Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/MO-yxjp5XCg1-vW3Qy3H6Il7ehc.roa
File:                     MO-yxjp5XCg1-vW3Qy3H6Il7ehc.roa (raw, json)
Hash identifier:          w2Zxm7lY14w3kxOIPtpEkGgLo2pen0rjLGMIZzFvSJc=
Subject key identifier:   30:EF:B2:C6:3A:79:5C:28:35:FA:F5:B7:43:2D:C7:E8:89:7B:7A:17
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       0579172D
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/MO-yxjp5XCg1-vW3Qy3H6Il7ehc.roa
Signing time:             Sat 01 Jan 2022 05:01:14 +0000
ROA not before:           Sat 01 Jan 2022 05:01:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     17830
IP address blocks:        2a05:1083:ff00::/40 maxlen: 48
                          2a0c:e640::/36 maxlen: 48
                          2a0c:e640:6000::/36 maxlen: 48
                          2a0c:e640:1000::/44 maxlen: 48
                          2a0c:e640:1020::/44 maxlen: 48
                          2a0c:e640:1010::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91821869 (0x579172d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 05:01:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=30efb2c63a795c2835faf5b7432dc7e8897b7a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:7f:bf:cb:ae:9a:7b:6f:2f:b6:26:3e:cd:
                    7c:6c:e4:e6:1a:d0:8d:4d:ae:12:6e:e7:61:38:b8:
                    74:4d:8a:8c:00:ff:96:b9:53:a2:8f:a9:30:33:13:
                    95:95:0a:8c:19:98:0d:ae:bd:3f:a6:4c:e8:ad:b1:
                    ff:10:89:a2:1e:2b:d2:2d:5b:91:bc:04:53:dc:a1:
                    ed:47:0a:1a:6a:45:d9:89:46:af:c8:90:2c:e0:c1:
                    11:5b:ce:46:03:8c:7e:71:ab:83:57:53:ca:d1:0d:
                    08:12:fe:56:49:bc:84:a1:d7:f6:3e:2a:bb:15:a4:
                    b3:a8:70:2d:a8:34:88:52:38:dc:1a:a4:6e:2b:ce:
                    58:91:bb:ad:21:2e:21:b2:4a:b4:79:c1:e5:28:09:
                    d7:f7:66:8e:9c:c3:3b:0e:7c:93:a6:1f:f0:bf:2e:
                    a1:55:f8:4c:d8:d7:22:83:67:ba:ab:34:41:f0:27:
                    b5:dd:85:0d:16:08:6b:ea:8f:5b:f0:44:8b:ba:a6:
                    8c:79:e4:e9:55:8d:94:5d:1f:3f:20:6d:76:51:40:
                    65:7b:43:39:79:75:82:d6:f7:30:a7:d3:09:f9:c7:
                    ca:2e:de:26:86:3d:94:9f:24:da:69:5b:5e:4f:a2:
                    05:29:3c:6a:67:50:db:1b:3d:0a:50:3e:13:57:b0:
                    3e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EF:B2:C6:3A:79:5C:28:35:FA:F5:B7:43:2D:C7:E8:89:7B:7A:17
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/MO-yxjp5XCg1-vW3Qy3H6Il7ehc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1083:ff00::/40
                  2a0c:e640::-2a0c:e640:102f:ffff:ffff:ffff:ffff:ffff
                  2a0c:e640:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7b:75:ca:e6:a8:e0:e2:62:8d:f9:e8:4f:ee:f2:2a:39:a2:40:
         1c:32:9a:fa:be:31:d7:5f:0d:28:74:ca:f6:cf:3d:b3:81:81:
         a7:31:5b:ce:8c:5a:c5:da:ee:6e:70:ab:1e:44:ab:14:55:62:
         22:48:95:a4:74:15:fd:a9:4e:c5:d4:01:34:4b:63:4e:4c:6b:
         e6:88:2e:b3:0f:bf:ff:35:e5:8d:c3:f5:b7:82:59:20:5d:b7:
         9d:82:7f:de:3c:8e:a6:23:99:f6:dd:5e:f4:4b:45:18:ee:f0:
         13:b6:f4:8a:da:0a:a4:10:67:a9:a3:a2:c5:30:ab:b0:e6:c8:
         e5:f8:88:60:ca:9f:ae:0d:78:a3:d0:f9:72:42:58:42:81:33:
         2e:3c:a9:d3:c8:a9:96:45:ad:7b:fe:6b:41:e4:8f:85:d8:ac:
         e8:b6:ea:67:89:75:bc:18:73:05:17:6b:c7:97:e7:77:82:4d:
         7b:b4:6f:cf:f6:a9:28:03:4a:c0:00:0e:6d:bd:51:eb:46:4d:
         07:8a:88:32:2a:9c:ea:2d:28:6e:3f:47:62:c5:f4:56:d8:0f:
         b8:69:82:f8:0b:98:92:70:93:20:e3:d0:5f:2c:3f:fa:9f:43:
         3d:27:cc:9e:03:35:d6:b0:dc:49:b2:5e:57:24:72:51:81:a4:
         e7:93:25:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----