Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/Z6RGEAk9MyjO3pCKxGxkbLJgByc.roa
File:                     Z6RGEAk9MyjO3pCKxGxkbLJgByc.roa (raw, json)
Hash identifier:          I0mx4jT3DsXkYcDh1HBiv8oZZlAfw5CdjmZeclJE82g=
Subject key identifier:   67:A4:46:10:09:3D:33:28:CE:DE:90:8A:C4:6C:64:6C:B2:60:07:27
Certificate issuer:       /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial:       05DF8688
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/Z6RGEAk9MyjO3pCKxGxkbLJgByc.roa
Signing time:             Sat 01 Jan 2022 08:01:55 +0000
ROA not before:           Sat 01 Jan 2022 08:01:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31655
IP address blocks:        2a03:15c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98535048 (0x5df8688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
        Validity
            Not Before: Jan  1 08:01:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=67a44610093d3328cede908ac46c646cb2600727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0d:54:4d:d7:1a:c2:b5:47:fa:68:91:c7:13:
                    cb:bd:ba:37:03:6b:46:e3:05:60:df:71:ed:bb:cc:
                    1a:53:36:1e:74:13:85:17:e5:a2:cd:21:0e:29:22:
                    7a:38:4d:c6:88:8b:fb:0d:4b:bc:23:48:c2:98:db:
                    a9:24:77:0c:28:49:b9:fa:cd:61:c2:74:d5:a3:36:
                    12:d2:2d:8c:32:be:6a:88:46:47:e7:3c:34:1c:35:
                    0d:74:f4:73:13:35:aa:66:62:5b:fd:27:4d:78:53:
                    a8:c1:ef:0a:74:42:a5:87:69:ad:cf:96:27:01:99:
                    90:5f:62:07:34:a7:3d:c2:45:6d:bd:5b:87:d3:62:
                    13:a9:b3:f3:ff:7c:9e:d1:c9:42:a9:11:b3:36:2e:
                    1d:ab:58:7e:37:f3:df:e3:e4:85:9d:6a:6a:42:de:
                    c3:f2:04:c4:13:bf:73:c6:c8:74:7d:1a:d2:25:80:
                    ae:28:2c:09:f6:6c:49:92:94:9f:73:0c:00:48:a8:
                    00:34:2d:32:9f:78:ac:1c:24:d7:98:3a:e7:19:48:
                    ea:87:c7:f4:61:c8:97:82:9b:12:7b:94:86:e9:38:
                    a9:9e:52:a6:a1:1f:88:0a:e7:b6:cf:50:62:c0:fc:
                    2a:b1:2d:80:8f:81:b3:d9:fb:fd:8a:61:50:dc:f4:
                    ae:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A4:46:10:09:3D:33:28:CE:DE:90:8A:C4:6C:64:6C:B2:60:07:27
            X509v3 Authority Key Identifier:
                keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/Z6RGEAk9MyjO3pCKxGxkbLJgByc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:15c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:21:31:38:c7:a1:d4:bd:73:50:7d:43:87:48:2b:c8:cc:3b:
         d7:1f:6c:ab:b9:b9:2e:9f:36:47:db:6c:bd:30:15:eb:f3:8f:
         7b:bf:6a:c4:3d:bd:cd:36:4e:b8:89:23:cc:2c:96:4d:c0:58:
         e0:c2:93:fb:46:cc:36:96:2c:cc:53:58:cd:47:b4:0c:5a:e4:
         ac:b0:d3:2f:17:19:78:0e:55:ad:5c:68:42:23:6a:14:b3:f1:
         4b:c4:5e:f0:8e:b2:da:85:ca:80:96:6c:0c:0c:b0:a5:84:b3:
         b3:ca:7d:5c:ad:a4:ef:bf:5b:56:de:5b:f1:b7:46:bb:a3:4d:
         06:b9:fc:b8:9f:21:bd:c9:8f:02:ac:7f:db:9a:ea:64:15:cd:
         cf:99:31:3c:46:06:05:70:00:53:ff:dc:f9:b4:3d:12:a3:4a:
         01:4f:5e:55:30:7e:72:a3:92:90:9b:9e:18:ec:e4:32:c3:b0:
         66:68:95:5d:38:34:a2:36:07:9f:ba:8f:b0:a4:a6:07:81:3d:
         36:70:9c:97:f6:10:6d:51:f6:cc:f2:e3:6b:0a:89:d9:51:99:
         a8:f9:7a:54:76:61:64:f0:04:5d:6d:b5:d0:e1:bf:19:c5:79:
         3b:f9:2f:77:82:0c:dc:93:06:63:84:14:82:8a:d1:e2:8c:cd:
         d9:f9:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----