Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/mHBycKxE8UZktFp_Sl-ns8NpZiM.roa
File:                     mHBycKxE8UZktFp_Sl-ns8NpZiM.roa (raw, json)
Hash identifier:          8xGq3w/+6oLCLYb+jTfJsbColuUzyaBLHovuFY2Hhc4=
Subject key identifier:   98:70:72:70:AC:44:F1:46:64:B4:5A:7F:4A:5F:A7:B3:C3:69:66:23
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       018458B1E27303A7088DB6014A1B427A6CA1
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/mHBycKxE8UZktFp_Sl-ns8NpZiM.roa
Signing time:             Tue 08 Nov 2022 19:22:43 +0000
ROA not before:           Tue 08 Nov 2022 19:22:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14315
IP address blocks:        2a05:4140:600::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:58:b1:e2:73:03:a7:08:8d:b6:01:4a:1b:42:7a:6c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Nov  8 19:22:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=98707270ac44f14664b45a7f4a5fa7b3c3696623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:61:68:b8:9d:ef:74:d3:e4:9c:f5:45:04:
                    23:76:76:09:36:95:88:0c:a3:2b:86:3e:75:9f:0d:
                    ef:bb:3d:c0:1e:39:84:9b:51:15:32:f8:08:e4:96:
                    ca:bb:7d:8a:90:35:8d:a4:72:95:20:d6:33:6c:a4:
                    4e:8e:42:5c:0a:b2:fb:5e:e6:a1:7f:4b:82:a2:45:
                    78:1b:4f:b0:50:8f:fd:72:e2:4e:66:21:ed:1e:cc:
                    88:f4:d6:b7:42:1d:64:d8:94:e8:f9:83:16:b6:ad:
                    32:37:fd:9f:59:f7:35:78:7b:bc:fd:c9:4f:8d:72:
                    c2:20:8e:6f:18:af:a0:8e:a1:bd:10:ce:af:37:ae:
                    0a:28:1f:60:31:00:e9:f0:94:c1:06:a6:6f:12:af:
                    ff:98:6f:05:4f:44:91:ce:51:3e:58:aa:f1:19:8f:
                    23:a3:c1:50:3f:98:d2:a0:eb:1f:18:9f:19:97:89:
                    42:f7:76:df:01:1c:59:1d:2e:cf:d2:d1:8f:42:03:
                    f0:d4:5e:7f:f4:22:15:3f:de:17:79:4f:93:39:5e:
                    2d:95:c0:6c:a7:01:08:b3:4d:a2:eb:45:6b:3c:b7:
                    e3:29:05:e5:e0:36:5a:52:fa:34:87:70:e8:71:5e:
                    3b:e3:5b:f7:bb:87:f9:a9:13:89:11:0f:55:b1:89:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:70:72:70:AC:44:F1:46:64:B4:5A:7F:4A:5F:A7:B3:C3:69:66:23
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/mHBycKxE8UZktFp_Sl-ns8NpZiM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:3b:38:dc:80:84:28:57:8b:79:5c:c2:e4:1c:f1:77:7b:a3:
         fc:f1:6d:0a:83:61:97:ee:83:02:d8:31:79:30:96:cf:c8:12:
         16:56:81:23:3a:8e:1a:10:eb:85:4d:bd:ad:68:6e:59:40:d4:
         05:bd:55:5f:fb:79:3f:cc:0f:59:38:55:a6:4e:ca:a0:18:0c:
         d6:fa:1e:ec:d8:fa:73:ef:4f:ec:b7:c7:df:f6:8f:f1:e2:28:
         15:4b:2d:c1:e8:ac:4f:04:36:6d:b1:74:a6:24:8d:18:82:94:
         3c:cd:56:5f:31:67:71:7e:4d:30:c3:d7:27:64:7c:30:0b:9e:
         b2:b5:f6:2c:6b:0c:9e:62:66:5d:bb:1a:b3:78:7a:cd:bf:e0:
         4c:6d:08:60:be:43:1a:b2:75:17:bb:04:1a:18:de:64:17:a2:
         dc:c0:22:a4:9d:76:a7:94:50:3d:3f:32:f5:09:cc:c7:06:bc:
         96:e0:d9:8f:37:f7:83:7c:3c:44:5a:f4:44:0e:d3:9e:dc:33:
         43:be:b7:d2:0d:c1:39:79:37:ef:d6:7b:70:55:a5:0c:44:a9:
         36:a7:78:a3:97:ac:27:92:8b:0d:52:57:6f:c1:0f:07:c4:7d:
         9d:7e:e8:f4:89:05:c2:d4:0f:82:2a:b5:e3:c4:db:77:42:db:
         83:d9:b9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----