Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/BePQY3JxuXEz4auFTRfLzdq2hnk.roa
File:                     BePQY3JxuXEz4auFTRfLzdq2hnk.roa (raw, json)
Hash identifier:          3i6IhqyYlUaUlaODXBuBO+Fh1NH0NHlReDykJ+JtvQ8=
Subject key identifier:   05:E3:D0:63:72:71:B9:71:33:E1:AB:85:4D:17:CB:CD:DA:B6:86:79
Certificate issuer:       /CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
Certificate serial:       01329E
Authority key identifier: EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/BePQY3JxuXEz4auFTRfLzdq2hnk.roa
Signing time:             Mon 10 Jan 2022 14:31:59 +0000
ROA not before:           Mon 10 Jan 2022 14:31:59 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51679
IP address blocks:        2a12:c40::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78494 (0x1329e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea83e30f2d6fce75a666a2d0b636b46ec998a1cb
        Validity
            Not Before: Jan 10 14:31:59 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=05e3d0637271b97133e1ab854d17cbcddab68679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:d3:a3:29:39:01:99:a8:5a:f1:7a:d6:7a:
                    f3:91:3f:97:df:9f:e5:47:66:59:74:ff:87:00:03:
                    e9:5a:75:a6:ba:7b:f7:94:08:fa:e0:59:cf:9f:42:
                    5c:6a:d9:06:7d:47:15:1e:42:f6:87:cb:c6:b8:70:
                    be:3b:21:d0:fa:6d:c7:a6:93:1f:02:fe:e5:7c:eb:
                    02:2f:fd:fb:86:63:49:d3:18:cd:00:7a:cd:bb:ab:
                    9d:35:9a:0c:b8:47:41:82:b1:9e:2f:ac:7c:5b:bd:
                    89:84:24:69:40:c6:6c:26:c4:24:d9:10:b7:f0:16:
                    a1:29:f5:51:44:6b:33:f5:39:d3:86:8a:6d:ef:b0:
                    52:27:b6:08:f3:b2:78:94:79:c4:7a:d0:aa:94:09:
                    a5:4b:2b:10:39:ef:e3:27:39:bd:45:fa:1b:32:52:
                    32:8b:c1:d2:34:4c:85:07:f3:ab:46:45:88:83:ea:
                    31:c4:2c:8f:c3:a7:41:7c:09:0c:40:0e:d6:c3:4a:
                    b7:13:a0:a7:f4:68:27:6f:0b:eb:21:65:8b:e9:4f:
                    90:a4:3a:5e:7e:27:73:35:06:34:f0:7e:c1:b7:69:
                    0a:e0:e6:94:d7:63:b2:4c:61:d7:73:a1:6c:70:3f:
                    e7:71:49:c9:98:d6:87:27:e9:36:90:db:52:8d:de:
                    0c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E3:D0:63:72:71:B9:71:33:E1:AB:85:4D:17:CB:CD:DA:B6:86:79
            X509v3 Authority Key Identifier:
                keyid:EA:83:E3:0F:2D:6F:CE:75:A6:66:A2:D0:B6:36:B4:6E:C9:98:A1:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oPjDy1vznWmZqLQtja0bsmYocs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/BePQY3JxuXEz4auFTRfLzdq2hnk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c69c75-8391-4d93-b378-3fa15a33f429/1/6oPjDy1vznWmZqLQtja0bsmYocs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         4b:d7:a7:08:61:25:69:42:76:ba:40:e9:58:52:00:aa:90:83:
         78:ac:44:ec:f0:45:b5:9a:55:7f:77:ac:6e:c2:6e:4b:46:a8:
         4c:cb:ba:9e:42:e6:c0:64:d4:2c:92:f3:ce:da:c5:88:1c:81:
         ff:ea:cc:c6:ea:15:3f:6d:d2:84:ff:b5:8d:df:4e:be:87:ac:
         2f:95:5c:9c:42:75:f3:07:5b:29:84:76:0e:54:0f:45:b2:37:
         4f:ca:83:54:4f:2b:8c:a8:8b:7d:bd:4e:43:ba:f8:dc:d7:04:
         b7:fd:de:ea:72:d8:39:30:2a:94:9c:d0:a0:4e:6c:50:d7:56:
         06:16:06:59:5e:9a:1a:cc:94:58:a2:a0:8b:9f:0c:5f:90:1d:
         58:0a:79:a6:40:06:ad:11:b9:b1:dd:ab:54:0b:5f:50:1e:3e:
         d3:91:7e:d4:55:6d:20:c7:65:e7:4e:99:7e:ad:1a:25:cd:55:
         e7:74:73:60:21:a6:53:c6:90:a2:e6:ef:c6:4d:4a:bb:9b:32:
         da:0d:8f:bf:32:88:f6:22:b3:5e:f3:4e:5c:3b:20:0b:b7:68:
         f9:2a:c5:c8:af:12:bb:da:4c:3b:57:b7:62:37:95:f0:21:e4:
         29:ba:86:38:e0:38:e4:f4:05:11:b5:98:dc:60:ff:2f:87:b0:
         0f:46:00:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----