Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/Oy_PZYY7P0U953-JJOr459qEqd8.roa
File:                     Oy_PZYY7P0U953-JJOr459qEqd8.roa (raw, json)
Hash identifier:          PgpBbNcuuanbYy2fRPJvHOmrMALKszxvlgqlFfv5EWE=
Subject key identifier:   3B:2F:CF:65:86:3B:3F:45:3D:E7:7F:89:24:EA:F8:E7:DA:84:A9:DF
Certificate issuer:       /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial:       1B0ACF4A
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/Oy_PZYY7P0U953-JJOr459qEqd8.roa
Signing time:             Sat 01 Jan 2022 07:58:14 +0000
ROA not before:           Sat 01 Jan 2022 07:58:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     12729
IP address blocks:        212.127.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453693258 (0x1b0acf4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
        Validity
            Not Before: Jan  1 07:58:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3b2fcf65863b3f453de77f8924eaf8e7da84a9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:71:9c:c3:b0:5f:ee:3b:29:f4:9b:1d:bf:18:
                    45:46:b9:9a:d6:a7:fc:8b:3c:75:40:3a:02:d5:41:
                    e3:df:11:4f:07:78:b8:58:c5:c0:42:9f:1b:3f:b5:
                    dc:d5:fa:f9:d8:f0:1a:c6:c8:31:f1:d8:1d:24:46:
                    17:14:12:ac:fe:6f:64:26:b4:12:16:bd:e8:3e:9e:
                    1c:b4:af:fa:07:19:61:db:86:76:10:8b:5c:f6:f6:
                    8b:fe:4d:d6:27:9e:c7:51:22:07:5c:4d:2b:bb:c4:
                    7a:42:91:28:a1:23:70:5b:58:f4:f0:0a:fa:02:3b:
                    12:a9:3c:4a:24:f1:4d:0d:58:1c:83:17:0f:59:d5:
                    62:26:d5:42:8d:36:86:16:f6:51:d3:46:46:4d:b7:
                    49:ec:10:6c:37:c1:f7:71:b9:6a:52:80:e2:0e:32:
                    d4:40:38:aa:af:2e:36:c6:4c:78:e9:25:05:56:2b:
                    3c:49:72:02:47:78:05:2e:36:4e:28:a7:b7:3f:aa:
                    b7:d1:9a:94:7e:a0:5f:13:df:7a:38:f3:13:8f:bc:
                    28:f8:bc:37:fe:8b:08:d0:04:e3:3b:02:3c:0d:69:
                    60:21:92:9c:11:c7:27:1b:98:db:39:6f:0a:60:da:
                    f0:47:a8:96:65:9d:87:ac:64:37:24:c5:07:7b:00:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2F:CF:65:86:3B:3F:45:3D:E7:7F:89:24:EA:F8:E7:DA:84:A9:DF
            X509v3 Authority Key Identifier:
                keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/Oy_PZYY7P0U953-JJOr459qEqd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.127.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b4:2d:08:92:97:aa:45:64:ad:e7:20:76:95:4d:2b:ad:84:8e:
         f9:61:af:25:64:42:74:79:8f:27:95:0f:9b:26:a4:ce:65:7f:
         77:77:3c:34:7c:17:ba:90:0e:a1:75:ac:30:7d:ea:a8:f9:44:
         7e:c6:d5:ef:2d:98:42:71:f4:a1:a5:81:b3:1a:d5:2a:3c:5e:
         ad:05:11:08:10:35:d9:b8:77:23:6c:c9:46:a9:df:5e:3f:eb:
         d1:03:83:a3:70:db:b8:e5:22:00:b7:d7:ef:a2:1c:c5:4d:a6:
         49:d9:b3:83:8e:68:11:10:38:c3:23:5a:9b:a1:8e:af:03:6b:
         88:ae:49:b7:34:f3:be:f6:0b:50:89:1d:f4:06:a9:34:c2:7b:
         da:f0:f1:df:fd:75:74:a3:fa:f8:f9:16:b3:a8:8f:6c:61:cd:
         4e:79:be:39:bf:51:3c:83:fd:b2:b2:77:d1:43:97:d6:21:27:
         99:d7:28:82:86:98:8e:11:3f:4f:97:19:26:af:42:7b:ed:09:
         b8:00:83:10:56:01:48:7e:74:ac:0e:8e:13:27:c1:8a:43:b4:
         89:8d:d4:c9:27:5e:8f:03:e7:49:49:51:dd:6e:48:78:ea:34:
         cc:2a:8f:18:35:c9:6a:ba:fc:d8:b1:56:7f:37:8a:c7:17:d3:
         16:14:99:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----