Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/nOQWgYl7vcJPXlcLTAo7YqelIeI.roa
File:                     nOQWgYl7vcJPXlcLTAo7YqelIeI.roa (raw, json)
Hash identifier:          xZESylXz+jQUHhOcT9ymP0CpmhaqUziJXO3tMslxfsc=
Subject key identifier:   9C:E4:16:81:89:7B:BD:C2:4F:5E:57:0B:4C:0A:3B:62:A7:A5:21:E2
Certificate issuer:       /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial:       043EB8CA
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/nOQWgYl7vcJPXlcLTAo7YqelIeI.roa
Signing time:             Sat 01 Jan 2022 13:01:35 +0000
ROA not before:           Sat 01 Jan 2022 13:01:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     781
IP address blocks:        2a0c:1100::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71219402 (0x43eb8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
        Validity
            Not Before: Jan  1 13:01:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9ce41681897bbdc24f5e570b4c0a3b62a7a521e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:66:88:72:84:1c:c2:5a:4a:bf:5a:01:72:
                    7e:f1:85:69:fe:7a:64:02:0d:9b:a1:57:6b:90:a7:
                    ca:b4:3f:01:11:5e:07:26:5a:24:20:ea:26:bf:38:
                    a2:3f:64:2b:91:d9:a2:08:65:b1:76:d3:8e:1d:17:
                    f3:66:c6:b2:fa:05:c5:eb:d5:5b:66:43:e0:16:ed:
                    a4:b6:2a:71:4d:68:c5:7e:a4:12:8b:d4:ca:b1:8b:
                    4b:88:90:87:65:b2:44:f5:25:4b:6f:30:51:34:b6:
                    28:ac:0d:5c:00:7b:de:09:3e:d2:83:34:1a:3f:63:
                    ad:23:fd:ef:eb:c1:19:fd:bd:ad:13:c0:66:0b:14:
                    44:cd:9f:a6:bf:86:4a:ee:e4:8b:aa:06:06:d1:51:
                    8e:b0:0e:7c:3e:8e:6a:9a:79:7b:7d:97:75:64:7c:
                    88:5d:83:9f:2b:b7:51:9e:dd:b2:43:7b:0c:07:bd:
                    47:63:21:8f:c0:68:6e:0c:e1:d1:e6:b6:9f:d4:93:
                    39:41:bc:38:08:7f:08:39:7b:26:cb:73:59:29:bc:
                    77:87:f9:48:ed:78:db:25:6e:65:57:e8:3d:ae:06:
                    ff:a3:fa:da:99:55:53:9b:f4:56:76:3d:fd:73:c1:
                    e9:0a:9d:22:a8:ac:68:b3:86:c9:f0:00:40:14:15:
                    e8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E4:16:81:89:7B:BD:C2:4F:5E:57:0B:4C:0A:3B:62:A7:A5:21:E2
            X509v3 Authority Key Identifier:
                keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/nOQWgYl7vcJPXlcLTAo7YqelIeI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:1100::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:aa:bb:9e:07:a3:42:34:f4:be:d0:41:a4:ea:71:97:8c:36:
         28:0a:af:13:77:69:aa:83:3e:c5:28:bc:7a:13:31:d3:0e:a2:
         3f:1d:e7:b3:46:82:35:fb:e2:50:76:0f:21:6d:63:09:53:1b:
         e7:29:b1:27:e9:31:9f:28:41:a7:99:be:b5:a8:72:ef:15:46:
         9a:18:24:4a:4e:72:e1:f1:e2:ab:66:61:9e:66:85:ed:15:56:
         d4:34:be:6c:9a:15:50:3f:b8:71:8a:50:ab:8a:bd:fa:7a:1d:
         5f:e0:bf:9c:e8:0d:4a:8d:f7:28:36:8f:c4:be:42:55:d9:0f:
         bf:2d:e5:2b:41:9e:40:07:66:30:c9:83:e0:4a:5b:43:8b:0f:
         f7:73:d2:aa:9a:e7:30:60:d4:67:73:ba:68:de:68:dc:97:d2:
         8c:db:fd:e1:3d:0d:ef:8c:6f:dd:cf:8e:75:be:9d:ff:19:91:
         a7:d3:06:b7:a2:94:a3:b3:59:7d:82:1a:34:06:6e:b9:c4:c0:
         d3:df:53:0f:1d:0e:b8:37:af:a2:b2:22:fd:2e:26:6c:5b:3f:
         79:e6:f5:63:e7:e0:7e:4d:d8:23:53:a7:b1:4a:98:f5:b6:81:
         51:bd:14:d5:2b:ec:9f:35:94:05:b5:1c:9c:8c:e8:6f:72:91:
         b8:d5:7c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----