Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/q7EO8bQJmbCu23H_JBJfKHVt1QY.roa
File:                     q7EO8bQJmbCu23H_JBJfKHVt1QY.roa (raw, json)
Hash identifier:          lRwBpuBLyeU8iqXtgL+ahElF1cHOv2xDrO/1lPkGifA=
Subject key identifier:   AB:B1:0E:F1:B4:09:99:B0:AE:DB:71:FF:24:12:5F:28:75:6D:D5:06
Certificate issuer:       /CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
Certificate serial:       07A64F2B
Authority key identifier: CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/q7EO8bQJmbCu23H_JBJfKHVt1QY.roa
Signing time:             Sat 01 Jan 2022 12:06:08 +0000
ROA not before:           Sat 01 Jan 2022 12:06:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41954
IP address blocks:        2001:67c:25a0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128339755 (0x7a64f2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb4d8c41e122c881d936d91d5b02dbd86a2e70a5
        Validity
            Not Before: Jan  1 12:06:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=abb10ef1b40999b0aedb71ff24125f28756dd506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:51:f5:32:2a:80:2f:62:74:a8:a2:b3:0c:ee:
                    2f:b5:36:a7:a2:2c:f0:28:73:6d:28:75:08:e4:59:
                    db:bc:c1:20:d7:2e:a3:a1:10:3b:4f:b0:95:87:90:
                    d4:a8:df:ab:2b:d5:34:60:b3:79:43:61:24:2e:00:
                    09:40:39:be:a7:79:b0:00:35:e3:c8:52:46:51:1b:
                    a4:cf:b9:19:bb:94:45:30:8c:0f:27:c9:81:a2:79:
                    4b:f7:e1:29:93:d0:aa:78:93:6b:85:5a:78:c6:e5:
                    26:32:3c:b4:ec:68:6e:67:ea:eb:c2:5d:5c:9d:f1:
                    2a:90:2b:52:47:0a:11:8a:e6:b8:ff:2f:42:8b:63:
                    3a:f1:db:fa:d1:78:52:86:9b:95:ef:91:df:1a:ce:
                    9e:86:a6:6e:9a:43:cf:7c:70:a9:c6:6f:77:4a:fc:
                    ff:39:f9:51:f4:12:14:a9:f8:35:9d:0a:57:5f:d5:
                    f6:4e:09:bd:df:a3:26:ca:32:94:b7:ce:12:4a:2c:
                    8c:b7:30:71:e9:d0:ca:10:5e:54:32:40:84:7a:d9:
                    1b:24:94:85:ed:fc:b8:e7:2a:53:1f:b2:de:43:ee:
                    83:d1:e9:77:b8:ca:54:e5:42:ef:ef:60:0f:8b:8e:
                    c2:89:b7:8d:76:e4:13:68:02:25:c3:8b:ec:b9:5b:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B1:0E:F1:B4:09:99:B0:AE:DB:71:FF:24:12:5F:28:75:6D:D5:06
            X509v3 Authority Key Identifier:
                keyid:CB:4D:8C:41:E1:22:C8:81:D9:36:D9:1D:5B:02:DB:D8:6A:2E:70:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02MQeEiyIHZNtkdWwLb2GoucKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/q7EO8bQJmbCu23H_JBJfKHVt1QY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a9131c-82d2-41b7-9e20-13696197d3b6/1/y02MQeEiyIHZNtkdWwLb2GoucKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:25a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:fd:fa:3d:fc:3e:a2:41:36:24:d4:04:1f:2a:62:f9:4e:80:
         45:f4:6a:b4:7c:62:23:ff:79:87:54:85:9a:e6:30:29:03:5b:
         f8:16:da:0e:35:d7:bc:7e:5b:0c:10:14:e5:e2:27:f6:9d:b4:
         a3:fe:78:9c:ef:a9:46:71:9f:96:d8:90:42:d3:e5:f4:ad:a9:
         12:0f:17:5a:98:32:57:1b:e9:98:8f:3a:83:94:82:99:82:79:
         61:bc:64:5f:3f:04:7f:25:db:61:d1:0e:04:12:32:4f:f5:2e:
         f0:1d:e5:76:bc:ac:c6:b2:ef:f5:47:7b:f6:3c:02:90:b7:ea:
         98:d0:ce:ed:a7:47:1f:66:34:01:c2:6c:82:91:e1:ef:cd:cd:
         69:38:ba:ca:4d:7e:fc:91:81:c2:53:78:f6:dc:07:e6:2b:0c:
         79:46:7d:12:7d:3f:09:f8:96:47:26:db:af:c9:cb:3a:6b:df:
         bd:a8:f9:8b:d4:cf:65:1e:63:07:81:89:c7:ec:a7:22:1b:f0:
         77:80:39:ae:12:1b:05:f5:4e:16:db:a9:31:dc:c7:06:2d:33:
         72:94:ed:c2:97:23:18:18:49:22:b6:83:6a:60:59:77:1d:5b:
         8f:cc:fb:cc:0b:94:53:6b:4a:45:ae:21:46:8a:ac:5c:41:dc:
         8a:e7:e0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----