Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nla2bip6/QwaDzQeODI4gZ2iPezE9t2ol4B8.roa
File:                     QwaDzQeODI4gZ2iPezE9t2ol4B8.roa (raw, json)
Hash identifier:          dzcjWKsvONzt/769wZT+Jg8XX1GG3pWpMnldJkhkMVE=
Subject key identifier:   43:06:83:CD:07:8E:0C:8E:20:67:68:8F:7B:31:3D:B7:6A:25:E0:1F
Certificate issuer:       /CN=1794a7dfba28592d921de3c7902f6af662b7a2b9
Certificate serial:       03
Authority key identifier: 17:94:A7:DF:BA:28:59:2D:92:1D:E3:C7:90:2F:6A:F6:62:B7:A2:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5Sn37ooWS2SHePHkC9q9mK3ork.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/QwaDzQeODI4gZ2iPezE9t2ol4B8.roa
Signing time:             Sun 18 Dec 2022 16:07:07 +0000
ROA not before:           Sun 18 Dec 2022 16:07:07 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51088
IP address blocks:        2a13:2c00::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1794a7dfba28592d921de3c7902f6af662b7a2b9
        Validity
            Not Before: Dec 18 16:07:07 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=430683CD078E0C8E2067688F7B313DB76A25E01F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:10:9f:99:41:0d:bc:ee:a1:e2:ae:f7:c3:
                    bd:89:f0:98:89:c3:27:79:7a:68:c4:3e:01:56:56:
                    c1:8a:1b:5f:ad:e8:d1:e3:a9:7f:56:7e:05:53:9e:
                    68:9d:99:b3:bc:4a:93:69:16:75:fb:79:c2:59:43:
                    05:03:ac:26:e2:b1:d9:4d:15:dc:56:76:c8:bc:68:
                    d4:49:77:43:09:08:ec:27:1f:3e:19:1c:22:4b:b0:
                    a5:44:8b:30:73:5e:2a:ae:50:c0:b1:be:3a:70:78:
                    b9:37:53:f5:f9:5a:fa:dc:03:c2:88:ec:0c:22:62:
                    b6:ee:52:8d:8d:d4:0a:57:99:17:69:8b:df:bc:e7:
                    5b:a8:ed:ee:91:9c:aa:84:bc:8b:df:bd:11:5d:2b:
                    96:ae:b6:32:16:41:b4:a5:b3:c9:f8:dd:aa:ee:64:
                    a3:c3:a5:05:17:2f:02:7e:a0:85:7a:01:1b:8c:9b:
                    09:57:92:86:0b:61:5d:fc:59:8e:a7:b4:8d:ad:81:
                    29:f1:42:19:16:3a:6f:eb:db:b7:14:e0:6b:63:02:
                    60:d4:32:0e:15:5c:9e:a1:65:e5:bd:48:c1:9e:eb:
                    49:52:d5:ee:1b:cc:72:70:85:c6:04:24:13:6a:09:
                    77:a8:38:73:80:1a:3e:cc:18:11:fc:79:5b:81:fc:
                    90:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:06:83:CD:07:8E:0C:8E:20:67:68:8F:7B:31:3D:B7:6A:25:E0:1F
            X509v3 Authority Key Identifier:
                keyid:17:94:A7:DF:BA:28:59:2D:92:1D:E3:C7:90:2F:6A:F6:62:B7:A2:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/F5Sn37ooWS2SHePHkC9q9mK3ork.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5Sn37ooWS2SHePHkC9q9mK3ork.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nla2bip6/QwaDzQeODI4gZ2iPezE9t2ol4B8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:2c00::/29

    Signature Algorithm: sha256WithRSAEncryption
         d3:1a:22:a7:92:75:7f:16:cf:ba:23:a2:b3:4d:ee:7e:0f:16:
         a7:48:ef:71:f6:f0:cd:d0:95:1a:20:af:e0:7f:3e:d9:0a:3a:
         f4:11:8e:a6:25:31:38:1f:a9:c0:17:92:ff:4f:c1:10:48:10:
         bf:d3:46:f6:69:c6:e9:5a:05:0b:7f:f0:67:68:73:b6:f4:df:
         2e:bc:5c:96:f4:d5:20:ed:f5:5e:c5:8f:da:1d:a5:e0:da:4c:
         a8:b5:29:ad:a7:4d:c4:72:35:cb:f6:15:03:47:27:b9:9b:f9:
         84:ff:26:f4:13:e5:57:db:06:46:6a:3e:12:d3:d7:ef:4e:0e:
         b4:a5:b6:ca:59:bd:ce:31:6e:50:c5:a8:b4:ce:b4:b0:8a:f0:
         c7:69:4c:8e:7c:23:9d:b2:7d:fa:47:51:89:52:0b:2d:72:0e:
         b4:ae:7a:fe:27:7e:dd:26:e7:92:17:bd:bc:6b:1e:ea:e3:12:
         fd:67:d1:74:8b:1e:08:66:39:32:12:ed:27:52:d6:db:c4:14:
         ae:0d:a2:cf:bd:26:91:bd:9a:ff:98:8b:b1:ac:40:15:f3:e9:
         a7:d8:0d:e8:a6:e6:32:dc:38:b8:4d:2c:e1:ff:63:c8:07:3f:
         22:d8:42:b6:37:f1:9b:53:51:22:2a:9e:08:a3:b1:c2:4e:8d:
         c7:9d:81:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----