Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/aJeyq1u0HBEl1kkzN0m8jWy-THw.roa
File:                     aJeyq1u0HBEl1kkzN0m8jWy-THw.roa (raw, json)
Hash identifier:          bnoAXyxWXoruBKH/S+emO1EqM6SwqGXg7XlZXrXxrMA=
Subject key identifier:   68:97:B2:AB:5B:B4:1C:11:25:D6:49:33:37:49:BC:8D:6C:BE:4C:7C
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       01D0EF86
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/aJeyq1u0HBEl1kkzN0m8jWy-THw.roa
Signing time:             Sun 13 Feb 2022 23:23:10 +0000
ROA not before:           Sun 13 Feb 2022 23:23:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211888
IP address blocks:        2a0c:b641:810::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30470022 (0x1d0ef86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Feb 13 23:23:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6897b2ab5bb41c1125d649333749bc8d6cbe4c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:f4:91:fe:c5:3c:22:85:d1:9d:ff:76:5c:
                    56:40:47:fa:6a:79:92:12:54:57:8d:86:01:08:cc:
                    a9:1f:6f:35:7a:29:f8:64:e5:10:90:89:db:3d:bb:
                    a7:e3:14:9e:3a:d4:f4:f5:19:71:46:6d:83:2e:ab:
                    ed:a5:02:00:b1:58:c3:22:07:a6:2c:02:0c:1b:6e:
                    76:7d:4b:d0:f0:a0:f6:b6:30:8f:97:c9:0e:60:5f:
                    a1:3d:06:4f:d8:aa:b6:a9:97:57:25:04:c6:23:be:
                    7a:32:55:7d:8e:05:29:cb:31:19:07:e9:18:f2:50:
                    95:11:37:57:99:df:00:27:c7:55:56:38:f2:98:d9:
                    1e:df:0b:1b:b7:2b:75:a8:31:e7:d9:d1:59:ac:5a:
                    1d:2e:a9:e9:4f:92:e6:41:79:3a:77:20:d1:6e:70:
                    e8:3a:37:0c:f8:23:eb:be:1c:75:24:ef:58:f7:23:
                    11:e4:88:10:b4:6e:66:9f:ae:88:35:2f:3d:75:08:
                    cd:7c:2a:50:0d:da:c7:58:60:44:79:92:78:1f:4a:
                    e4:d1:3c:6b:d0:84:2a:51:de:53:59:ec:38:5f:bf:
                    75:95:1f:1c:1f:0d:89:9d:09:4d:e8:50:b9:bd:d5:
                    dd:b0:f2:59:a0:c9:c4:38:91:8c:eb:51:53:44:91:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:97:B2:AB:5B:B4:1C:11:25:D6:49:33:37:49:BC:8D:6C:BE:4C:7C
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/aJeyq1u0HBEl1kkzN0m8jWy-THw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:810::/44

    Signature Algorithm: sha256WithRSAEncryption
         0e:bf:3d:29:58:a8:ae:12:40:9a:c0:66:f2:40:18:a1:db:21:
         c3:98:7e:51:b9:91:5d:b5:a6:96:aa:0f:77:d1:cd:cd:0b:f9:
         e5:15:9e:03:f4:28:66:ca:80:32:10:80:6a:df:b4:62:d4:46:
         fe:b2:54:ec:09:72:ad:44:62:c6:4f:f8:35:f4:4e:55:fc:c1:
         d4:d2:05:e1:c5:78:4c:7f:5c:c4:2a:db:a8:81:5c:b4:ef:f4:
         a4:fe:b7:60:13:bc:a8:af:7d:af:91:a3:21:ed:28:22:f6:85:
         3d:9b:91:ca:bb:8c:1e:89:80:a6:ea:b4:39:5f:b7:4d:a7:1b:
         b7:17:5f:5a:9c:64:bc:b6:ba:37:b7:ef:32:e5:0f:0f:4d:13:
         0b:9f:4d:c9:51:4e:21:fd:71:da:6f:ae:11:71:3b:d0:01:4f:
         81:79:9e:49:d2:14:db:9f:57:aa:c5:83:28:94:11:74:52:c4:
         2a:ee:2b:34:6e:79:4f:92:45:a2:da:70:08:21:22:6e:44:6f:
         31:7c:15:3d:d5:d2:fb:c9:44:00:2c:9a:9e:19:5d:60:91:b0:
         25:6f:01:cd:a4:f4:ca:f1:87:74:54:2a:84:92:fd:e3:5b:e5:
         92:7f:1c:bd:6f:70:4e:e2:f2:79:f5:24:96:e1:85:0f:43:25:
         1a:e3:cf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----