Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/rX5v6v7sIFN9RDabES2M8zVeY-4.roa
File:                     rX5v6v7sIFN9RDabES2M8zVeY-4.roa (raw, json)
Hash identifier:          OSWgoFm5rT/a8hsXLfIuX5EJ11wKb5jTkx7yQsVRaGI=
Subject key identifier:   AD:7E:6F:EA:FE:EC:20:53:7D:44:36:9B:11:2D:8C:F3:35:5E:63:EE
Certificate issuer:       /CN=91a071508338260551a55f01fd0708fdf5e08287
Certificate serial:       0184E4CE2FD84CA173D0307A033A6136AE65
Authority key identifier: 91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/rX5v6v7sIFN9RDabES2M8zVeY-4.roa
Signing time:             Tue 06 Dec 2022 00:20:28 +0000
ROA not before:           Tue 06 Dec 2022 00:20:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8466
IP address blocks:        2a05:9ec0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e4:ce:2f:d8:4c:a1:73:d0:30:7a:03:3a:61:36:ae:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a071508338260551a55f01fd0708fdf5e08287
        Validity
            Not Before: Dec  6 00:20:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ad7e6feafeec20537d44369b112d8cf3355e63ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:85:bc:ba:bc:81:50:89:cd:38:bd:31:64:0e:
                    2b:ad:0c:88:6d:64:27:2b:5a:88:84:37:18:8c:95:
                    82:5b:09:da:26:a0:0e:ae:a7:7d:80:6a:4c:24:d5:
                    34:dd:a0:4b:b2:4e:d1:24:28:d1:37:ac:db:52:04:
                    37:51:85:44:0f:60:0c:21:e5:9a:b2:1c:ee:a4:dc:
                    75:82:32:e2:d8:fa:ce:80:86:3d:5d:1d:14:6a:9b:
                    f8:07:a3:7d:29:1a:f9:46:3c:99:7a:b9:0c:0e:b4:
                    78:85:c9:05:b0:39:0c:ef:aa:ac:ac:81:ec:85:59:
                    ec:95:80:80:f5:aa:dd:e0:2a:bc:ef:49:51:5e:54:
                    9f:03:0a:c0:52:84:2d:6d:64:d0:c2:fc:84:83:03:
                    52:af:da:d9:84:be:07:ce:8d:03:6e:06:74:e7:a0:
                    b0:36:37:fe:0a:5d:f2:64:77:c2:ef:47:4d:1a:cd:
                    a6:26:45:ad:90:31:e2:5a:98:e5:bb:f7:46:1a:e2:
                    46:ec:a1:7e:65:00:75:d6:9f:ab:b2:13:1f:9c:6f:
                    bc:a0:6c:87:77:a6:cb:80:b6:dc:8c:92:a3:8b:9b:
                    c4:48:9d:ce:b1:f2:40:af:7f:65:63:9a:9a:38:2e:
                    6c:fd:5c:92:dd:06:ca:8c:82:e0:89:de:f6:3e:74:
                    bc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7E:6F:EA:FE:EC:20:53:7D:44:36:9B:11:2D:8C:F3:35:5E:63:EE
            X509v3 Authority Key Identifier:
                keyid:91:A0:71:50:83:38:26:05:51:A5:5F:01:FD:07:08:FD:F5:E0:82:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaBxUIM4JgVRpV8B_QcI_fXggoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/rX5v6v7sIFN9RDabES2M8zVeY-4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/15cc52-51ee-460e-9aeb-ee5559b3658b/1/kaBxUIM4JgVRpV8B_QcI_fXggoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:9ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         2b:2a:76:0b:d4:ae:0a:33:40:b6:6e:1b:34:2f:ec:09:57:7f:
         5b:96:df:12:7d:8a:29:08:7a:2a:5f:c0:f4:95:44:72:96:42:
         b7:5a:03:22:06:7b:c0:a7:e2:8d:d0:8e:c3:51:af:f5:6a:77:
         11:ed:92:f2:3b:bd:6d:21:45:90:c6:9e:9d:d0:2d:b1:2f:ed:
         57:bd:49:e3:81:d2:66:16:a5:4b:22:82:e3:14:fa:cf:0e:f0:
         23:ff:5c:e9:47:03:82:ff:5d:e7:13:15:0a:95:f1:a8:e0:d7:
         8c:a8:67:11:ae:66:82:9c:f8:42:5d:ee:b6:76:ed:1b:74:a7:
         3a:6a:92:d2:8c:36:8b:06:c7:d5:9f:46:3c:5a:ba:83:ee:8f:
         11:ad:8e:50:dc:d8:5c:1b:77:2a:5b:74:27:5c:3f:cd:54:a2:
         5f:12:c5:d7:68:19:b1:2b:72:fe:5f:c4:07:71:97:66:bf:36:
         b6:45:53:40:e8:bb:ee:ff:f9:f9:a2:f3:77:41:e2:5c:b7:64:
         e1:09:c7:c2:7f:0c:64:0b:95:c1:8e:55:e7:e5:e6:16:a7:2f:
         f6:42:25:de:1b:ff:4d:cf:c2:06:e2:02:78:ad:0c:21:f2:ba:
         5d:c5:df:a6:26:b5:08:8c:96:ef:ed:87:ff:b4:35:b0:5f:4e:
         68:20:bf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----