Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V7tAw5I-AS8mWR3oKZIyVQiKKn4.roa
File:                     V7tAw5I-AS8mWR3oKZIyVQiKKn4.roa (raw, json)
Hash identifier:          2M2K8NCqkMlfgusu6ixjSi5+bk80N2fzRUyl4dYT0GQ=
Subject key identifier:   57:BB:40:C3:92:3E:01:2F:26:59:1D:E8:29:92:32:55:08:8A:2A:7E
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       08F54B4F
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V7tAw5I-AS8mWR3oKZIyVQiKKn4.roa
Signing time:             Sat 01 Jan 2022 16:00:08 +0000
ROA not before:           Sat 01 Jan 2022 16:00:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        2a0b:b87:ffb0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150293327 (0x8f54b4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 16:00:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57bb40c3923e012f26591de829923255088a2a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:d6:24:33:f5:23:e5:59:62:ae:f7:7d:3a:
                    a4:2e:b1:66:2d:08:71:46:9c:ad:b4:99:a3:69:36:
                    6d:81:ae:5b:97:82:30:d1:3c:5d:02:46:90:94:17:
                    c3:41:e7:1f:d6:a0:db:a7:30:01:9e:fb:b7:21:d6:
                    ca:cc:b3:37:20:4c:c3:e7:00:a7:73:e1:db:d8:f9:
                    f3:51:a5:6a:d4:f8:08:56:0c:40:c8:0b:34:aa:23:
                    1d:b3:6a:d2:d4:ac:44:0d:64:d7:4e:b4:00:49:ee:
                    ba:11:a2:fd:2d:60:1f:b3:95:0c:0d:16:c7:a0:13:
                    99:6f:77:5b:27:f0:e1:63:47:41:31:fe:73:b6:fb:
                    b1:2b:03:6e:e5:c9:d3:aa:e8:9f:3d:56:8e:6d:c7:
                    fa:73:dd:03:e2:86:32:ee:2d:43:03:47:60:a6:37:
                    a3:6b:0e:da:df:f7:f3:66:7f:8f:cd:d6:b4:7d:c0:
                    54:de:1d:2b:66:0d:91:41:b2:75:c8:75:13:48:f5:
                    fe:19:fd:73:64:dd:65:65:53:35:82:0c:8c:7d:49:
                    86:c3:00:81:40:8a:62:de:10:3a:0d:4e:21:5a:91:
                    c2:60:69:27:2a:9e:ed:3c:69:95:2c:2b:38:6a:ef:
                    1c:d9:97:b6:8e:2d:2f:56:50:e6:e8:ee:49:d8:cb:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BB:40:C3:92:3E:01:2F:26:59:1D:E8:29:92:32:55:08:8A:2A:7E
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/V7tAw5I-AS8mWR3oKZIyVQiKKn4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:b87:ffb0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:81:14:c3:c8:3f:18:77:35:9e:40:3d:c4:13:ee:77:78:7f:
         1d:4a:a6:12:5b:21:52:82:c6:81:87:eb:2b:9c:1a:46:47:a9:
         2e:06:a2:f9:6a:8e:de:41:a5:bd:6b:d3:34:b2:ba:c7:55:86:
         36:6e:db:1e:4d:a5:46:6c:66:ac:05:8b:85:1c:0a:bc:aa:85:
         f8:d1:14:55:0d:62:20:af:5d:7a:a5:08:c9:a8:d3:d4:90:80:
         c4:0a:a2:de:82:66:f8:6d:ca:68:b5:11:3f:d4:c4:b6:62:e5:
         d8:e0:2d:fb:3e:f3:a1:3b:79:87:2d:e5:82:a2:44:2b:69:f2:
         0b:4d:a8:88:24:4f:7f:4f:7e:d9:eb:25:9a:38:bf:6c:54:4b:
         42:63:94:98:be:7a:97:94:70:ec:e3:31:57:87:23:32:72:a3:
         b3:55:9a:d8:ae:87:1e:68:64:88:f6:b7:0f:b1:0c:81:4d:aa:
         33:28:51:91:d1:ef:b3:05:6a:25:e6:49:e4:a8:f6:c9:4c:16:
         6a:d8:c0:b1:dc:ff:8b:27:fe:14:1d:d0:25:2d:8e:54:ab:89:
         cd:40:09:24:88:a3:9d:c5:f7:64:bf:6d:13:59:4f:03:67:8e:
         0c:05:e6:f5:57:ea:c9:98:9a:99:5b:e1:64:33:58:fe:a4:78:
         34:7d:20:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----