Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/R7yesz_NvtvVW6SI9ZOJzBdcH8w.roa
File:                     R7yesz_NvtvVW6SI9ZOJzBdcH8w.roa (raw, json)
Hash identifier:          QAfuzCplUJaPFbLOP44/uDu8XyqBIJmdZhouW2CutTQ=
Subject key identifier:   47:BC:9E:B3:3F:CD:BE:DB:D5:5B:A4:88:F5:93:89:CC:17:5C:1F:CC
Certificate issuer:       /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial:       0184B16361898FA65B1CA6C09237BCCB671A
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/R7yesz_NvtvVW6SI9ZOJzBdcH8w.roa
Signing time:             Sat 26 Nov 2022 00:43:11 +0000
ROA not before:           Sat 26 Nov 2022 00:43:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212828
IP address blocks:        2001:67c:a58::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:b1:63:61:89:8f:a6:5b:1c:a6:c0:92:37:bc:cb:67:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
        Validity
            Not Before: Nov 26 00:43:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=47bc9eb33fcdbedbd55ba488f59389cc175c1fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:5a:f2:bf:42:71:83:57:1f:b5:7f:1a:b9:
                    dc:e7:6c:d1:e2:e1:ca:b2:e5:c0:e2:c7:96:4a:fd:
                    e7:00:3b:80:9c:ff:7e:18:58:86:f1:d8:88:b3:79:
                    3f:5c:41:6d:f6:8f:37:e0:f1:8a:d7:1d:21:f5:ca:
                    e6:c6:86:b3:f7:60:f1:19:32:c1:19:8f:ef:bb:74:
                    d4:11:62:5b:85:b2:f8:f7:4b:a6:72:fa:21:b0:c2:
                    a4:70:8c:de:d3:d0:71:ba:0f:39:2a:6c:46:93:be:
                    cf:aa:42:f6:a5:62:76:ba:37:11:bd:ad:33:5e:e1:
                    c9:0a:6d:6f:ae:d8:d5:34:ce:74:f5:f4:57:fd:64:
                    59:80:9a:dc:13:1b:43:9c:56:e9:85:18:70:b7:08:
                    0e:c7:b2:27:26:29:81:34:59:97:ea:76:ce:be:de:
                    88:51:0e:03:2a:03:4f:34:c6:03:8b:77:52:64:93:
                    1a:26:a2:3b:a0:f5:76:54:ae:03:ec:33:90:7d:10:
                    c8:4b:8a:ab:3a:c3:73:a2:a2:f3:9a:0d:76:39:fb:
                    a3:d8:5f:c1:08:05:6f:55:98:b6:21:c6:e0:f8:1d:
                    6f:2b:06:e7:a2:e5:3f:84:c3:2e:7e:58:e3:fb:5d:
                    40:11:84:18:f6:ad:d9:89:b8:cc:4c:c3:7e:b6:cf:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BC:9E:B3:3F:CD:BE:DB:D5:5B:A4:88:F5:93:89:CC:17:5C:1F:CC
            X509v3 Authority Key Identifier:
                keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/R7yesz_NvtvVW6SI9ZOJzBdcH8w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:a58::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:0e:e3:ef:bb:79:f7:3e:31:9e:92:77:a7:d1:ac:ab:b0:84:
         ab:05:bf:4b:c2:34:2b:ed:8e:ed:b1:70:e6:5b:d2:83:78:7f:
         8e:2d:e6:77:6d:d5:b4:c0:aa:34:21:39:65:f3:57:ba:bf:d7:
         c2:67:e6:56:3b:af:a7:f7:53:4d:dc:0a:0b:7e:f2:d4:22:f9:
         ea:b1:2a:05:e5:40:c1:fc:0e:ad:65:f6:27:f4:e3:d0:60:f5:
         17:45:1a:df:28:72:87:05:6c:48:93:6f:42:f7:0b:88:56:eb:
         1a:cb:aa:93:9a:68:f4:ab:5e:06:26:b5:25:3e:47:ac:f7:7f:
         83:e1:23:35:cb:ec:f1:80:9b:3c:75:79:6a:8c:7e:80:79:79:
         2d:29:ae:0f:c9:f8:3c:41:84:a7:56:9d:0e:af:5c:5e:33:77:
         7f:e6:31:d2:64:12:c5:ba:92:38:5b:8d:12:c2:f0:e3:61:43:
         3b:7b:65:ef:91:60:ab:bd:e5:ae:9f:09:cc:9d:ca:4f:89:f2:
         3a:34:5a:cf:16:08:b8:77:ad:61:63:3a:3c:bc:f9:2c:2f:5f:
         a3:df:b8:93:72:0f:d8:ff:6f:39:82:86:98:fe:b6:3b:ad:6f:
         cd:5f:f4:2f:b4:f9:f2:ed:07:99:da:85:d5:4f:c0:ba:09:e6:
         37:09:1c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----