Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/sCeSWQAiJtozzO_8udRAvK2EAiU.roa
File:                     sCeSWQAiJtozzO_8udRAvK2EAiU.roa (raw, json)
Hash identifier:          D2unW50PQpzFMmRwp1ex4rZandjSorvCpv7s59D4yJY=
Subject key identifier:   B0:27:92:59:00:22:26:DA:33:CC:EF:FC:B9:D4:40:BC:AD:84:02:25
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       0705BAA2
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/sCeSWQAiJtozzO_8udRAvK2EAiU.roa
Signing time:             Wed 01 Jun 2022 15:48:22 +0000
ROA not before:           Wed 01 Jun 2022 15:48:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205092
IP address blocks:        2a0d:2682:8000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117815970 (0x705baa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: Jun  1 15:48:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b0279259002226da33cceffcb9d440bcad840225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:3e:fa:f1:24:af:e7:1c:3f:1f:c9:cf:65:
                    d2:8d:9e:e4:82:7e:5b:85:cb:d0:6b:36:ed:28:f9:
                    2d:d8:11:59:ce:21:a1:78:c5:a0:81:63:32:8f:8e:
                    6c:b9:e3:f0:d0:af:e4:9f:28:a9:94:2c:11:61:b9:
                    33:52:17:8c:60:4b:88:4f:83:05:bc:a5:17:07:d5:
                    8c:8f:e6:e2:5a:0d:6b:a2:ad:18:e4:39:7e:1c:a0:
                    0e:7d:3e:50:57:3c:41:2a:3f:0d:dd:eb:0d:37:e7:
                    d2:2e:43:e7:e6:44:5c:76:85:2a:f6:4b:82:8d:b4:
                    72:5c:01:cb:10:9f:bf:9a:59:31:4f:43:de:4f:2f:
                    88:bf:c9:8c:14:f6:1c:e8:a2:38:dd:6b:4c:b7:a2:
                    0a:ee:10:b5:64:36:7d:18:ae:12:c1:a1:ee:a9:25:
                    93:21:f3:29:e2:4d:30:44:9e:e2:0e:4a:41:e2:5f:
                    7f:12:33:99:e2:f1:ad:db:ae:d4:98:b3:e3:ac:b2:
                    e5:6b:84:0e:09:dc:f5:5a:4d:d8:9e:96:e3:5f:28:
                    95:e7:12:cf:f8:7f:b9:34:f2:f6:f0:93:0d:48:cf:
                    3e:ca:d0:53:d6:5b:91:46:b0:32:7c:96:b2:22:f1:
                    0e:9d:27:27:49:89:69:23:11:36:ff:62:85:2f:19:
                    40:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:27:92:59:00:22:26:DA:33:CC:EF:FC:B9:D4:40:BC:AD:84:02:25
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/sCeSWQAiJtozzO_8udRAvK2EAiU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:2682:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9f:7d:9f:98:e6:54:77:cf:13:3a:de:39:18:99:b6:7f:cf:b0:
         0f:cf:fd:3e:85:44:59:c1:d7:7d:9d:3d:cb:c7:b2:1e:a1:55:
         50:cf:81:a4:d9:a4:63:43:28:4f:d7:61:d2:ca:c8:f4:0d:7a:
         0d:98:c2:2c:3f:c6:98:5d:96:1f:66:1c:9d:4a:6a:f7:66:10:
         61:2f:6f:de:4c:ca:ed:3e:8c:06:52:e3:95:b7:6d:d8:6e:fa:
         c7:bc:cf:2c:5f:d5:2c:0b:d1:b5:5d:40:ff:75:4f:62:6d:a9:
         1f:db:d6:c1:cd:37:e1:00:0a:5d:dc:a7:8d:d5:f5:3d:4c:63:
         4c:65:d8:19:37:5a:74:a1:69:9b:f0:65:41:5c:d0:e6:38:55:
         a6:e7:ef:98:af:75:92:7e:89:3d:78:a5:35:f0:1f:8e:b2:3e:
         73:fc:76:0d:07:0a:dd:b2:95:63:4d:90:aa:f3:ec:86:ee:46:
         22:d2:fe:13:ed:98:f6:0f:98:18:9b:08:ba:2d:18:ea:42:3c:
         a8:a7:cc:21:21:c6:44:1e:98:d7:d2:5d:32:8b:0a:e2:2e:06:
         73:fc:4b:04:50:1d:09:72:a7:14:cc:9e:07:d6:43:a4:72:b0:
         e1:58:e9:c0:93:a1:2f:e5:39:28:d4:55:22:43:aa:52:52:4e:
         91:7e:ed:fc
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIEBwW6ojANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
M2M2OWQwNDU4MzUwMGM1ZWY4MTEzNjgzMTIzNzU5M2UwYmI4NmNlMB4XDTIyMDYw
MTE1NDgyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjAyNzkyNTkwMDIy
MjZkYTMzY2NlZmZjYjlkNDQwYmNhZDg0MDIyNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKVTPvrxJK/nHD8fyc9l0o2e5IJ+W4XL0Gs27Sj5LdgRWc4h
oXjFoIFjMo+ObLnj8NCv5J8oqZQsEWG5M1IXjGBLiE+DBbylFwfVjI/m4loNa6Kt
GOQ5fhygDn0+UFc8QSo/Dd3rDTfn0i5D5+ZEXHaFKvZLgo20clwByxCfv5pZMU9D
3k8viL/JjBT2HOiiON1rTLeiCu4QtWQ2fRiuEsGh7qklkyHzKeJNMESe4g5KQeJf
fxIzmeLxrduu1Jiz46yy5WuEDgnc9VpN2J6W418olecSz/h/uTTy9vCTDUjPPsrQ
U9ZbkUawMnyWsiLxDp0nJ0mJaSMRNv9ihS8ZQJ8CAwEAAaOCAgswggIHMB0GA1Ud
DgQWBBSwJ5JZACIm2jPM7/y51EC8rYQCJTAfBgNVHSMEGDAWgBRzxp0EWDUAxe+B
E2gxI3WT4LuGzjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2M4YWRCRmcxQU1YdmdSTm9NU04xay1DN2hzNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzgvNmY2Y2UyLWU2ZWUtNGUyYS05MDVkLWY5Y2IwYTdiMjA2Yy8x
L3NDZVNXUUFpSnRvenpPXzh1ZFJBdksyRUFpVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgv
NmY2Y2UyLWU2ZWUtNGUyYS05MDVkLWY5Y2IwYTdiMjA2Yy8xL2M4YWRCRmcxQU1Y
dmdSTm9NU04xay1DN2hzNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCoNJoKAMA0GCSqGSIb3DQEBCwUA
A4IBAQCffZ+Y5lR3zxM63jkYmbZ/z7APz/0+hURZwdd9nT3Lx7IeoVVQz4Gk2aRj
QyhP12HSysj0DXoNmMIsP8aYXZYfZhydSmr3ZhBhL2/eTMrtPowGUuOVt23YbvrH
vM8sX9UsC9G1XUD/dU9ibakf29bBzTfhAApd3KeN1fU9TGNMZdgZN1p0oWmb8GVB
XNDmOFWm5++Yr3WSfok9eKU18B+Osj5z/HYNBwrdspVjTZCq8+yG7kYi0v4T7Zj2
D5gYmwi6LRjqQjyop8whIcZEHpjX0l0yiwriLgZz/EsEUB0JcqcUzJ4H1kOkcrDh
WOnAk6Ev5Tko1FUiQ6pSUk6Rfu38
-----END CERTIFICATE-----