Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/9GMkIs38ilocsnghwuZWI0yVKG4.roa
File:                     9GMkIs38ilocsnghwuZWI0yVKG4.roa (raw, json)
Hash identifier:          zjtYo6nlHzVzbzPsLjwfSPCwFdpTWOQLnRMLmx4f9vg=
Subject key identifier:   F4:63:24:22:CD:FC:8A:5A:1C:B2:78:21:C2:E6:56:23:4C:95:28:6E
Certificate issuer:       /CN=f84a65599afb9d8727c3db947effbae2e5b853d1
Certificate serial:       0182A6382AD5A82FCBBD7F2FE2803C41D30C
Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/9GMkIs38ilocsnghwuZWI0yVKG4.roa
Signing time:             Tue 16 Aug 2022 10:34:34 +0000
ROA not before:           Tue 16 Aug 2022 10:34:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207498
IP address blocks:        212.6.41.0/24 maxlen: 24
                          2a0d:9b00::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a6:38:2a:d5:a8:2f:cb:bd:7f:2f:e2:80:3c:41:d3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1
        Validity
            Not Before: Aug 16 10:34:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f4632422cdfc8a5a1cb27821c2e656234c95286e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:a4:95:68:f2:f7:16:ef:d3:ff:29:9e:df:
                    5e:b6:ad:37:f3:b0:9d:e4:a5:78:4c:70:04:ec:44:
                    aa:4a:eb:e8:5a:8e:4f:36:3a:63:68:6b:06:de:63:
                    64:9c:d3:c3:55:0e:cd:5f:2d:71:a6:3b:bf:d4:94:
                    b9:d5:98:37:86:fe:a5:60:b6:9c:0c:c6:3a:b2:1d:
                    94:0a:15:41:3f:a6:79:13:9d:6f:5e:76:99:1f:2c:
                    45:10:3c:ec:a4:fa:6e:e1:b8:71:35:5a:75:39:01:
                    ca:8f:50:d7:bc:85:8a:45:ca:c8:54:7c:a3:c8:b5:
                    b8:9f:f7:c6:15:73:49:93:a2:07:80:f3:2f:7e:30:
                    77:b3:70:43:45:c7:da:68:47:fd:2f:22:42:e9:b1:
                    19:01:68:da:ce:6b:5e:5a:26:19:04:34:dc:0c:60:
                    e1:a2:51:84:3d:6a:f4:b7:79:4f:1e:a1:6e:64:e8:
                    a2:8a:3b:6b:03:9d:74:a5:04:e4:7c:40:0e:f6:8d:
                    f4:8a:30:24:27:83:6f:46:98:42:cc:0d:94:1d:bc:
                    bf:91:8d:bf:bd:98:97:26:28:ab:c0:a5:ce:39:1f:
                    9b:65:65:a3:8c:cf:fa:63:de:9c:5a:fb:c1:81:24:
                    34:f8:32:fb:49:60:7a:a2:be:3c:22:e3:61:e0:20:
                    16:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:63:24:22:CD:FC:8A:5A:1C:B2:78:21:C2:E6:56:23:4C:95:28:6E
            X509v3 Authority Key Identifier:
                keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/9GMkIs38ilocsnghwuZWI0yVKG4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.6.41.0/24
                IPv6:
                  2a0d:9b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:fa:c8:f6:9f:45:23:dc:0c:7e:11:fe:e4:fb:f8:96:7f:91:
         8d:0e:4d:ed:64:1c:d6:5d:13:ae:2a:9e:bd:1d:e1:c4:20:97:
         87:d9:8e:34:27:11:46:84:56:96:64:9d:8a:01:95:8d:e7:ea:
         63:03:2a:a1:c2:b6:41:de:3d:e3:83:54:cf:7b:18:78:80:1c:
         98:df:9a:bc:01:3f:c4:a0:14:98:0c:db:a5:36:d1:3d:4d:7f:
         d9:5b:29:0f:59:c2:d6:55:6c:e3:84:cb:06:e8:3e:43:20:04:
         63:b5:e3:03:3a:d8:9b:66:5c:4d:3a:97:82:fb:8a:77:50:d2:
         9c:2e:89:bf:c0:9c:40:02:38:8a:e9:d2:eb:dc:cc:0a:3e:14:
         44:0c:37:37:46:b3:f2:13:e0:7d:fb:d6:e4:b5:82:25:9d:4c:
         90:8d:46:89:34:28:ab:00:8a:38:56:e9:ca:9a:ef:6b:c8:39:
         96:8e:54:33:25:02:02:79:d8:49:b2:ca:bc:e0:c9:16:da:05:
         73:63:a3:d9:48:9d:6c:4f:93:50:4b:51:a8:88:89:9a:e3:1e:
         17:7f:9a:e6:df:a7:18:dd:19:8c:bd:b2:9e:3b:7b:c6:3e:ca:
         0d:8b:06:73:2f:ae:13:8c:89:c8:07:24:be:14:1d:8a:4a:cc:
         74:89:35:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----