Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ifLudbUNHqm4Pkx1aYOtItZdUrI.roa
File:                     ifLudbUNHqm4Pkx1aYOtItZdUrI.roa (raw, json)
Hash identifier:          sPDHAahnL8TM4ikywYCeQRdVULragqnHUMC+cCY481E=
Subject key identifier:   89:F2:EE:75:B5:0D:1E:A9:B8:3E:4C:75:69:83:AD:22:D6:5D:52:B2
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       018322DB5705F6BB029AFD226D6624A229C5
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ifLudbUNHqm4Pkx1aYOtItZdUrI.roa
Signing time:             Fri 09 Sep 2022 15:25:43 +0000
ROA not before:           Fri 09 Sep 2022 15:25:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203458
IP address blocks:        2a05:1084::/32 maxlen: 32
                          2a05:1084:b00b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:22:db:57:05:f6:bb:02:9a:fd:22:6d:66:24:a2:29:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Sep  9 15:25:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89f2ee75b50d1ea9b83e4c756983ad22d65d52b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:59:88:22:1a:08:0a:2c:62:f1:c1:c2:8d:
                    c7:2a:ce:d9:56:82:ab:4b:51:d0:0f:a9:08:71:03:
                    8a:2d:93:6b:53:92:44:86:25:c9:f5:f3:64:00:6f:
                    59:dc:98:d4:61:1e:ba:00:56:bd:e7:ea:89:1f:56:
                    4c:be:4a:c1:c2:3b:9e:fd:4d:9d:9e:52:cf:7f:ae:
                    47:e1:8e:bd:af:b5:3c:77:7e:e9:76:f2:d9:8e:c4:
                    f1:d1:29:de:8a:ac:e1:d1:e0:83:f5:8e:67:d1:3b:
                    fb:86:3e:c8:4e:85:d3:2a:0b:4f:07:59:0e:24:96:
                    f9:29:52:4a:62:93:da:c9:95:9f:dd:ae:ec:cc:5e:
                    e4:32:8d:fa:e6:e3:2c:65:e0:d1:e9:53:00:5c:83:
                    32:2c:bb:19:99:0d:0f:16:85:80:b1:7f:80:ab:a0:
                    56:63:c5:e8:ff:8d:44:90:9c:a6:f3:b6:d0:75:dd:
                    2c:25:e1:11:8a:9f:56:0a:63:8d:f6:9e:ca:01:2c:
                    41:4c:0b:ba:d3:3a:20:7f:2c:cd:c0:ed:69:e7:e3:
                    14:c0:a2:cd:10:61:b5:28:f1:93:50:b4:0a:cc:79:
                    d2:9f:e3:3f:8a:13:d4:1c:5b:e9:06:6c:fc:4b:3d:
                    9f:9e:38:6f:1c:d0:38:38:81:33:5b:83:1d:e1:59:
                    0d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F2:EE:75:B5:0D:1E:A9:B8:3E:4C:75:69:83:AD:22:D6:5D:52:B2
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ifLudbUNHqm4Pkx1aYOtItZdUrI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1084::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:3e:f0:e3:db:d8:a3:42:92:35:6d:3b:13:13:b5:dc:7d:fe:
         cc:07:67:8a:5c:53:14:e1:79:05:84:87:a0:76:c9:5d:80:2f:
         4f:5b:73:c6:3a:38:66:26:ec:56:97:c0:e5:ae:1d:b6:bf:88:
         7a:b0:dc:8a:d6:a4:69:3f:ca:c9:c6:45:31:38:83:53:8d:1f:
         bb:99:32:02:a3:e5:39:9a:b1:e0:1b:75:88:e9:0e:39:ed:91:
         03:8d:fa:f6:d6:ea:79:63:d7:97:4b:c6:0e:e2:7b:10:1f:da:
         5e:5d:a1:d2:6a:6c:42:42:d5:ed:26:47:af:06:fa:2e:5f:87:
         6e:c1:ad:60:25:67:43:3d:c0:01:b1:14:3f:59:8f:48:ce:14:
         4e:5f:fd:b5:29:76:4d:c2:8e:f1:a0:8e:63:e9:05:59:ec:76:
         10:3b:27:8e:af:fc:77:53:76:45:5c:68:40:ea:6e:a6:b1:8b:
         54:f8:81:80:62:06:66:8e:ef:06:f6:eb:20:45:15:78:5d:6a:
         41:ba:4f:32:fa:83:e8:dd:c5:49:f4:ae:fe:f0:89:12:6d:91:
         51:6b:6b:69:60:f0:03:fc:68:62:38:8c:90:5f:37:e3:46:48:
         2f:33:ab:8d:0e:72:e1:b4:03:7c:ac:8b:68:fe:7e:ec:f7:0f:
         2b:b8:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----