Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/5rCuGjF6fA-g1WQyPqi5UOibh2c.roa
File:                     5rCuGjF6fA-g1WQyPqi5UOibh2c.roa (raw, json)
Hash identifier:          73CDNyb/FuVgUwi53sAUZEujsIXWCaoU5GfaNoRYt3I=
Subject key identifier:   E6:B0:AE:1A:31:7A:7C:0F:A0:D5:64:32:3E:A8:B9:50:E8:9B:87:67
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       08CA7DFD
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/5rCuGjF6fA-g1WQyPqi5UOibh2c.roa
Signing time:             Sat 01 Jan 2022 14:02:05 +0000
ROA not before:           Sat 01 Jan 2022 14:02:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213031
IP address blocks:        2a0e:8f02:f004::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147488253 (0x8ca7dfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  1 14:02:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e6b0ae1a317a7c0fa0d564323ea8b950e89b8767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:ce:4b:50:51:d0:3d:95:dc:bb:f6:e7:85:
                    a0:cd:11:66:ec:17:ee:07:a8:4d:ff:2e:58:76:29:
                    3e:46:0e:b8:c4:a5:25:31:ab:95:b6:5c:fa:ff:9c:
                    68:48:8d:33:4f:03:ea:f3:12:c5:c4:dd:18:7c:68:
                    b9:21:c6:18:87:03:ad:05:ef:73:83:e5:1f:29:02:
                    67:c1:a1:c9:ff:de:48:64:de:4e:f6:ba:67:11:85:
                    ac:f4:f6:c3:31:27:48:84:25:c4:cf:22:26:ac:79:
                    86:ab:e4:1d:30:d1:b5:bf:10:49:ae:79:29:76:14:
                    2e:cf:87:ac:f6:01:e3:69:81:2b:53:37:ac:75:88:
                    68:1d:43:ce:82:a8:e3:5f:3e:0f:21:c6:8f:27:b2:
                    5c:72:e0:e9:dc:66:00:a1:b4:f5:69:6f:82:8f:d7:
                    bf:fa:9f:fe:7d:0c:64:fc:01:a2:81:53:6b:89:d0:
                    c6:7a:15:f4:ed:97:61:39:5a:a7:ad:6a:6a:ec:d6:
                    0a:5b:85:5b:a6:91:41:39:08:f1:cb:34:8b:52:f4:
                    96:da:32:8e:d1:31:e6:90:05:fd:80:4e:f3:89:92:
                    57:e0:6b:3d:b3:7a:40:63:dd:96:5f:e3:d6:04:95:
                    19:a2:78:fc:99:fe:a4:d2:35:41:02:66:9e:11:f9:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B0:AE:1A:31:7A:7C:0F:A0:D5:64:32:3E:A8:B9:50:E8:9B:87:67
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/5rCuGjF6fA-g1WQyPqi5UOibh2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:f004::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:46:ce:98:f2:9f:51:a2:ab:9c:72:da:f9:bb:fc:a8:6b:8b:
         65:85:a8:df:1d:26:9b:11:37:b3:45:2c:dc:d5:4c:db:11:37:
         2a:7b:c3:70:1a:a4:7a:62:e6:4e:af:0d:54:7a:1a:d0:99:aa:
         e7:de:f1:ee:57:4f:23:ed:c6:43:de:f5:dd:bf:1c:af:c3:67:
         a6:31:4a:a2:31:7d:2d:5b:32:be:88:67:2d:69:ad:57:2e:2f:
         1b:d5:13:f5:60:6d:8a:d4:fd:0b:c6:c2:fd:f8:11:f4:20:42:
         7b:e7:2c:d5:36:1d:02:ba:21:69:5c:ca:53:c5:04:b2:36:18:
         8d:ae:6e:72:ec:20:8a:cb:5e:d3:2a:99:ea:31:8c:9f:a7:cd:
         6a:47:2b:dd:6d:4d:55:1c:3f:38:58:14:54:cb:8b:25:2a:0e:
         a2:5c:41:91:cf:79:08:6b:66:f6:95:33:54:d0:8a:e1:0d:ed:
         10:f0:96:a6:4a:0b:45:cc:c6:64:80:56:18:3d:4c:3b:46:e0:
         44:1e:08:32:ad:e7:04:f6:5f:56:9a:ff:f8:76:20:29:a8:1c:
         92:b0:f0:94:de:78:84:66:4b:be:d1:58:2e:ba:37:0a:ff:02:
         9a:b5:ec:08:27:9d:ac:c7:ec:ba:5f:88:38:88:db:97:4b:b4:
         10:d4:63:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----