Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/1-Ik-TyQk53c3caUr3B0o98Wf0Bs.roa
File:                     1-Ik-TyQk53c3caUr3B0o98Wf0Bs.roa (raw, json)
Hash identifier:          MaIBFtbhC+qz62a/wnX/zldi0bEH2zKyAnBTdgxJVlo=
Subject key identifier:   F8:89:3E:4F:24:24:E7:77:37:71:A5:2B:DC:1D:28:F7:C5:9F:D0:1B
Certificate issuer:       /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial:       0D104CF1
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/1-Ik-TyQk53c3caUr3B0o98Wf0Bs.roa
Signing time:             Sat 01 Jan 2022 14:06:03 +0000
ROA not before:           Sat 01 Jan 2022 14:06:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24971
IP address blocks:        2a04:16c0:200::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219172081 (0xd104cf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
        Validity
            Not Before: Jan  1 14:06:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8893e4f2424e7773771a52bdc1d28f7c59fd01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:45:24:7f:3b:91:68:4b:c2:9b:f5:ce:1c:
                    20:ca:df:9d:d4:d5:e5:8d:40:ad:f3:6a:85:32:bc:
                    d4:a0:ba:f0:c9:f0:fd:b7:4c:1f:21:b7:79:a5:80:
                    0b:f0:00:41:5a:59:8d:2f:87:d8:56:fd:c7:48:af:
                    66:b7:ac:8f:eb:ee:2c:0a:64:7f:79:4f:9e:68:90:
                    be:fa:88:05:ce:67:49:dd:60:95:82:dd:ab:79:10:
                    c1:4c:24:d3:20:e8:cd:15:8c:90:39:18:c0:18:cf:
                    93:b3:2a:67:97:50:8b:8f:62:64:ad:7e:af:5c:e5:
                    bc:60:6f:b8:59:ac:19:71:05:4a:95:2b:a2:ca:2d:
                    3b:1d:72:3c:21:52:5d:0a:98:55:71:f6:2a:27:d9:
                    f5:fb:d2:e1:d8:50:9a:f1:25:17:b5:b4:b1:26:96:
                    0b:46:c1:5c:74:8e:11:74:57:8d:76:78:4f:b3:df:
                    2b:7f:92:91:a0:17:fe:eb:b9:1b:e5:4d:20:26:69:
                    15:fd:d6:11:a4:d8:a4:da:3a:a4:2e:a3:ae:35:e8:
                    db:a5:b4:bf:21:60:c3:09:0f:88:73:85:b7:33:05:
                    d5:3f:2e:35:a6:18:7c:80:02:e5:63:5e:57:5d:64:
                    bd:fa:50:25:07:47:d5:1c:e1:be:a5:de:ce:2f:0c:
                    a4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:89:3E:4F:24:24:E7:77:37:71:A5:2B:DC:1D:28:F7:C5:9F:D0:1B
            X509v3 Authority Key Identifier:
                keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/1-Ik-TyQk53c3caUr3B0o98Wf0Bs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:16c0:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:7c:2b:e8:6b:aa:1a:7a:08:70:4b:75:35:c1:a5:a6:8e:1b:
         bb:f2:7c:82:6d:26:2d:a1:15:41:1a:b2:81:45:98:a9:9b:6e:
         a4:30:be:e0:4f:57:17:ee:a7:f3:f8:f5:75:e7:c9:59:5d:63:
         56:09:b4:c6:f2:10:17:cb:99:fd:17:92:62:b7:76:0b:c5:1d:
         2f:56:8e:91:65:30:74:4f:c8:a6:11:f6:d1:b7:7d:4f:94:d6:
         9e:55:0e:6d:97:27:df:09:25:46:9f:31:2d:ac:c6:f7:1c:ce:
         c5:a4:e1:fa:0d:72:7c:63:3e:0e:3f:38:92:3b:af:6f:a6:6d:
         c2:b5:41:0b:9e:78:f0:53:c0:26:f0:55:08:56:03:69:78:c0:
         5f:3f:5d:6e:9b:46:d2:41:db:76:8f:cb:e2:d4:8b:00:5b:5d:
         dc:1c:d6:43:ed:17:2c:64:d3:bc:51:79:df:7e:a7:c1:27:7f:
         f2:bd:7a:13:f3:94:f6:40:6d:b1:12:6d:e7:fe:af:a1:55:bb:
         ee:f3:f5:e2:97:f2:08:d2:21:ca:01:83:29:09:6b:9a:d8:b7:
         b6:00:99:cd:51:74:f1:6f:50:42:e9:6f:c1:a2:6e:9f:05:50:
         10:d4:36:d8:f3:51:e9:fa:06:34:5f:0d:2f:c8:90:70:5d:c4:
         82:9e:39:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----