Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/n8YvOYYd0NBuxn0dkQ94KG5fYTM.roa
File:                     n8YvOYYd0NBuxn0dkQ94KG5fYTM.roa (raw, json)
Hash identifier:          3n8oepWTllF14ZHlU5pFoCVhcKkIXrKmJts8ko33Lks=
Subject key identifier:   9F:C6:2F:39:86:1D:D0:D0:6E:C6:7D:1D:91:0F:78:28:6E:5F:61:33
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       058A0BAD
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/n8YvOYYd0NBuxn0dkQ94KG5fYTM.roa
Signing time:             Sat 01 Jan 2022 05:01:23 +0000
ROA not before:           Sat 01 Jan 2022 05:01:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147031
IP address blocks:        2a05:1082:5::/48 maxlen: 48
                          2a05:1082:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92933037 (0x58a0bad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jan  1 05:01:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9fc62f39861dd0d06ec67d1d910f78286e5f6133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:e4:ee:32:ce:af:36:3c:59:da:ac:16:04:
                    9d:6b:35:00:16:4b:11:60:cb:5e:b6:97:e6:3d:d0:
                    97:70:c2:41:1e:82:12:3e:71:45:ab:78:03:b3:10:
                    9c:8f:75:bb:b6:07:b5:98:47:2b:b2:f3:b0:f3:f8:
                    d1:79:0f:3f:e3:e7:68:a9:99:2a:80:ca:bb:1e:3c:
                    0f:48:fd:15:e3:f0:a0:82:45:3b:1d:11:7a:90:dc:
                    7b:8e:d7:2a:f3:6f:6f:a1:1f:9d:8a:9e:7e:22:cf:
                    7c:c5:30:15:5b:d7:8e:4f:fb:9e:eb:51:55:7c:d6:
                    c7:d6:78:81:b5:10:28:0f:de:c8:b4:a4:c0:37:fb:
                    63:56:db:35:63:65:3e:a0:9f:66:47:29:0a:fe:3f:
                    b6:e9:4e:aa:7b:e1:05:71:51:68:9b:ae:55:a1:43:
                    7f:90:9b:fb:e2:e4:53:26:bb:59:ef:2a:00:c7:94:
                    9f:04:cc:2b:d2:f7:d1:ba:5a:59:df:b2:80:e5:99:
                    99:f9:76:1b:e3:df:2a:74:d6:05:a2:81:9e:2d:e2:
                    4d:2e:df:f4:dd:a0:64:80:33:0f:5a:fe:56:22:72:
                    12:b8:20:e9:d3:89:84:9d:f4:e7:f8:75:46:81:9e:
                    a6:1f:3f:c0:63:60:a7:86:bf:11:8d:57:bc:62:80:
                    cd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C6:2F:39:86:1D:D0:D0:6E:C6:7D:1D:91:0F:78:28:6E:5F:61:33
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/n8YvOYYd0NBuxn0dkQ94KG5fYTM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1082:1::/48
                  2a05:1082:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:1e:b2:2c:ea:c0:cd:ef:34:e0:9c:70:1d:cf:f3:9b:c3:50:
         f4:6f:db:c1:af:f4:46:7d:52:b4:5f:9b:6e:75:7c:81:8d:28:
         b0:54:59:6b:df:97:33:98:22:f6:35:8d:0b:fd:17:0d:fa:18:
         f7:27:13:3a:6d:82:c7:66:b7:4b:91:d0:bc:1c:34:d4:f2:b4:
         a6:10:ab:98:ec:71:b6:5d:2c:51:fd:4d:62:72:12:f6:96:9c:
         7c:b2:cf:25:1b:d4:89:29:f8:d4:1c:dd:0d:68:68:dc:97:2c:
         a3:2e:de:c6:95:17:dc:3d:67:03:d0:ff:12:cf:cc:be:9c:fc:
         7a:83:55:82:e3:6c:76:fb:85:d3:3e:b7:58:f7:b5:e5:fd:b9:
         e7:5f:66:36:05:50:b5:13:f2:4e:f9:3a:6b:3c:fe:69:e7:8d:
         bf:8b:7a:a1:3b:d2:96:39:d5:b3:13:f8:37:c8:0d:f5:01:d1:
         43:19:de:8c:45:7d:e4:64:b3:d1:34:0a:cc:dc:a6:70:c2:33:
         15:c4:86:4f:dc:53:bb:39:9d:7f:d3:7d:d3:1e:83:d1:7c:f5:
         ef:c8:ac:83:2b:a4:65:c7:00:ee:75:72:46:23:0c:4d:3b:83:
         5c:65:41:5b:a0:46:1f:5c:6f:8f:fa:7a:c7:1f:de:6b:4c:bc:
         56:03:07:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----