Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/qXxcaxiJJZQL444VNKrw5Tz_Ieo.roa
File:                     qXxcaxiJJZQL444VNKrw5Tz_Ieo.roa (raw, json)
Hash identifier:          XKYGlzl/54kqKOZe1z5w57Xriu0BAs7l3c5ZR0tJzqE=
Subject key identifier:   A9:7C:5C:6B:18:89:25:94:0B:E3:8E:15:34:AA:F0:E5:3C:FF:21:EA
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       06B9F03C
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/qXxcaxiJJZQL444VNKrw5Tz_Ieo.roa
Signing time:             Tue 03 May 2022 08:38:29 +0000
ROA not before:           Tue 03 May 2022 08:38:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     147028
IP address blocks:        2a05:1083::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112848956 (0x6b9f03c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: May  3 08:38:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a97c5c6b188925940be38e1534aaf0e53cff21ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ec:c5:bc:b6:bf:4d:69:e4:86:ed:6a:b9:a1:
                    4b:1b:dc:c1:37:ec:de:f7:71:2d:6d:e1:ba:53:2f:
                    74:18:5b:a5:30:c2:8a:d0:72:85:eb:ac:75:db:07:
                    4b:0a:fc:ef:3c:2d:f5:08:ef:1c:b0:45:3c:dd:95:
                    5a:8a:50:83:27:98:83:07:ac:b2:d9:7e:6b:38:5b:
                    f4:22:d9:ff:0c:c8:73:1b:e6:2a:21:2e:70:35:a0:
                    50:99:77:2e:b1:8b:5f:e5:26:81:95:3d:8c:d6:48:
                    a1:a0:6c:11:51:97:8e:16:b9:97:47:c5:1e:56:f5:
                    93:46:f6:7f:0f:df:14:13:2b:d2:76:f6:89:0d:d1:
                    11:3c:14:2d:1f:9a:17:8d:9e:2b:1d:e7:2b:93:ea:
                    6f:f7:20:96:f3:b0:0d:e3:05:e8:a9:0f:76:7a:7a:
                    72:f6:11:05:d6:8f:74:a0:64:5f:27:c0:e8:1e:fb:
                    b1:d9:51:63:a0:16:47:4b:03:f0:ec:91:45:bf:3a:
                    af:2b:7f:67:7e:d4:09:05:2f:f6:0e:ae:9c:e0:81:
                    8f:90:49:d5:80:d4:c0:3f:62:6c:86:16:48:7d:cd:
                    16:6d:e2:dd:06:73:c2:1e:3b:10:77:cb:74:af:1e:
                    d5:f6:27:83:b6:87:83:aa:66:6d:ae:1e:b6:82:e3:
                    4e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7C:5C:6B:18:89:25:94:0B:E3:8E:15:34:AA:F0:E5:3C:FF:21:EA
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/qXxcaxiJJZQL444VNKrw5Tz_Ieo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:1083::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:93:71:d9:99:aa:4b:ff:4f:15:af:cf:ad:9e:58:d2:91:72:
         46:a8:ed:2c:cf:42:39:ab:ba:2b:fc:73:2c:0d:e7:f7:de:db:
         5b:3b:b3:c4:40:6e:ad:48:00:5b:ee:c3:96:02:04:cc:a1:2a:
         07:29:2d:66:a8:22:c2:90:73:51:7b:32:4a:34:f5:b5:ae:2c:
         e7:02:8e:52:51:04:67:77:89:b0:05:df:dd:9b:6f:1b:63:6a:
         38:df:d8:21:bb:66:03:08:c3:aa:62:d0:eb:86:75:a0:ac:55:
         7d:0c:57:51:02:4f:7a:54:3b:3c:b6:fe:a0:1a:b3:17:b9:fc:
         59:2d:3c:4d:37:d4:96:0e:52:e3:ee:9a:24:c5:d0:27:2d:50:
         b7:fc:87:16:13:02:e1:b6:8c:4c:f8:8b:ea:f9:7d:bf:87:6c:
         ae:17:8b:11:fb:5d:7f:15:ef:09:21:5b:a2:d9:20:15:55:83:
         4d:66:4d:7c:63:96:8e:0c:7f:b2:6a:01:56:5d:ca:38:82:c4:
         75:96:b5:e3:b9:63:5f:d7:63:04:a0:c0:50:c1:25:d4:73:c0:
         88:8b:39:c7:ee:74:de:e8:1a:87:6f:22:c3:aa:8f:6c:87:12:
         a9:df:0f:4c:44:3c:83:66:79:4f:95:43:66:92:84:b9:35:ec:
         3a:17:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----