Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/wTWMNQUAXWJkNLLrki7tkYveh-Y.roa
File:                     wTWMNQUAXWJkNLLrki7tkYveh-Y.roa (raw, json)
Hash identifier:          dyf3Cqwgu4YBwbzQn9Ua7fZlxaPjyV+1waTX2s1+k4c=
Subject key identifier:   C1:35:8C:35:05:00:5D:62:64:34:B2:EB:92:2E:ED:91:8B:DE:87:E6
Certificate issuer:       /CN=650c592db1fdfc8b4e6a0e7ba7564686373a6b5f
Certificate serial:       0510561B
Authority key identifier: 65:0C:59:2D:B1:FD:FC:8B:4E:6A:0E:7B:A7:56:46:86:37:3A:6B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZQxZLbH9_ItOag57p1ZGhjc6a18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/wTWMNQUAXWJkNLLrki7tkYveh-Y.roa
Signing time:             Sat 01 Jan 2022 15:56:00 +0000
ROA not before:           Sat 01 Jan 2022 15:56:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        2a0a:d880:102::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84956699 (0x510561b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=650c592db1fdfc8b4e6a0e7ba7564686373a6b5f
        Validity
            Not Before: Jan  1 15:56:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c1358c3505005d626434b2eb922eed918bde87e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6e:46:e3:55:d1:f8:b4:5a:e4:62:3a:3c:77:
                    e4:7f:f4:57:4c:70:b2:ba:c3:ac:2a:c0:b1:e6:23:
                    73:b4:db:3b:cf:5a:07:51:f3:b8:68:19:3a:03:42:
                    ae:83:47:4c:8e:56:0a:1d:b3:bc:d9:a0:9d:fe:d9:
                    56:60:21:5e:86:f3:7e:27:fd:41:68:31:c6:35:f6:
                    b0:a3:70:78:4b:48:00:6f:70:e0:21:00:74:f7:63:
                    3c:6f:36:e1:7f:e5:85:94:c3:ac:c1:21:9a:40:6c:
                    27:30:e3:30:98:ef:0d:4d:9c:de:73:93:88:dc:67:
                    4b:d7:22:0b:93:77:d5:17:36:84:6c:d5:a6:3a:26:
                    95:1e:86:4e:14:61:bf:94:95:ec:87:ed:55:b6:a9:
                    1f:3f:4c:26:bc:de:4a:86:94:d2:51:71:16:3b:35:
                    57:96:ba:94:02:00:d7:5e:1c:66:36:29:78:fd:77:
                    96:f8:0d:d4:a1:0e:5a:cc:a1:13:81:f2:36:5c:fe:
                    bf:2f:59:62:ea:c0:5d:bf:54:dd:11:c8:50:fe:6e:
                    a6:b7:11:9c:5f:ec:9a:e5:92:77:f7:dc:10:8b:84:
                    f8:20:d8:f1:79:a7:3a:0b:65:d9:84:56:49:33:4f:
                    75:91:e4:f1:5d:c7:a2:18:8a:b2:d9:26:b4:9c:7c:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:35:8C:35:05:00:5D:62:64:34:B2:EB:92:2E:ED:91:8B:DE:87:E6
            X509v3 Authority Key Identifier:
                keyid:65:0C:59:2D:B1:FD:FC:8B:4E:6A:0E:7B:A7:56:46:86:37:3A:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQxZLbH9_ItOag57p1ZGhjc6a18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/wTWMNQUAXWJkNLLrki7tkYveh-Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1d1b8d-c67e-4e9d-b2d4-4fdff4d74c90/1/ZQxZLbH9_ItOag57p1ZGhjc6a18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:d880:102::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:89:88:4c:02:aa:04:33:09:1d:7b:75:72:8e:77:83:a9:7a:
         43:08:54:53:d9:73:f9:ab:df:ab:ba:b6:b8:4a:42:b2:f4:2f:
         bb:6f:34:8a:da:ce:36:7e:4a:f9:ce:bc:93:55:c9:1b:37:e7:
         6c:c6:4f:4d:e9:49:c5:b0:48:6d:10:2d:e6:e0:62:33:d7:11:
         40:bf:89:5c:c4:4d:e1:50:fb:1d:b9:b3:bd:3c:d3:02:38:3b:
         c2:13:40:f3:71:32:f4:c4:8a:70:9d:95:14:80:4f:9e:bc:85:
         e5:ab:18:97:e7:10:57:60:dc:80:5b:42:d9:92:38:fc:0f:2c:
         dd:e9:b1:e4:97:7c:2c:64:e1:33:f0:31:56:77:44:f5:9c:53:
         e2:13:e3:bc:c8:e1:ce:84:ee:88:e7:a4:ea:8d:96:38:98:c8:
         8d:4b:13:76:9b:44:ba:9e:20:1e:2e:80:b4:42:c0:65:38:e3:
         43:e4:48:d1:ff:e2:c5:90:af:fc:f4:83:9a:22:1c:ef:78:04:
         5b:3f:a9:f9:f2:b3:8e:f8:63:5b:b6:18:cf:a0:02:28:33:ec:
         45:a6:4b:e2:e9:45:26:bc:88:5a:9f:fa:c2:ac:a9:84:0e:2b:
         e7:c1:a0:24:c9:fa:6b:3e:44:94:f0:36:c6:f7:3a:e5:32:e3:
         dc:bc:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----