Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/L8yVbzvD4QH5l0N1eERO7LPLm6Q.roa
File:                     L8yVbzvD4QH5l0N1eERO7LPLm6Q.roa (raw, json)
Hash identifier:          6D4cFi/QtlcDNA9+5QUYnB8ntLAOBREuqdad5WcJkBg=
Subject key identifier:   2F:CC:95:6F:3B:C3:E1:01:F9:97:43:75:78:44:4E:EC:B3:CB:9B:A4
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       038AF3A4
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/L8yVbzvD4QH5l0N1eERO7LPLm6Q.roa
Signing time:             Fri 06 May 2022 14:12:54 +0000
ROA not before:           Fri 06 May 2022 14:12:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212271
IP address blocks:        2a05:4140:4::/48 maxlen: 48
                          2a05:4143::/32 maxlen: 48
                          2a05:4144::/32 maxlen: 32
                          2a05:4140:100::/40 maxlen: 48
                          2a05:4140:400::/40 maxlen: 48
                          2a05:4140:600::/40 maxlen: 40
                          2a05:4140:300::/40 maxlen: 40
                          2a05:4140:3::/48 maxlen: 48
                          2a05:4140:16::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59437988 (0x38af3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: May  6 14:12:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2fcc956f3bc3e101f997437578444eecb3cb9ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:03:6f:7c:be:ff:90:bc:06:a6:aa:af:33:
                    34:d1:fd:a7:b9:19:c5:50:8e:1d:6a:86:b9:1d:f0:
                    d8:ab:67:f9:74:9f:c6:12:5a:87:a0:8e:23:31:eb:
                    3d:3a:97:cd:98:1e:53:aa:cc:3a:2b:77:61:b8:f8:
                    dc:48:6b:a5:a1:4d:55:e1:1d:51:de:1e:ce:58:86:
                    fd:de:d0:14:a5:fd:ea:9a:c0:e9:d7:5b:10:87:19:
                    17:07:90:f3:d4:e0:43:ac:79:a8:75:52:8b:16:f6:
                    d3:92:80:b8:2f:fb:16:dd:e4:db:eb:13:bf:5e:f7:
                    c5:95:34:1a:02:ad:3e:09:28:7d:de:10:c5:6a:86:
                    d3:11:53:bf:34:7e:29:19:a7:24:15:1e:25:2b:b7:
                    9e:0f:04:95:50:cc:da:74:5f:90:b0:83:93:52:c9:
                    37:8d:05:b3:25:02:33:75:b1:ca:01:88:eb:59:71:
                    d5:e5:90:48:30:2d:0e:22:5f:34:07:ec:33:10:fb:
                    27:f9:4d:e8:3b:e2:79:b1:bc:65:37:10:00:e6:7b:
                    c0:36:44:2f:6b:32:05:5c:63:2c:36:55:22:f3:e2:
                    b7:1d:8b:4d:57:4d:f2:ae:1b:56:a2:ed:fc:86:33:
                    96:d3:f9:ee:82:c6:12:2a:4f:a3:8f:df:72:44:0c:
                    22:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CC:95:6F:3B:C3:E1:01:F9:97:43:75:78:44:4E:EC:B3:CB:9B:A4
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/L8yVbzvD4QH5l0N1eERO7LPLm6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:3::-2a05:4140:4:ffff:ffff:ffff:ffff:ffff
                  2a05:4140:16::/48
                  2a05:4140:100::/40
                  2a05:4140:300::-2a05:4140:4ff:ffff:ffff:ffff:ffff:ffff
                  2a05:4140:600::/40
                  2a05:4143::-2a05:4144:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         76:21:fe:59:2b:18:fc:7a:11:61:93:45:7d:aa:4b:84:c3:af:
         9a:44:a3:17:9e:45:54:01:ec:7b:6b:86:b6:0d:e5:74:8b:7f:
         ec:62:48:ef:b4:d5:17:4f:5e:f5:7f:b7:c6:97:9e:9b:ee:cf:
         6a:6f:a3:ee:59:7a:cc:5f:ae:ee:8b:5a:fe:f3:2f:99:9d:a0:
         d8:8b:f6:71:5c:90:bc:79:76:37:02:23:d6:87:7a:88:8e:c0:
         f4:d1:bb:58:d7:27:63:4c:30:77:aa:a4:a8:c3:87:2e:ad:ad:
         ec:4b:f9:b4:59:1d:38:b7:7b:07:1e:3f:3e:1f:93:b3:4a:eb:
         71:46:26:4d:ea:8e:5b:7e:ab:9b:3f:e3:fd:6d:6e:70:af:39:
         28:f1:2e:09:3e:26:eb:28:35:6e:7b:74:80:28:dc:ee:d8:7a:
         01:79:ec:30:79:44:a7:12:90:72:9d:da:33:b2:cd:ae:f1:0b:
         d2:91:76:14:3d:4d:80:ea:fc:06:f2:ad:a4:ff:a0:86:dc:68:
         28:98:0c:62:66:64:bf:2c:cb:09:11:4c:97:f7:33:75:bb:5a:
         e5:b5:51:53:5e:c9:f9:6f:2b:e9:e6:57:22:24:00:49:51:7b:
         fd:36:f6:7d:02:78:8f:64:8e:5d:cb:d5:7c:56:94:a6:ad:a3:
         c1:e1:33:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----