Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/h3wpNFLTaxuZb6bHGy5xMr6ksa0.roa
File:                     h3wpNFLTaxuZb6bHGy5xMr6ksa0.roa (raw, json)
Hash identifier:          agJ95wUTKEUjV6bQKV8/F7w9bUbjpSyAQ4h67b86Tg8=
Subject key identifier:   87:7C:29:34:52:D3:6B:1B:99:6F:A6:C7:1B:2E:71:32:BE:A4:B1:AD
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       0939A773
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/h3wpNFLTaxuZb6bHGy5xMr6ksa0.roa
Signing time:             Sat 01 Jan 2022 16:01:01 +0000
ROA not before:           Sat 01 Jan 2022 16:01:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212701
IP address blocks:        2a0b:b87:ffd8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154773363 (0x939a773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 16:01:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=877c293452d36b1b996fa6c71b2e7132bea4b1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:ac:8a:a2:ea:cc:cd:2f:c4:73:fc:ac:f2:
                    7d:1d:e3:f6:01:8d:48:37:ee:66:36:0e:d1:c5:14:
                    6a:92:76:fe:d2:b5:da:08:91:90:11:19:eb:f4:0c:
                    35:04:f8:ed:57:1b:47:4a:7b:d7:67:6c:a3:bc:67:
                    a7:10:ce:1a:ef:09:ce:58:e9:62:2e:8b:9b:df:0b:
                    24:3c:8e:6b:55:11:42:ec:71:bd:e8:87:13:1e:9f:
                    59:5a:a3:d8:d7:21:76:2f:8e:4f:78:f2:56:94:35:
                    43:35:d8:bc:36:17:9a:f0:86:ad:8f:e0:32:31:be:
                    f5:fe:2d:8a:44:60:24:ff:7f:85:99:fd:17:37:75:
                    4b:46:f7:5d:c2:a5:79:ac:27:bf:fa:0a:57:2a:15:
                    07:f5:26:da:4e:72:a8:f9:26:17:4a:02:cb:34:8b:
                    c4:1c:87:6d:eb:0c:a2:d5:ca:a8:c7:9b:9d:6f:28:
                    d2:3a:d2:1c:a6:f3:ce:99:87:64:9f:25:09:09:ae:
                    80:90:36:e1:4e:b2:aa:6d:f4:63:28:9f:04:a5:cc:
                    2c:4b:20:a5:37:61:0e:df:1a:28:43:61:a5:f9:32:
                    9e:1b:16:e2:32:53:20:db:25:ae:c8:cc:16:a6:a8:
                    13:2c:51:ea:7f:7a:38:2b:6c:ae:af:cd:12:0b:ba:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7C:29:34:52:D3:6B:1B:99:6F:A6:C7:1B:2E:71:32:BE:A4:B1:AD
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/h3wpNFLTaxuZb6bHGy5xMr6ksa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:b87:ffd8::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:03:ad:87:72:1d:6f:50:00:5d:fa:a9:aa:55:df:38:b9:91:
         ac:d5:41:01:b3:b5:d4:2d:93:cc:69:d0:a3:98:86:24:c7:99:
         ce:3f:13:4c:93:5b:c1:b9:11:7b:4a:23:57:f3:56:24:59:39:
         f6:e4:e2:3e:e2:1a:65:bf:29:7b:46:39:34:dc:23:b9:f4:33:
         d3:1b:70:18:4d:52:66:98:e3:ab:29:66:5b:aa:aa:a6:26:b3:
         b6:3f:a2:58:9c:c6:0c:2f:8d:2b:53:29:ce:fd:fb:e6:d6:c1:
         5a:3f:7a:fc:b1:d5:14:11:64:c4:d4:5f:6e:8b:0a:41:41:25:
         0f:18:cf:9e:b7:2f:ef:a4:0d:e5:7d:a0:cd:9b:88:5d:28:21:
         93:d8:b6:13:21:55:15:5a:dd:7f:39:3f:9c:a3:09:fc:d0:ff:
         77:f2:e6:d6:32:cb:97:e2:a2:8f:74:04:ed:44:ab:2c:f9:3c:
         d4:88:3b:1d:f9:4b:26:68:0c:a2:bf:3f:63:f4:ed:8d:ad:2a:
         13:8a:38:b9:6f:f7:1b:ce:87:99:46:7d:26:06:f7:49:4b:03:
         54:6b:4e:57:ae:3e:ae:1b:34:ee:59:62:1d:92:ec:ce:8c:0b:
         de:a7:3f:32:06:2a:84:fe:6a:44:b0:6c:36:06:b0:1d:d6:78:
         db:02:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----