Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/NHwdFC9AAfUzSmFXeBeuXSO34-U.roa
File:                     NHwdFC9AAfUzSmFXeBeuXSO34-U.roa (raw, json)
Hash identifier:          +4c4PsYZgBdJXJO5hA4UOcKn25zOM0a8d93g7tlKGLE=
Subject key identifier:   34:7C:1D:14:2F:40:01:F5:33:4A:61:57:78:17:AE:5D:23:B7:E3:E5
Certificate issuer:       /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial:       349668CD
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/NHwdFC9AAfUzSmFXeBeuXSO34-U.roa
Signing time:             Sat 01 Jan 2022 08:58:02 +0000
ROA not before:           Sat 01 Jan 2022 08:58:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3308
IP address blocks:        2001:2010::/31 maxlen: 31
                          2001:2000:1000::/40 maxlen: 40
                          2001:2012::/32 maxlen: 32
                          2001:2092::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 882272461 (0x349668cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
        Validity
            Not Before: Jan  1 08:58:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=347c1d142f4001f5334a61577817ae5d23b7e3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:fa:87:dd:bb:be:9e:c8:cd:f3:d0:40:aa:
                    8a:19:61:5e:59:ef:a8:f5:11:79:bd:73:45:30:fa:
                    6c:f2:c3:45:6a:6e:8e:8a:5d:71:68:40:89:f0:3e:
                    8e:12:4a:c9:c2:bf:23:b1:14:75:30:2f:45:f9:cb:
                    34:3b:4e:db:5d:38:c0:8f:72:e0:8e:fb:c5:82:69:
                    f1:f5:a3:3d:b9:04:67:57:97:e2:0f:64:a6:f4:63:
                    2d:cf:26:8f:eb:37:03:96:65:91:56:5c:df:6e:0b:
                    da:c6:d0:c6:60:2f:88:99:39:13:07:d7:1a:5b:a6:
                    a2:b4:87:ba:40:81:6c:a0:71:74:d8:b5:02:34:56:
                    e7:44:77:9a:04:36:f8:62:1a:bf:3d:41:ef:dc:ae:
                    3a:6b:6b:14:bc:9e:18:f4:5d:3d:bc:b6:cd:81:91:
                    a1:80:10:e9:cb:4a:79:32:72:63:d6:8c:e5:ff:9b:
                    2b:7c:a0:77:72:bc:56:58:f7:74:94:4f:bb:85:b7:
                    a9:e3:72:2b:a9:90:7d:29:9c:65:1a:95:c9:8c:88:
                    96:c1:93:88:3d:d3:6d:bc:ed:88:7e:09:91:b0:86:
                    01:1c:ab:25:dc:6f:60:27:d4:86:24:16:79:06:24:
                    62:51:13:cd:ea:d5:c6:d9:5f:41:0e:43:8f:8a:7e:
                    3f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7C:1D:14:2F:40:01:F5:33:4A:61:57:78:17:AE:5D:23:B7:E3:E5
            X509v3 Authority Key Identifier:
                keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/NHwdFC9AAfUzSmFXeBeuXSO34-U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2000:1000::/40
                  2001:2010::-2001:2012:ffff:ffff:ffff:ffff:ffff:ffff
                  2001:2092::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:f3:34:70:86:95:6b:24:ca:56:12:ce:48:15:0f:24:8d:7e:
         bb:46:71:c8:6a:8c:93:1d:2e:11:19:af:57:6d:fc:ba:b9:45:
         43:6b:8e:bd:ff:d2:b1:0c:4a:40:be:65:5a:64:c8:42:87:d3:
         ce:95:5e:cd:75:a3:b4:a1:2f:e0:75:e2:98:79:5f:28:7b:d4:
         f3:7f:cb:51:89:ee:7b:1b:75:27:74:20:04:ca:cd:c1:3f:65:
         09:19:9b:0b:f3:4b:d3:f8:32:dc:33:40:21:86:70:a4:20:a0:
         c1:04:93:e8:e7:a7:5c:83:fd:11:2a:e2:2b:31:90:46:c9:5f:
         51:fd:4d:0c:06:7c:b0:b2:a7:9e:cb:23:9a:b8:aa:76:51:58:
         12:39:42:04:8b:eb:dd:8b:05:8b:16:99:99:9f:12:25:50:63:
         eb:8e:aa:e2:ac:e5:99:2b:94:c4:f0:31:22:3c:a1:43:97:0d:
         1a:bd:73:91:70:4e:89:4c:a8:06:8c:1f:10:43:66:25:57:1a:
         58:6d:5a:c0:bf:37:cf:50:b4:dc:81:df:3e:51:f7:24:6a:28:
         62:9f:e6:13:0e:d1:34:f3:02:98:29:a7:7a:50:6a:96:5d:be:
         a7:a9:c9:7a:db:ba:ce:55:ab:e7:ad:51:68:ce:be:5a:e8:8a:
         76:33:94:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----