Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/hXCb_2cfjNYvKndXwZRSjrkdBAo.roa
File:                     hXCb_2cfjNYvKndXwZRSjrkdBAo.roa (raw, json)
Hash identifier:          dEJsD6Zcp/tGacDImWNw37hXxnA4TNNECpaUuuMhvkU=
Subject key identifier:   85:70:9B:FF:67:1F:8C:D6:2F:2A:77:57:C1:94:52:8E:B9:1D:04:0A
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       090FDD83
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/hXCb_2cfjNYvKndXwZRSjrkdBAo.roa
Signing time:             Sat 01 Jan 2022 16:00:33 +0000
ROA not before:           Sat 01 Jan 2022 16:00:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60113
IP address blocks:        2a0b:b86::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152034691 (0x90fdd83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 16:00:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=85709bff671f8cd62f2a7757c194528eb91d040a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d2:d3:27:10:0c:e0:82:25:6d:02:31:73:62:
                    37:51:58:23:88:9e:c3:9b:55:6f:e8:00:bc:ca:83:
                    09:25:bb:e2:7f:57:85:f2:1d:26:57:8f:5d:36:59:
                    e0:18:c4:09:fc:cc:59:bf:c2:d0:6d:8f:9a:44:47:
                    41:52:4b:cb:68:c9:65:35:10:7d:70:01:4b:aa:8c:
                    6b:0b:c5:06:e4:a5:e0:73:f4:c6:c1:20:75:e7:4e:
                    0f:8c:28:6b:ec:7b:b0:9e:b9:31:ad:3d:0e:d8:34:
                    84:7c:e4:62:e8:bb:20:49:e6:88:3f:33:36:c9:df:
                    a0:17:51:71:73:64:f5:3c:b5:2b:6d:c4:a7:7c:b6:
                    d9:b0:29:89:af:68:97:79:6e:a6:33:3b:54:2d:b6:
                    ef:02:1a:8e:30:8c:04:15:d0:1f:a8:de:41:0f:a7:
                    37:2c:d7:04:33:d9:2d:4b:05:ce:33:75:c0:62:94:
                    8f:81:75:e6:a5:dd:08:58:1e:d7:82:97:93:ee:b4:
                    b4:1a:30:7b:05:d6:f9:5c:f4:e0:31:94:a9:66:bf:
                    df:29:43:a0:31:80:25:84:f0:36:63:ef:ae:b9:99:
                    23:66:4a:d5:53:12:04:5a:e4:bc:8f:4b:22:7b:33:
                    16:d2:a4:26:23:93:b8:4b:f7:f7:b8:f5:db:a7:c6:
                    17:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:70:9B:FF:67:1F:8C:D6:2F:2A:77:57:C1:94:52:8E:B9:1D:04:0A
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/hXCb_2cfjNYvKndXwZRSjrkdBAo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:b86::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:95:fe:ef:d3:14:ca:09:60:72:c6:91:7a:00:87:1b:4f:c2:
         7e:a7:e7:d3:8e:01:fd:f6:ea:79:da:25:a3:74:6e:0d:d8:97:
         2a:bc:68:dc:6b:72:da:58:9a:b3:91:8b:bd:1d:77:85:b2:2e:
         be:a4:71:11:d0:fa:d0:a3:5a:0f:8f:78:76:44:f6:ed:0e:85:
         8e:e3:00:d2:a7:3f:c5:c5:d5:ac:70:f4:e6:0b:65:15:b3:d1:
         f3:c2:f6:e0:f4:af:1b:2c:ee:aa:68:b0:47:36:19:58:3d:f7:
         c7:ba:7f:a9:29:c9:f1:85:f1:cd:c3:19:8f:12:af:f6:8f:4e:
         39:95:a5:1b:7c:2f:eb:a9:c3:79:24:2f:ac:f5:63:9b:0b:88:
         a7:30:09:b6:52:d6:45:72:20:50:2e:d4:d5:69:0a:6f:b6:40:
         37:b8:1c:2c:55:95:0e:ba:8c:4d:c4:b4:16:2d:f7:ca:ef:6b:
         e7:68:77:ab:1b:8c:8e:2f:2b:8a:7e:54:7d:60:8a:18:75:2d:
         94:42:9b:4f:5a:f9:a8:38:f9:f2:70:8c:a3:0f:64:f2:04:58:
         e0:3c:d2:22:53:7d:9f:68:18:c7:01:f7:66:b2:7c:13:a8:a9:
         a5:9a:25:49:16:f4:52:cb:20:13:fa:d6:8b:c3:42:75:8a:a5:
         8e:da:59:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----