Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/feuWvJJ1zA_1qoj_9X4lbCCVZ94.roa
File:                     feuWvJJ1zA_1qoj_9X4lbCCVZ94.roa (raw, json)
Hash identifier:          w9cmE1wxeATgzLXAFTVnt2LuLsW9GxIao781vj0FYao=
Subject key identifier:   7D:EB:96:BC:92:75:CC:0F:F5:AA:88:FF:F5:7E:25:6C:20:95:67:DE
Certificate issuer:       /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial:       0183F2070DDE4D5E8AACC683C68252D16C3D
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/feuWvJJ1zA_1qoj_9X4lbCCVZ94.roa
Signing time:             Wed 19 Oct 2022 20:54:52 +0000
ROA not before:           Wed 19 Oct 2022 20:54:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62240
IP address blocks:        2a10:1fc0:7::/48 maxlen: 48
                          2a10:1fc0:a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f2:07:0d:de:4d:5e:8a:ac:c6:83:c6:82:52:d1:6c:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
        Validity
            Not Before: Oct 19 20:54:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7deb96bc9275cc0ff5aa88fff57e256c209567de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:93:d6:67:6e:00:ef:2c:91:fd:70:13:af:2e:
                    cf:74:3e:39:f8:1b:49:b4:df:38:f8:a8:37:24:9d:
                    c7:6f:cc:c8:71:3c:85:bf:1b:44:33:83:d2:53:48:
                    35:25:b9:e2:ce:b1:8a:10:4b:9a:e3:fa:09:45:53:
                    6c:d7:f4:ca:f9:75:23:ad:33:da:ec:95:ff:a7:38:
                    7c:84:56:c6:10:f0:f6:99:1f:a5:23:e5:c7:09:19:
                    5c:d5:a3:ab:14:ae:2d:b9:5f:ef:37:94:07:df:5e:
                    52:4f:bd:00:e2:d5:3c:bf:2b:06:41:d1:8c:17:63:
                    5b:ee:e6:bf:cd:d3:18:36:dc:e4:cd:6e:1c:0b:53:
                    5e:b2:0a:0d:e3:31:31:a7:f4:e3:e0:2b:74:ae:63:
                    f1:a9:69:bd:86:7a:19:67:55:51:2f:a2:5e:80:ef:
                    1b:3d:2b:5b:06:41:f3:bb:4e:21:ca:1d:f8:f3:e5:
                    04:03:a5:d0:68:27:bf:6b:fe:ff:cf:29:fe:f7:b5:
                    08:eb:9e:29:e6:f7:1b:98:9f:fb:f9:c0:ca:27:7c:
                    87:50:17:cc:0b:0e:05:73:be:12:d6:19:26:5b:db:
                    b3:2c:7f:6c:cd:42:32:d7:d3:26:46:7e:f6:61:05:
                    e5:93:07:f4:91:2c:5a:1d:ac:34:26:03:2f:f9:c4:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EB:96:BC:92:75:CC:0F:F5:AA:88:FF:F5:7E:25:6C:20:95:67:DE
            X509v3 Authority Key Identifier:
                keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/feuWvJJ1zA_1qoj_9X4lbCCVZ94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:1fc0:7::/48
                  2a10:1fc0:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:96:47:1d:52:00:bc:ff:74:0b:10:08:bd:4a:db:59:41:f3:
         e6:31:03:97:b3:da:c4:e4:b7:34:96:d5:0e:59:28:84:98:ff:
         48:6b:a3:dd:a7:03:d7:8f:ff:b1:02:04:54:c7:0c:8b:e4:a1:
         20:ee:27:20:1b:ae:da:2f:92:8d:10:13:1f:02:fb:6a:a8:13:
         6c:23:e3:d9:57:d0:59:90:ef:b6:47:b5:84:05:77:8d:03:88:
         f5:c5:12:69:d7:ea:2d:4d:4a:1b:e4:c8:3c:0a:d3:55:2a:4a:
         f4:ea:63:9c:3a:1a:5b:32:69:1d:89:b0:33:d4:c9:f5:4e:fe:
         5f:2f:01:9f:79:62:e5:56:e0:ac:f2:17:e2:1b:31:fa:a0:7d:
         c4:8b:24:e4:de:c1:c6:4f:82:7f:7f:17:b5:6d:ea:51:6c:95:
         f2:ff:b0:48:c1:e7:3e:c6:84:ca:43:2a:ef:e5:dd:79:4b:78:
         a7:58:40:91:b5:25:c0:4d:73:14:af:5c:6d:c0:48:e7:10:33:
         69:10:05:1d:17:93:01:b6:16:40:89:d2:db:9a:11:8a:04:82:
         84:55:1b:42:aa:33:9e:d2:42:f8:1f:ab:aa:71:c3:38:7d:ca:
         81:b6:cf:23:5b:5b:6e:eb:e4:a6:94:33:d2:f7:2e:ff:50:e8:
         1d:9f:79:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----