Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/3qRXtN9RKt43b6DlIW4DPrAZQns.roa
File:                     3qRXtN9RKt43b6DlIW4DPrAZQns.roa (raw, json)
Hash identifier:          kNWXsYTqBZEZYusRCqWCcAc+rfK43Kbc/0vPjkPkGsA=
Subject key identifier:   DE:A4:57:B4:DF:51:2A:DE:37:6F:A0:E5:21:6E:03:3E:B0:19:42:7B
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       08AC71C3
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/3qRXtN9RKt43b6DlIW4DPrAZQns.roa
Signing time:             Sat 01 Jan 2022 14:01:45 +0000
ROA not before:           Sat 01 Jan 2022 14:01:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210707
IP address blocks:        2a0e:8f02:f03a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145519043 (0x8ac71c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  1 14:01:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=dea457b4df512ade376fa0e5216e033eb019427b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:3f:56:7b:85:df:06:67:72:70:39:c7:2f:
                    1b:15:47:18:60:58:16:f5:65:ec:85:1e:1b:51:10:
                    c8:40:fe:10:ce:2d:93:97:10:9a:b2:e0:cc:82:28:
                    97:01:65:87:4b:27:61:5c:35:f8:70:77:01:7e:8d:
                    84:a7:3d:21:54:62:2b:17:f0:ae:7c:f1:89:d3:5a:
                    47:56:d4:5b:1c:a6:63:7d:28:bb:76:d0:b4:7d:2c:
                    35:cb:84:72:a4:7f:94:cf:03:5c:b3:e9:c8:27:ba:
                    ba:56:09:5a:c3:c5:eb:28:74:f0:b2:1d:b8:7e:c5:
                    51:3d:25:7f:37:e0:62:57:9c:c7:88:24:7c:92:61:
                    cb:39:22:77:ac:48:89:c0:b4:a9:07:60:ac:66:20:
                    d5:f1:81:ba:35:81:dd:3e:ed:ae:e7:65:96:87:26:
                    4d:96:c0:8f:e0:b7:82:6e:a5:43:32:c0:72:ba:57:
                    fc:85:a0:1f:d5:fa:4d:22:bf:ae:0d:f2:ea:9a:59:
                    e5:76:61:be:d9:25:2d:86:52:70:0d:0b:98:ab:d9:
                    42:96:e0:93:60:fd:fa:5d:d0:97:15:63:9f:7a:8d:
                    70:ba:e1:17:da:98:37:58:b5:e9:c5:66:40:d5:be:
                    a5:e3:9f:52:d0:e5:96:a1:cf:8d:e9:07:c3:e3:4e:
                    cd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A4:57:B4:DF:51:2A:DE:37:6F:A0:E5:21:6E:03:3E:B0:19:42:7B
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/3qRXtN9RKt43b6DlIW4DPrAZQns.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f03a::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:d8:9f:99:ce:84:fc:88:20:8f:af:11:d0:8f:23:1c:90:f0:
         35:e6:9c:b0:06:fc:c0:9a:ff:37:0a:1c:cf:59:3c:73:80:a9:
         3d:65:f1:f7:2b:ab:a3:4c:57:19:54:26:94:dc:87:6e:d1:97:
         1a:f0:c1:74:32:4d:6c:02:8a:fa:e5:a5:bb:3d:0e:87:41:56:
         5d:bc:7b:ff:55:28:9e:3b:5e:0d:11:a9:b9:27:fe:58:65:90:
         69:35:c5:00:ab:e3:1f:42:44:e7:53:44:8a:75:c7:43:9a:03:
         5e:4f:2b:16:c0:67:2a:e9:76:c4:d3:c0:f3:a3:4b:97:c5:a5:
         04:d3:5d:3c:6c:5d:06:77:83:4b:8b:c1:76:27:ff:d6:90:34:
         8d:33:d7:51:5b:c8:9c:65:32:e8:a6:3b:72:8d:94:0a:91:db:
         f8:a8:c6:61:e7:8c:cf:49:9e:aa:a5:b1:86:1c:ea:a2:84:65:
         4b:e6:71:65:76:b4:01:c7:fb:04:43:4b:be:0e:e5:2d:5c:4f:
         36:5a:00:02:de:6b:33:ce:19:0c:e1:0f:b4:5b:68:3e:d3:79:
         5e:28:ca:6a:3c:e1:27:e2:e5:ec:85:04:27:0b:e5:c8:02:60:
         26:d6:30:f9:9e:8e:1a:9a:91:84:dc:80:44:6d:b4:0f:d5:38:
         c1:59:ec:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----