Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/_DPkhnnS2z17qXv47DaCN-k1kgc.roa
File:                     _DPkhnnS2z17qXv47DaCN-k1kgc.roa (raw, json)
Hash identifier:          uNMSh6FPbVMFmktp6BPgRv0Gxg5y170ckVtYFB9EX0w=
Subject key identifier:   FC:33:E4:86:79:D2:DB:3D:7B:A9:7B:F8:EC:36:82:37:E9:35:92:07
Certificate issuer:       /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial:       081E00F2
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/_DPkhnnS2z17qXv47DaCN-k1kgc.roa
Signing time:             Sat 01 Jan 2022 04:56:25 +0000
ROA not before:           Sat 01 Jan 2022 04:56:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207835
IP address blocks:        2a0e:1540:f9c0::/42 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136184050 (0x81e00f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
        Validity
            Not Before: Jan  1 04:56:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc33e48679d2db3d7ba97bf8ec368237e9359207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:08:86:50:d1:db:ec:e8:11:fd:c4:ff:85:
                    11:ee:d9:fa:34:b3:6e:5a:f0:fa:17:5f:ae:06:0b:
                    96:0b:e6:07:fc:f7:62:37:42:27:4f:66:a5:6f:b7:
                    b9:76:65:ff:7a:f2:ac:4f:c2:a1:8a:5f:b2:96:28:
                    59:9d:3f:e8:9e:c7:e6:06:ca:51:c1:b0:1b:cf:78:
                    f5:65:ac:43:b2:58:38:4c:39:97:8f:28:c0:31:31:
                    c7:9e:d2:f2:66:0a:5e:15:91:a6:70:61:e1:a0:19:
                    b9:eb:b1:87:4a:53:57:10:af:c7:fd:0c:b9:d5:7e:
                    45:6b:6c:bc:d0:40:9b:6a:18:ad:c5:ff:7b:85:88:
                    3d:3c:21:32:ef:e0:2e:6e:43:6d:08:9a:62:93:57:
                    8a:ca:fb:2c:55:b3:b0:78:c5:f1:5c:8c:76:52:0a:
                    e3:da:cb:84:d0:b7:02:04:2c:07:0f:90:b5:ac:40:
                    c0:48:97:79:56:69:30:2a:c0:c3:62:75:a9:0e:83:
                    8b:6b:c3:3f:53:15:8a:12:a9:86:18:8f:05:e3:8e:
                    2c:82:b0:5b:1c:77:c7:15:c2:6a:6b:e5:cb:66:53:
                    8d:05:8f:5a:99:bb:ac:85:25:26:bd:4d:6f:9e:d1:
                    f9:1c:0e:dc:17:7c:e9:c3:9c:f1:a7:46:4e:72:08:
                    ed:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:33:E4:86:79:D2:DB:3D:7B:A9:7B:F8:EC:36:82:37:E9:35:92:07
            X509v3 Authority Key Identifier:
                keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/_DPkhnnS2z17qXv47DaCN-k1kgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:1540:f9c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         15:94:8e:45:61:12:6c:0a:44:ef:57:33:ea:c3:9a:9a:de:fc:
         0f:7c:ac:00:48:a0:3a:98:61:76:fe:84:d4:f7:da:40:b9:2a:
         d0:74:58:21:80:14:75:2b:7a:6a:fc:91:d2:ef:f0:61:58:74:
         3a:5e:27:15:33:e6:41:2f:c1:05:c1:e8:7e:83:9e:0c:f4:f4:
         17:58:e2:85:03:a6:6b:9f:37:ba:7a:b6:f4:da:0d:b0:69:65:
         1a:95:36:70:a1:ee:f2:46:c7:ad:bc:03:90:41:56:3d:33:2b:
         c9:ba:00:10:5b:e1:ce:7b:36:c8:b0:76:86:1c:f6:55:0a:0b:
         1a:f5:e9:82:01:09:ab:e8:5a:ee:e4:2a:e5:a1:27:be:a5:d3:
         2a:cf:3c:47:14:54:6d:a5:97:9f:66:a8:d6:df:74:05:f6:6c:
         c4:b5:84:ec:81:b7:60:ad:db:b6:35:61:93:2b:37:31:57:48:
         f3:88:ad:89:95:ca:51:47:b7:12:b3:ee:ab:d4:5b:33:e5:0e:
         7d:d0:9f:f1:a2:73:cb:aa:4f:d1:92:66:4c:ec:3d:92:bb:2c:
         2e:43:ee:26:fc:66:67:1c:05:ad:85:85:d6:c6:31:26:01:8b:
         b6:7d:d0:43:4d:96:ee:5f:03:c2:3a:2d:1d:dc:ff:3a:98:b8:
         ec:e1:9a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----