0d:db:a6:bc:b1:79:e7:ea:15:85:
         29:bd:18:a6:2d:19:48:d4:c1:df:b5:60:5e:8a:42:21:07:31:
         ce:81:94:ce:4c:eb:17:ef:c6:9c:d1:ac:2d:cc:7c:33:91:99:
         99:73:67:c6:1d:92:be:63:5f:d3:5d:1c:be:eb:63:27:98:76:
         b0:2e:fa:2b:58:ae:4b:be:fa:4c:9a:3d:1e:f0:bf:98:67:6f:
         16:dd:77:74:a3:13:12:ed:39:70:64:d6:26:bd:b2:50:7d:65:
         9e:aa:fa:18:dd:4e:1b:7a:5b:8d:1c:14:4f:dc:a1:74:10:39:
         74:fc:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----