Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/DJDNzf0w40F4Pn_hJ0ejQtSPmEg.roa
File:                     DJDNzf0w40F4Pn_hJ0ejQtSPmEg.roa (raw, json)
Hash identifier:          M/6GdAnJudXdMSUI+5KRAxZL1puKQeu/UM3HQHHImnY=
Subject key identifier:   0C:90:CD:CD:FD:30:E3:41:78:3E:7F:E1:27:47:A3:42:D4:8F:98:48
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       03F157EB
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/DJDNzf0w40F4Pn_hJ0ejQtSPmEg.roa
Signing time:             Sun 19 Jun 2022 21:17:35 +0000
ROA not before:           Sun 19 Jun 2022 21:17:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212271
IP address blocks:        2a05:4143::/32 maxlen: 48
                          2a05:4140:187::/48 maxlen: 48
                          2a05:4140:100::/40 maxlen: 48
                          2a05:4140:400::/40 maxlen: 48
                          2a05:4140:600::/40 maxlen: 40
                          2a05:4140:300::/40 maxlen: 40
                          2a05:4140:190::/48 maxlen: 48
                          2a05:4140:16::/48 maxlen: 48
                          2a05:4140:4::/48 maxlen: 48
                          2a05:4144::/32 maxlen: 32
                          2a05:4140:5::/48 maxlen: 48
                          2a05:4140:8::/48 maxlen: 48
                          2a05:4140:3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66148331 (0x3f157eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jun 19 21:17:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0c90cdcdfd30e341783e7fe12747a342d48f9848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:08:5a:74:da:81:1e:7c:c2:88:ba:f0:52:
                    72:60:ad:20:79:82:3f:21:99:00:fe:c6:8b:9c:00:
                    3d:22:3f:e8:3b:71:2d:4e:08:83:79:69:76:25:d3:
                    c8:c6:85:a4:e2:54:52:a6:83:b1:61:bd:f2:c1:f8:
                    0a:df:3a:94:6f:2b:fa:c7:9c:3f:8d:7b:7e:d8:83:
                    57:92:de:3d:c2:98:e4:0e:ef:c1:de:4f:17:8b:8d:
                    f3:55:bc:90:16:49:ba:ff:3d:67:26:c3:0d:25:19:
                    f0:51:39:36:3a:9e:63:9a:e4:95:38:74:bb:e6:d3:
                    b3:60:23:ef:62:1e:8b:5f:d3:36:08:03:69:87:69:
                    35:66:78:d7:6f:94:09:7a:2d:f9:82:0a:35:08:f7:
                    c8:0b:17:43:e3:98:0f:d4:c0:d0:30:5a:9e:0c:49:
                    51:63:21:d9:ff:ad:06:7e:24:65:18:40:ab:df:c1:
                    31:7d:3e:c2:59:6e:70:35:8a:58:e6:31:41:ed:a7:
                    a7:51:f4:41:0b:4b:e7:09:8a:48:9d:34:28:c8:85:
                    55:26:fe:cb:c8:f6:e3:8b:d9:d3:05:25:5f:bd:f8:
                    e3:6c:66:6d:1d:23:94:06:a3:4f:31:ad:d0:c2:2b:
                    9b:21:b2:a8:25:c2:6e:94:25:f6:37:41:48:62:f6:
                    87:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:90:CD:CD:FD:30:E3:41:78:3E:7F:E1:27:47:A3:42:D4:8F:98:48
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/DJDNzf0w40F4Pn_hJ0ejQtSPmEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:3::-2a05:4140:5:ffff:ffff:ffff:ffff:ffff
                  2a05:4140:8::/48
                  2a05:4140:16::/48
                  2a05:4140:100::/40
                  2a05:4140:300::-2a05:4140:4ff:ffff:ffff:ffff:ffff:ffff
                  2a05:4140:600::/40
                  2a05:4143::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4a:63:82:70:c4:c1:94:95:e7:30:0c:42:be:75:6b:70:0b:35:
         1d:d0:94:44:1f:03:0a:a0:c9:df:5c:0c:9a:6b:ab:50:9c:1f:
         7e:93:9c:86:10:4a:4e:e7:64:28:a0:2a:69:1e:1c:da:4b:9a:
         ba:e0:47:56:d6:91:b8:3e:73:6c:6e:54:02:99:e5:5e:ff:be:
         76:25:fd:95:06:d1:f0:d0:ad:42:cf:06:07:6e:af:48:fa:3e:
         e5:15:96:39:ef:6b:c3:9f:c4:15:bd:ee:14:ab:8c:b6:16:b2:
         7d:f2:78:3d:e2:48:e9:25:2f:73:90:72:45:14:9b:ea:a5:50:
         ce:30:1b:1e:75:90:72:4b:29:72:c7:3f:35:98:27:ce:ad:7c:
         21:9e:30:53:c7:1f:22:e4:c2:43:0a:8e:88:e3:31:05:83:c6:
         20:4a:cf:4d:e5:d1:b7:a4:16:e1:52:53:58:40:a6:84:34:ff:
         88:2d:32:48:ce:43:a1:ce:3e:06:63:26:d8:e0:24:38:df:03:
         e9:a8:e5:e2:37:a6:a2:aa:3e:0a:a4:af:08:be:b9:e4:65:be:
         b6:95:b4:3d:12:d7:ef:fa:26:77:31:99:97:47:d5:93:57:8e:
         a3:d0:b5:4a:c6:40:6b:0f:bf:3f:23:4b:5a:5d:bd:d4:f7:3f:
         ac:58:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----