Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/dRkzQw3UtjldEiCy0NKDusxvRlM.roa
File:                     dRkzQw3UtjldEiCy0NKDusxvRlM.roa (raw, json)
Hash identifier:          hAt6rkb6e7p+2dGV22cGyFgO9cUjw08zyp7kgHhA8TY=
Subject key identifier:   75:19:33:43:0D:D4:B6:39:5D:12:20:B2:D0:D2:83:BA:CC:6F:46:53
Certificate issuer:       /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial:       08A9CE2A
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/dRkzQw3UtjldEiCy0NKDusxvRlM.roa
Signing time:             Sat 01 Jan 2022 14:01:44 +0000
ROA not before:           Sat 01 Jan 2022 14:01:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204446
IP address blocks:        2a0e:8f02:1000::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145346090 (0x8a9ce2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
        Validity
            Not Before: Jan  1 14:01:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=751933430dd4b6395d1220b2d0d283bacc6f4653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:29:e5:79:e3:70:63:df:ef:26:a5:1e:da:
                    b0:01:e9:e4:fe:af:62:b2:3e:af:f1:05:6c:b9:09:
                    e4:3a:e4:50:35:6f:84:93:51:86:76:bc:c7:44:6a:
                    fc:92:df:e3:d5:9a:f7:6e:82:18:c5:2d:ff:16:07:
                    df:e5:6d:54:a7:25:aa:3d:8c:4b:be:79:6d:f2:fa:
                    8b:22:ac:48:5c:6f:d7:f6:02:f0:4f:f9:3a:33:fd:
                    03:10:a5:ed:4c:70:a9:a9:77:c4:e2:41:6e:38:ca:
                    9e:8b:1a:d8:31:dd:ae:28:a8:d8:11:20:40:c7:d2:
                    4a:12:e3:f6:af:6e:96:9b:af:a9:32:44:5b:1a:51:
                    d3:f8:1c:a3:c5:00:77:f5:02:de:13:ac:fc:54:1b:
                    bf:2d:8b:86:aa:c9:71:cf:56:e8:25:fe:45:1e:3c:
                    55:bc:2c:3b:d5:92:c8:9a:2d:ad:80:93:73:de:ad:
                    92:70:ba:ee:be:85:67:9d:fe:e1:74:9a:6b:44:74:
                    ac:5c:91:2f:ba:69:ba:77:d9:79:40:a1:cf:70:cc:
                    0c:66:64:75:ab:3c:ee:40:61:31:93:a4:a4:aa:49:
                    56:a8:89:ba:1c:68:0c:9b:88:bb:16:13:ba:70:5d:
                    13:d8:c7:d5:bb:d7:f3:a8:39:00:b6:67:ab:8a:aa:
                    01:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:19:33:43:0D:D4:B6:39:5D:12:20:B2:D0:D2:83:BA:CC:6F:46:53
            X509v3 Authority Key Identifier:
                keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/dRkzQw3UtjldEiCy0NKDusxvRlM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:8f02:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:04:55:90:0f:3d:77:49:45:2b:c6:10:8e:f8:c2:ac:cd:74:
         1e:42:34:04:44:8b:5c:b2:c7:83:9a:f6:54:fd:a2:26:48:2b:
         ff:b4:35:51:a4:59:8e:07:70:57:a9:78:9d:e9:dc:98:8b:df:
         43:e5:76:47:20:9f:13:f8:52:19:a9:c7:80:f1:61:f9:2f:56:
         bc:75:98:c6:25:32:41:1a:69:41:d7:30:0c:56:fc:82:03:a7:
         11:a4:25:52:9b:df:ac:4e:15:e8:75:08:5c:3b:bf:9e:83:0e:
         a5:ac:76:66:0a:df:17:a9:11:6a:f3:57:6a:e5:98:ca:0d:84:
         46:06:df:13:78:b7:8a:b4:af:85:5a:dd:77:e3:c8:7b:6c:4a:
         6a:a8:97:c8:df:6b:6d:7b:b7:33:33:9b:fa:28:6a:55:e5:dd:
         2c:9d:a3:5f:ab:16:46:39:41:35:2d:c4:8a:b5:85:05:a4:bb:
         59:bf:1c:47:f0:56:f8:bd:fe:1d:82:a6:f8:bb:04:81:be:1f:
         58:7e:8a:ab:cf:4e:af:e2:1a:f2:ab:59:83:39:3f:90:da:4c:
         1e:ea:71:a8:6c:ca:27:1b:28:39:02:fc:96:47:e7:24:c4:59:
         ed:26:10:71:c8:0a:c8:23:4a:50:45:8b:8d:b9:30:dd:7c:ca:
         e1:1c:f8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----