Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/Uq5BQtNsevRRpCDk9ybLZwNQiwM.roa
File:                     Uq5BQtNsevRRpCDk9ybLZwNQiwM.roa (raw, json)
Hash identifier:          yFYBAdx6+5SfhgUFDJiXs5uy1z9gKy0S1L8PIDW9mwM=
Subject key identifier:   52:AE:41:42:D3:6C:7A:F4:51:A4:20:E4:F7:26:CB:67:03:50:8B:03
Certificate issuer:       /CN=6f33afd41ea012fb2803c7274523c8ec3f261311
Certificate serial:       0B7DB42B
Authority key identifier: 6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/Uq5BQtNsevRRpCDk9ybLZwNQiwM.roa
Signing time:             Sat 01 Jan 2022 03:57:00 +0000
ROA not before:           Sat 01 Jan 2022 03:57:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201723
IP address blocks:        2001:67c:6bc::/48 maxlen: 48
                          2001:678:3d4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192787499 (0xb7db42b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f33afd41ea012fb2803c7274523c8ec3f261311
        Validity
            Not Before: Jan  1 03:57:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=52ae4142d36c7af451a420e4f726cb6703508b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0f:a8:d5:f2:36:98:0d:53:cf:a5:1b:2f:b8:
                    9d:1d:d7:04:c9:5d:fd:76:37:7c:c3:c3:41:3f:96:
                    cf:20:64:03:9e:99:10:5c:45:41:ff:61:96:fc:2b:
                    d0:4a:ec:eb:b0:46:00:7a:90:a7:f8:6d:b3:2a:85:
                    91:76:fe:d3:34:9d:73:6c:ea:4b:7f:a8:25:e3:2c:
                    7e:ec:2b:e0:2a:36:1f:b8:71:bb:cf:d2:ea:14:e6:
                    5a:b7:d5:52:03:c5:b3:f9:3d:1c:53:9a:a6:55:07:
                    69:c4:3b:39:56:94:75:ab:97:cd:e9:72:20:66:e6:
                    69:28:61:66:27:d8:80:61:96:d4:65:83:f9:fb:ba:
                    7c:0c:60:45:7c:bf:a5:4f:be:ea:8b:52:3e:06:b9:
                    c0:a5:df:e9:b9:61:d1:c6:8f:51:3b:a5:f1:4d:bf:
                    06:73:f0:e7:c2:70:d0:9b:4c:f4:c1:7b:4b:3e:96:
                    7c:16:11:24:25:ce:db:4e:68:f1:dd:fd:f9:b2:07:
                    78:3f:b3:03:85:14:ad:fe:bd:38:31:74:2d:53:58:
                    33:46:97:e3:c8:bc:33:3d:c3:c7:7e:0f:cc:84:f0:
                    05:c9:2f:3b:a0:e0:50:46:41:12:fd:85:10:98:ff:
                    78:59:a4:9b:6c:18:c6:32:2e:cb:61:8d:06:94:e4:
                    db:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AE:41:42:D3:6C:7A:F4:51:A4:20:E4:F7:26:CB:67:03:50:8B:03
            X509v3 Authority Key Identifier:
                keyid:6F:33:AF:D4:1E:A0:12:FB:28:03:C7:27:45:23:C8:EC:3F:26:13:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzOv1B6gEvsoA8cnRSPI7D8mExE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/Uq5BQtNsevRRpCDk9ybLZwNQiwM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9eaf7f-ab00-42b2-9ce2-b3580994a3b1/1/bzOv1B6gEvsoA8cnRSPI7D8mExE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:3d4::/48
                  2001:67c:6bc::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:8c:77:5d:88:02:84:74:85:da:ab:51:bb:f2:d7:95:5c:df:
         14:9d:ff:6e:44:7a:77:ce:cc:83:ec:3c:c0:90:b8:5e:40:26:
         07:96:7d:62:fe:d7:48:90:e9:da:05:c5:82:d1:ff:89:93:af:
         9c:c7:de:48:dc:8f:f8:01:02:2b:61:43:e8:d2:37:0d:3d:fa:
         da:e5:25:a4:62:c1:1c:8d:f5:a8:58:77:7c:34:ee:87:a4:56:
         80:62:d9:df:96:58:6a:63:c6:71:53:ef:fa:7e:76:a9:7e:73:
         08:1a:78:74:5c:da:6b:86:b8:68:c2:38:8c:e5:1d:a8:65:6a:
         cb:36:ff:6e:9e:0c:6e:51:e5:e9:96:79:51:24:78:56:02:9d:
         2b:4e:8a:2f:d2:f3:66:a1:14:fb:58:73:24:43:b1:95:2f:37:
         c0:3f:4b:27:8a:d5:39:2b:77:d0:c7:8e:26:91:97:37:0c:3e:
         7a:64:6d:22:b5:53:f5:94:d3:36:21:d5:14:af:e0:fa:d3:89:
         af:cc:50:0d:4f:40:ea:a9:6a:27:55:fc:ed:b9:b5:94:1b:81:
         df:a5:86:dc:ea:ac:39:55:bc:64:eb:2f:a6:47:02:de:bb:5b:
         2d:4a:42:26:f1:a9:8b:52:8d:27:b7:e9:00:fe:25:2d:6b:31:
         66:07:d1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----