Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MXigwkyD1Qb97Irpm6tCtYe4azM.roa
File:                     MXigwkyD1Qb97Irpm6tCtYe4azM.roa (raw, json)
Hash identifier:          sYwWXCPdwdhBtuuXzS64erML3ztxRM+1VfQyg8nVD6w=
Subject key identifier:   31:78:A0:C2:4C:83:D5:06:FD:EC:8A:E9:9B:AB:42:B5:87:B8:6B:33
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       091A7429
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MXigwkyD1Qb97Irpm6tCtYe4azM.roa
Signing time:             Sat 01 Jan 2022 16:00:39 +0000
ROA not before:           Sat 01 Jan 2022 16:00:39 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204826
IP address blocks:        2a0b:b87:ffd4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152728617 (0x91a7429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 16:00:39 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3178a0c24c83d506fdec8ae99bab42b587b86b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c5:76:f6:d1:c2:c1:4a:cd:37:64:3d:91:97:
                    61:8e:0c:ab:ab:7d:18:6d:fe:56:14:a5:71:e5:95:
                    79:a5:c6:4f:73:c4:0b:71:8c:71:1e:d8:4e:78:68:
                    f6:2e:8e:e3:87:53:6d:89:0b:05:e6:6d:c2:58:db:
                    3e:6b:36:0d:29:13:6c:70:a6:0a:f7:0e:28:06:f1:
                    6a:a2:e5:e4:41:10:7d:9a:4a:08:a0:3e:1d:be:61:
                    12:81:37:70:ca:e0:04:43:b2:42:a5:b3:57:ec:eb:
                    b1:40:5c:1d:79:ba:bb:31:44:6d:eb:e4:9d:2a:62:
                    1b:85:00:82:69:75:d9:40:c2:df:52:40:a4:68:1f:
                    fa:b7:2e:7b:51:7a:bf:e5:49:23:a2:d9:15:8d:f7:
                    05:a7:cc:4a:54:8b:1f:bd:8f:26:8c:82:f2:b7:cc:
                    a2:75:42:6d:09:63:5f:d7:e4:93:96:d0:fe:4d:c7:
                    62:c1:c5:55:10:7d:61:24:0e:de:3f:e4:17:32:d1:
                    c3:77:fc:22:c4:5e:f9:1b:34:cc:46:95:24:27:68:
                    24:39:14:39:a4:50:2b:21:04:fb:65:2d:1b:ae:0e:
                    98:7b:60:03:21:dc:c8:65:f2:7d:91:28:7b:67:52:
                    93:5a:3a:ef:cd:d2:ea:98:34:37:55:d7:0a:fc:ef:
                    ec:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:78:A0:C2:4C:83:D5:06:FD:EC:8A:E9:9B:AB:42:B5:87:B8:6B:33
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/MXigwkyD1Qb97Irpm6tCtYe4azM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:b87:ffd4::/48

    Signature Algorithm: sha256WithRSAEncryption
         db:c6:b0:22:3f:b6:ea:b4:7e:be:aa:13:db:97:b9:a6:90:68:
         c8:bf:3e:77:85:9e:dc:28:41:85:8f:ed:6b:9f:e6:45:5b:bd:
         94:a7:12:8c:f5:58:70:72:8d:e4:b1:14:04:2c:23:43:cf:2b:
         b6:f7:b3:d3:a0:06:73:73:f4:8e:db:f1:3e:0d:d0:53:c2:ae:
         6c:f3:5d:49:ad:30:93:31:fe:cf:6d:89:99:ce:ca:5e:b8:25:
         43:08:00:3a:85:7c:67:d8:0a:c2:af:aa:ee:c2:61:70:55:06:
         ef:7e:35:cd:5a:68:e7:60:a4:1e:6c:c9:25:3f:c8:fa:c6:aa:
         c0:3f:10:ac:da:61:13:c9:68:fd:33:51:ae:5e:b6:cc:b0:e9:
         e7:8a:c7:d8:9a:a2:94:e7:cb:87:a4:3b:96:e8:66:b5:e7:db:
         86:da:a5:1d:15:f9:c9:79:10:1a:25:fc:d0:f1:eb:3e:b1:94:
         d3:7c:fe:05:80:b2:1c:dc:6f:e5:71:36:6c:35:42:45:eb:d7:
         9b:9e:b1:ed:00:d0:56:32:ac:59:17:07:98:71:c6:b6:65:50:
         da:52:45:fd:24:f0:6c:f3:10:ba:00:fa:e4:2d:05:64:0e:27:
         c2:40:99:55:b9:49:5c:83:4c:eb:5c:b3:9e:a3:89:af:f9:e8:
         9b:85:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----