Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/1lp-ENAB2IWkML0njTNX0VtQ5ts.roa
File:                     1lp-ENAB2IWkML0njTNX0VtQ5ts.roa (raw, json)
Hash identifier:          rOANajPhPU5RfmM1xXh+fGI+uTmmQ9JY6lfijkImoSE=
Subject key identifier:   D6:5A:7E:10:D0:01:D8:85:A4:30:BD:27:8D:33:57:D1:5B:50:E6:DB
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       0589519F
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/1lp-ENAB2IWkML0njTNX0VtQ5ts.roa
Signing time:             Sat 01 Jan 2022 05:01:22 +0000
ROA not before:           Sat 01 Jan 2022 05:01:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     146992
IP address blocks:        2a0c:e643::/33 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92885407 (0x589519f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 05:01:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d65a7e10d001d885a430bd278d3357d15b50e6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:bf:66:0b:e9:de:71:9c:e9:bf:10:df:0f:
                    94:ba:2f:8a:b9:33:58:b9:24:13:e3:6b:eb:63:3c:
                    02:08:ab:cf:23:7c:2d:0a:77:62:a4:cf:9b:d2:2d:
                    f3:4e:87:64:d5:cf:c9:4e:74:d6:a2:89:84:b5:4e:
                    80:c1:1f:7d:77:55:ea:42:6a:fa:2f:f1:e6:45:09:
                    f9:5c:3a:63:c4:8f:04:c4:81:8c:57:5b:17:fa:fa:
                    41:51:72:c3:c3:6a:cc:3f:5c:29:20:07:af:c8:aa:
                    40:c0:91:af:51:f4:6d:e6:13:ed:2b:70:83:79:96:
                    b8:eb:ae:d2:d5:15:00:0e:8a:b6:52:cd:e6:3b:1a:
                    dc:a1:53:31:7d:17:ca:f4:83:d1:33:9d:13:b5:11:
                    bb:98:4b:aa:7d:25:46:4e:23:d5:3e:48:01:55:ce:
                    70:ea:ce:53:e0:2c:ff:8e:26:4a:b2:c9:b2:fc:56:
                    8f:e7:92:66:3f:bb:16:40:25:f4:84:80:b0:82:10:
                    d7:f0:01:54:c1:b3:db:06:ed:bc:66:dd:38:9b:dd:
                    8e:32:1e:aa:1f:80:35:10:20:34:1c:1c:1a:93:12:
                    c9:50:3c:32:0a:09:89:fe:fe:21:f3:01:ba:53:47:
                    3b:f2:bb:05:dc:75:c7:f9:59:63:8e:73:69:d2:d0:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5A:7E:10:D0:01:D8:85:A4:30:BD:27:8D:33:57:D1:5B:50:E6:DB
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/1lp-ENAB2IWkML0njTNX0VtQ5ts.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:e643::/33

    Signature Algorithm: sha256WithRSAEncryption
         83:fb:3f:12:80:2c:5a:f1:d1:4d:82:1d:4b:ae:54:f8:6d:b8:
         21:d7:21:95:e0:9a:35:1d:6b:d8:2f:fc:a0:21:84:8c:99:a3:
         7f:a8:b2:11:99:16:64:40:17:f8:fb:ce:94:92:28:42:d3:d6:
         0d:df:0a:31:80:52:95:8c:68:e4:79:bb:68:d4:b8:3c:9c:e3:
         f3:f7:39:8a:30:bc:40:a0:19:68:3d:3f:8c:e9:de:0a:35:9d:
         e7:20:3a:d0:0a:ed:d0:10:25:b8:e0:b3:0a:ba:37:33:af:bf:
         7d:2c:63:61:07:0b:42:e9:1a:81:97:eb:b2:a2:9c:15:25:91:
         ec:42:7c:8c:e1:bf:77:55:6a:75:84:70:b4:0c:1b:4b:5a:a7:
         97:d1:dd:e0:b8:a8:d1:22:0d:57:90:93:a6:c1:5b:04:4b:6d:
         8c:88:eb:ea:88:40:c4:91:9d:4c:72:cc:1d:67:84:f3:b1:b3:
         5c:7c:34:98:54:ef:1d:9e:e4:75:71:81:72:92:95:fa:bd:7e:
         d5:8a:bc:16:b1:8c:56:27:d1:54:18:fb:4d:24:5d:12:4f:30:
         e3:32:1a:9e:36:3d:67:82:45:f9:a5:f4:d0:b9:47:3e:c2:a7:
         23:93:08:d3:d2:f3:6c:a6:6c:a2:01:08:27:c2:38:03:ed:de:
         29:6f:7f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----