Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VwbVhc_7dTPwN_3ZbP8eI3UMEuI.roa
File:                     VwbVhc_7dTPwN_3ZbP8eI3UMEuI.roa (raw, json)
Hash identifier:          yiSthKVK5Xo2sht8ICxgxtZdVl2eesV0cMX39PQdxmk=
Subject key identifier:   57:06:D5:85:CF:FB:75:33:F0:37:FD:D9:6C:FF:1E:23:75:0C:12:E2
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       093C5132
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VwbVhc_7dTPwN_3ZbP8eI3UMEuI.roa
Signing time:             Sat 01 Jan 2022 16:01:05 +0000
ROA not before:           Sat 01 Jan 2022 16:01:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213186
IP address blocks:        2a0b:b87:ffd2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154947890 (0x93c5132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 16:01:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5706d585cffb7533f037fdd96cff1e23750c12e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:34:c4:a9:57:9f:23:d0:17:11:a0:b5:33:
                    51:00:43:9e:13:3f:c8:1b:a6:0b:cf:2e:c7:d9:09:
                    2e:b4:51:3a:45:ac:10:37:63:ca:f9:50:13:7a:20:
                    e7:5f:30:8d:45:7f:31:2e:3f:6e:03:8f:2a:fe:c1:
                    62:97:8d:27:09:12:3c:7a:86:24:27:9f:05:50:39:
                    41:cf:cd:a9:14:90:2b:00:5a:86:31:b2:c6:48:4e:
                    5b:4d:67:80:1a:f7:94:9b:dc:1e:5e:71:a1:3a:14:
                    8b:a9:15:f7:a0:7d:f1:2b:05:13:a9:e0:de:6d:01:
                    8c:39:9e:52:59:26:8a:88:79:a8:4b:6b:ee:bf:06:
                    ee:dc:dd:e1:af:6f:2f:16:22:df:00:f7:5d:37:78:
                    c8:74:5f:a5:eb:89:b2:f7:12:64:f6:ce:5a:db:a5:
                    8d:bc:37:92:34:94:a5:2f:56:6b:fb:86:93:70:88:
                    19:08:43:6f:da:61:d8:a7:f7:a2:ec:0f:9d:2c:2d:
                    7d:fd:42:8e:76:80:70:4d:42:bf:4c:5b:ab:73:3c:
                    ca:3d:6c:72:be:e7:73:b0:ef:84:17:53:11:a8:0d:
                    f5:7c:21:01:7a:27:4e:17:02:f9:44:f3:7d:59:5c:
                    b9:8f:89:9b:43:ba:cd:fd:01:10:b8:8b:37:ba:a9:
                    1c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:06:D5:85:CF:FB:75:33:F0:37:FD:D9:6C:FF:1E:23:75:0C:12:E2
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/VwbVhc_7dTPwN_3ZbP8eI3UMEuI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:b87:ffd2::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:35:6a:bc:35:bd:70:d0:fc:27:3d:21:44:38:31:be:5e:07:
         a0:64:3f:d5:21:ae:6e:c1:d8:cc:2e:06:2e:a1:8b:82:d4:0a:
         dd:e8:80:df:56:4a:8a:f6:3d:78:03:c3:7b:a4:23:47:8f:0a:
         09:57:17:1d:53:93:58:a3:06:28:bc:32:af:a9:79:66:6e:95:
         79:66:64:04:c3:b2:72:e7:be:ad:10:b6:8e:40:42:e2:1b:9b:
         75:3b:6f:b1:d7:92:b6:13:3c:d4:65:89:7b:a2:b2:22:08:9e:
         ac:e4:00:67:14:24:f6:ca:f9:44:dd:bb:ba:28:7d:f8:20:08:
         9e:9e:6d:68:9e:d1:d3:c0:9f:24:1a:3a:f6:26:80:86:60:22:
         7d:10:a4:48:af:f3:48:f0:1b:14:b5:f1:fb:d2:5f:dd:55:6e:
         eb:59:f7:44:d1:1b:17:3d:48:f1:63:70:3e:5e:e5:f9:07:5d:
         8d:db:10:d1:31:1c:5d:33:8a:82:5a:91:83:f9:55:08:c2:ee:
         e2:52:50:b0:65:98:dd:21:08:72:c3:31:ce:14:88:f2:13:d3:
         d1:e9:e1:1a:17:4b:bf:f6:bd:63:23:cf:5e:f7:d6:d0:09:75:
         86:c7:71:62:88:a0:ed:81:f3:4a:bd:15:a6:24:97:0b:42:8a:
         e8:fd:dd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----