Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/FvuBP1uUNm58F02S-pHvfr99syQ.roa
File:                     FvuBP1uUNm58F02S-pHvfr99syQ.roa (raw, json)
Hash identifier:          35RaRW6eJUzIJAISEEfGYr8cntXQ4fMYsJw0eLq98nc=
Subject key identifier:   16:FB:81:3F:5B:94:36:6E:7C:17:4D:92:FA:91:EF:7E:BF:7D:B3:24
Certificate issuer:       /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
Certificate serial:       0991EBBE
Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/FvuBP1uUNm58F02S-pHvfr99syQ.roa
Signing time:             Thu 03 Mar 2022 15:36:17 +0000
ROA not before:           Thu 03 Mar 2022 15:36:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     4755
IP address blocks:        2a07:8145::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160558014 (0x991ebbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1
        Validity
            Not Before: Mar  3 15:36:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=16fb813f5b94366e7c174d92fa91ef7ebf7db324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0f:09:16:2e:e8:7e:c1:b2:9a:6b:ec:aa:02:
                    2d:40:e2:8c:1f:11:4c:50:c6:9c:39:df:17:6f:34:
                    81:6e:64:c2:21:98:a6:17:10:cf:4d:f8:ad:0f:5f:
                    df:50:44:1c:a5:52:a0:ce:e7:5f:09:d3:c4:0b:58:
                    19:37:aa:9f:68:2c:01:87:56:6e:5c:e5:10:94:55:
                    a5:e8:16:27:50:d9:e0:fd:4f:1d:a8:7b:61:f9:61:
                    85:df:0e:72:ac:65:b9:10:a6:2e:b9:71:cd:bf:80:
                    4d:88:45:57:99:a8:ff:40:29:5c:b3:53:e9:cd:6f:
                    bb:7b:fa:0a:66:03:e3:c5:63:d3:e5:19:76:e8:f2:
                    e4:c0:bb:f1:83:22:98:e6:6d:1b:01:dd:22:0a:af:
                    06:aa:de:1a:58:fc:68:48:1a:ce:8e:9d:5b:a6:d6:
                    ac:77:8d:25:d2:08:de:72:17:5f:91:78:1e:47:33:
                    d8:d5:30:84:bc:52:80:60:e5:3b:13:1a:7d:9a:0d:
                    27:b1:1c:3c:29:f8:c0:75:6c:5a:25:cd:b7:e1:8e:
                    98:51:f6:5a:87:d8:57:19:12:54:fa:21:6e:ae:67:
                    2f:ba:25:08:7f:f2:8f:2f:ec:af:32:2a:74:f0:43:
                    8a:61:71:10:40:b0:ad:7e:b8:f5:88:58:86:bf:23:
                    02:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FB:81:3F:5B:94:36:6E:7C:17:4D:92:FA:91:EF:7E:BF:7D:B3:24
            X509v3 Authority Key Identifier:
                keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/FvuBP1uUNm58F02S-pHvfr99syQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:8145::/36

    Signature Algorithm: sha256WithRSAEncryption
         12:0b:de:a9:32:7d:ef:6e:37:31:2d:cc:41:fe:ee:ac:dc:b0:
         60:7c:0f:d1:72:a9:8b:80:85:89:7c:46:e1:db:69:a6:37:7d:
         cd:84:f6:21:14:49:aa:5e:bf:49:45:af:84:71:a7:1c:76:7b:
         9e:18:47:63:ab:e7:b8:c2:82:26:b9:bb:5a:19:04:3b:e8:9b:
         a1:b7:f6:db:f2:ef:38:eb:d7:2d:da:82:96:55:62:74:6f:f1:
         07:6a:38:eb:6b:59:d2:a6:7f:26:e1:91:d7:a5:55:bc:e6:9e:
         42:e2:51:d2:65:4b:4b:95:ba:78:44:a2:e8:3f:08:87:7f:53:
         12:e5:9d:a4:7a:cc:51:36:18:06:7d:11:37:07:92:c0:0c:fa:
         12:57:bd:7b:7d:1d:9a:12:b1:42:94:c0:13:63:c0:96:c8:8c:
         4a:b1:21:24:0b:b0:aa:7b:59:c3:32:a9:fe:13:b6:60:40:7a:
         01:a0:69:0b:5a:27:13:74:e5:ad:83:70:30:ce:b9:33:ce:21:
         0d:4e:c7:e2:d2:c0:78:39:94:ec:46:e5:43:9f:59:68:96:30:
         cf:37:68:73:32:2c:01:3b:39:19:0a:9f:b7:92:da:19:76:bc:
         ad:b8:9d:25:6b:eb:cf:06:e4:88:e6:65:8e:de:17:f8:23:b1:
         13:0d:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----