Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/HJ-h4rCyX1s1qk-cnuWD_JlBGD0.roa
File:                     HJ-h4rCyX1s1qk-cnuWD_JlBGD0.roa (raw, json)
Hash identifier:          tCbAZNbI/QwSC3GNwB1ZtWHezTCL6/2XJpjfVZxaJQA=
Subject key identifier:   1C:9F:A1:E2:B0:B2:5F:5B:35:AA:4F:9C:9E:E5:83:FC:99:41:18:3D
Certificate issuer:       /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial:       01846528690FC4A2E65ED20005C906E16273
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/HJ-h4rCyX1s1qk-cnuWD_JlBGD0.roa
Signing time:             Fri 11 Nov 2022 05:27:37 +0000
ROA not before:           Fri 11 Nov 2022 05:27:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     134521
IP address blocks:        2a05:e580:ff00::/40 maxlen: 40
                          2a05:e580:fe00::/40 maxlen: 40
                          2a05:e580:fd00::/40 maxlen: 40
                          2a05:e580:fb00::/40 maxlen: 40
                          2a05:e580:fc00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:65:28:69:0f:c4:a2:e6:5e:d2:00:05:c9:06:e1:62:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
        Validity
            Not Before: Nov 11 05:27:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1c9fa1e2b0b25f5b35aa4f9c9ee583fc9941183d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:d2:89:8b:d7:09:b2:62:19:f6:39:a8:c8:
                    2e:b8:cf:7d:e7:ab:81:8f:4a:cf:07:97:25:82:86:
                    38:41:73:10:9b:ae:4c:39:64:5e:9f:03:81:7d:1c:
                    6b:91:f4:65:3d:78:a8:b6:a6:39:c5:30:19:87:ae:
                    43:a6:8c:90:e1:eb:68:8a:20:17:52:f1:53:70:6a:
                    98:1c:02:38:4a:25:58:4a:5d:b9:3f:be:c0:68:13:
                    02:a5:0c:49:89:7e:13:6a:b7:1b:c0:fe:8b:27:75:
                    54:c3:c6:6e:aa:f6:16:cb:e1:22:59:57:4c:f9:3e:
                    2c:94:6e:30:0e:85:bf:28:b1:9a:f2:bf:6c:10:b6:
                    86:c8:cc:a9:2e:88:80:5d:e3:6b:df:e8:45:4b:99:
                    d5:39:eb:41:70:ae:6f:9b:ce:93:1b:dc:27:cb:86:
                    ef:18:65:54:0f:32:c8:bf:c1:ea:60:29:e9:7c:2c:
                    f4:37:82:fb:a1:4c:f1:c2:fe:88:12:37:62:af:d1:
                    54:ad:35:33:f1:81:98:0c:51:31:7c:98:b9:45:f8:
                    ce:8f:81:b1:47:52:0c:fd:af:9e:56:0f:08:04:f7:
                    ef:16:23:b3:46:25:e8:44:51:26:37:f4:cb:fd:25:
                    cf:7f:c1:d6:a6:8f:df:4c:58:98:fb:22:ed:94:93:
                    86:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9F:A1:E2:B0:B2:5F:5B:35:AA:4F:9C:9E:E5:83:FC:99:41:18:3D
            X509v3 Authority Key Identifier:
                keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/HJ-h4rCyX1s1qk-cnuWD_JlBGD0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:e580:fb00::-2a05:e580:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         7d:b9:dc:f0:b9:6e:fd:d4:c8:eb:d8:ec:7e:37:e0:1a:c2:31:
         05:7d:d4:22:2f:19:e0:39:e1:01:bb:cd:41:28:6e:c3:48:5b:
         f4:09:5b:57:48:d6:35:b1:71:0e:cd:dd:e8:5e:c1:38:c4:ab:
         fa:f0:61:28:2a:2c:5a:ae:12:06:8c:2a:7a:6e:1f:a0:d7:ec:
         e9:23:7a:eb:ec:ee:d9:63:2d:b9:9f:66:6b:fd:ab:84:60:7f:
         b6:54:de:85:2c:d7:06:86:e4:e1:6a:d2:1a:c8:c6:c6:b6:a1:
         c9:43:a0:99:1f:6a:aa:91:05:e8:a4:9d:52:ae:f4:07:eb:8f:
         11:a5:25:86:f6:b0:eb:e2:96:74:01:b9:0f:1c:46:28:ca:dd:
         08:53:b1:74:d4:ae:78:fb:5f:f4:06:6e:ba:39:9c:7e:cf:c1:
         30:b6:60:15:69:12:da:e6:9b:25:17:c1:56:fb:37:63:3d:58:
         80:02:94:38:8b:ad:2c:d0:4b:26:21:c0:2c:57:f9:fd:fe:aa:
         ac:ea:73:7c:c7:da:19:81:d1:c1:be:5f:27:53:b3:6f:90:cf:
         61:2c:ba:6a:19:5d:56:36:c1:51:0a:68:04:ff:66:2a:e2:5e:
         64:81:ce:1e:fb:26:b7:b4:0c:4c:ec:51:f6:5e:cb:24:4f:03:
         d1:9a:ba:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----