Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/2-ao870gJF-aBloVdtRBPDp_fU8.roa
File:                     2-ao870gJF-aBloVdtRBPDp_fU8.roa (raw, json)
Hash identifier:          8gUAUFEZBDWsV8uoFumt5gngTzWX0pI27GTvC+lfdZk=
Subject key identifier:   DB:E6:A8:F3:BD:20:24:5F:9A:06:5A:15:76:D4:41:3C:3A:7F:7D:4F
Certificate issuer:       /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial:       0237BD
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/2-ao870gJF-aBloVdtRBPDp_fU8.roa
Signing time:             Wed 01 Jun 2022 17:59:31 +0000
ROA not before:           Wed 01 Jun 2022 17:59:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29551
IP address blocks:        2001:678:4a8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145341 (0x237bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
        Validity
            Not Before: Jun  1 17:59:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dbe6a8f3bd20245f9a065a1576d4413c3a7f7d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:2c:99:b4:ec:93:24:68:69:cc:b1:d3:d8:
                    ce:7f:12:a1:86:8a:0d:89:48:c4:fe:58:d9:83:17:
                    5e:8c:22:b1:c8:d9:f0:fd:da:98:79:5d:3d:36:a2:
                    43:f4:3d:48:02:6b:78:0d:2a:ce:01:8a:0c:51:f3:
                    42:55:85:fa:20:35:df:fd:86:4a:c0:01:80:7f:82:
                    32:0c:57:1c:54:51:cf:3b:dd:b0:f3:0a:21:86:f6:
                    31:14:d3:25:fa:9e:cc:e6:b5:23:f1:8d:e6:dd:aa:
                    54:90:bd:e0:65:99:ad:06:d5:74:3b:f3:fb:b7:f2:
                    31:a7:f1:90:a7:9d:13:4e:d9:09:be:1a:78:70:88:
                    2f:37:7b:7a:d1:c4:c5:ed:ec:af:6d:01:f9:6a:e2:
                    c3:8f:29:48:6f:65:cd:b3:71:d0:e6:cd:8a:dd:26:
                    58:19:82:2a:59:93:65:50:97:d1:59:c2:93:d0:60:
                    e1:dd:41:53:aa:d0:07:18:b1:07:52:af:8a:22:6f:
                    92:77:a8:d4:3d:18:87:d4:71:be:1b:81:ab:44:21:
                    89:37:55:df:96:00:20:a5:ed:b0:a3:fe:eb:3e:75:
                    fd:63:dc:53:55:dc:49:ab:25:83:f3:78:16:96:f2:
                    0c:c7:fc:3c:fc:28:86:41:65:f1:73:4d:89:4c:1e:
                    8e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E6:A8:F3:BD:20:24:5F:9A:06:5A:15:76:D4:41:3C:3A:7F:7D:4F
            X509v3 Authority Key Identifier:
                keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/2-ao870gJF-aBloVdtRBPDp_fU8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:4a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:c7:6c:be:e6:2a:3b:10:1a:a9:25:a0:0a:e8:3c:f5:ba:fe:
         c6:f0:d0:ef:50:2e:01:04:c8:74:89:87:a0:de:68:75:64:4e:
         5e:b5:dc:0c:b3:97:51:45:7d:56:35:4f:91:43:d9:01:2f:51:
         4f:9b:32:8b:11:28:5f:14:96:0c:22:04:96:5f:b1:6b:86:eb:
         22:b0:6f:c9:7a:29:79:a1:36:c4:f0:69:b1:d0:d8:c1:bb:6d:
         0c:1d:70:9b:26:d0:fc:17:01:da:02:71:a4:a9:85:2d:4b:64:
         ad:5c:23:a1:8b:4b:01:a0:b8:93:1e:30:58:62:22:36:af:bd:
         fd:96:b5:af:26:ec:c6:96:f5:3a:11:76:c1:10:38:ec:13:9d:
         b7:d7:d7:6e:42:83:25:66:14:38:60:61:22:14:27:9b:53:ba:
         62:37:51:35:70:f6:eb:eb:f1:b2:ca:d6:f3:74:81:8d:a5:1d:
         1e:34:e6:a0:fa:30:44:0e:45:1c:fe:a4:b7:d0:46:6c:d1:a7:
         90:a0:2a:2b:4d:fd:e8:e6:71:4e:96:8c:8f:0e:c9:68:e5:b6:
         a3:19:00:24:b6:c2:10:8d:07:7e:fe:20:8d:8c:ce:a2:78:a8:
         a3:c7:2c:eb:28:31:15:3d:8c:ad:d8:48:2b:12:36:cc:fa:1d:
         a9:86:6e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----