Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/tMrSPolR2wnh-hU4MDuZCYxPStA.roa
File:                     tMrSPolR2wnh-hU4MDuZCYxPStA.roa (raw, json)
Hash identifier:          4F13Dhm5GMdm8y5OgGxqcgUtUTYU/UNzLiTke+NPKCg=
Subject key identifier:   B4:CA:D2:3E:89:51:DB:09:E1:FA:15:38:30:3B:99:09:8C:4F:4A:D0
Certificate issuer:       /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial:       2D9832B8
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/tMrSPolR2wnh-hU4MDuZCYxPStA.roa
Signing time:             Sat 01 Jan 2022 04:59:19 +0000
ROA not before:           Sat 01 Jan 2022 04:59:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20594
IP address blocks:        2a01:8180:2000::/36 maxlen: 42

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764949176 (0x2d9832b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
        Validity
            Not Before: Jan  1 04:59:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b4cad23e8951db09e1fa1538303b99098c4f4ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:56:ba:67:24:0b:d8:33:da:5f:fd:0a:89:
                    03:c1:5b:07:cc:c7:44:16:ba:23:f8:11:0a:73:03:
                    82:21:fc:6d:24:9a:9d:a8:fb:06:90:18:97:65:5f:
                    87:3a:de:25:e8:fc:68:79:c6:3d:d3:c8:9e:cf:fc:
                    9f:10:53:8e:e4:cd:2c:e9:cb:95:da:04:6f:4e:f7:
                    97:11:f3:e8:6a:7d:96:9f:2a:9b:5e:e4:a8:b2:98:
                    fe:fe:ca:3d:90:ac:5f:2a:1b:be:51:3e:41:2e:6c:
                    d7:4b:df:33:94:76:51:02:2e:9f:fa:2b:5d:4d:0a:
                    96:48:66:68:fa:8a:ce:61:ef:1c:21:6a:62:00:48:
                    80:7c:46:d7:31:09:b0:9a:98:99:18:9e:fe:65:03:
                    d8:0e:c2:cf:2e:7c:7f:05:3c:be:c3:8a:af:73:33:
                    c6:25:7e:b8:bb:b5:9e:ec:5a:7d:70:90:81:28:16:
                    09:28:44:e9:d9:90:f8:5e:91:5d:24:58:8d:68:8d:
                    f4:f0:41:d3:da:4c:ce:11:61:48:0b:92:1f:84:27:
                    59:45:0b:d9:23:9d:d2:31:02:26:cc:13:6b:62:07:
                    1c:ae:ad:95:a8:da:40:05:1a:e9:3b:b8:cd:dc:b8:
                    e5:e4:cb:b3:ca:0f:20:61:70:a7:12:80:b6:5e:1f:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CA:D2:3E:89:51:DB:09:E1:FA:15:38:30:3B:99:09:8C:4F:4A:D0
            X509v3 Authority Key Identifier:
                keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/tMrSPolR2wnh-hU4MDuZCYxPStA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:8180:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         60:33:2a:a1:55:b1:44:24:cd:1c:57:22:e5:8d:fe:8f:5c:5c:
         a9:eb:34:16:1a:42:06:9d:95:29:b5:f1:4f:3a:9b:e9:f5:17:
         ad:85:1d:0a:65:44:b3:5f:37:cb:e5:fb:34:61:dc:07:ec:8f:
         bb:56:90:25:ff:f5:ff:2a:bb:08:47:2b:ff:e9:54:7d:54:52:
         85:8f:5a:c1:1a:22:6a:d4:a9:eb:f6:b7:12:07:e0:c0:84:44:
         fd:31:5b:08:71:e4:57:ae:08:9d:db:d6:d5:84:7c:30:7c:6d:
         a9:73:b2:30:d6:2f:4e:10:7a:ac:a9:a3:82:64:3c:85:b7:af:
         84:e7:d5:a7:75:98:55:eb:80:0b:ca:7b:6d:8c:fb:0d:6d:ed:
         0e:4c:2c:fe:19:54:eb:0c:93:9f:bb:06:4a:a0:e1:db:22:a1:
         8a:4d:b5:7a:e6:e6:ad:47:78:0b:b2:f8:cf:d8:4d:98:8e:b2:
         e2:2f:e0:67:55:b0:73:99:4a:ea:a0:48:90:3d:44:19:0b:76:
         9b:d2:ea:a9:23:c3:de:70:52:3d:20:e3:ab:99:c8:fd:47:ad:
         da:c3:0f:a5:ed:b0:a2:ba:9b:1e:35:aa:95:9b:58:3b:78:44:
         65:55:7b:3c:d6:f3:2a:c2:57:d0:80:bc:18:87:99:ab:56:c3:
         d6:81:f4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----