Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/JZy-macuNBb4_woU2JeYXABTyRA.roa
File:                     JZy-macuNBb4_woU2JeYXABTyRA.roa (raw, json)
Hash identifier:          ntZ/9Hd/SQ8SxGcObp0doQj64u83W4qmsGitSgl8UL4=
Subject key identifier:   25:9C:BE:99:A7:2E:34:16:F8:FF:0A:14:D8:97:98:5C:00:53:C9:10
Certificate issuer:       /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial:       0184817AEECC7DA8932ED822C1AC6A060065
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/JZy-macuNBb4_woU2JeYXABTyRA.roa
Signing time:             Wed 16 Nov 2022 17:27:08 +0000
ROA not before:           Wed 16 Nov 2022 17:27:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201377
IP address blocks:        2001:67c:ae4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:81:7a:ee:cc:7d:a8:93:2e:d8:22:c1:ac:6a:06:00:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
        Validity
            Not Before: Nov 16 17:27:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=259cbe99a72e3416f8ff0a14d897985c0053c910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:c5:fa:ea:b8:cf:13:e9:f1:ee:35:cc:e6:
                    cc:7a:09:2e:ed:88:45:db:2e:da:17:36:e3:9b:87:
                    dc:40:b2:41:41:aa:8e:8b:8f:f3:59:57:40:b9:98:
                    4b:11:7f:55:67:64:86:0c:79:b7:f3:50:bd:10:d4:
                    67:09:48:47:31:5d:2e:80:11:24:d4:48:81:d8:39:
                    a7:16:b6:0c:54:66:0b:eb:b8:42:93:01:06:26:4e:
                    85:4f:ce:39:ba:51:a9:3c:05:13:20:97:77:42:a6:
                    2a:d7:2c:b4:bf:ab:e9:28:56:19:be:f3:2f:1b:0e:
                    d8:bb:3d:57:4e:65:d7:77:8e:17:ab:d9:bd:e3:ab:
                    73:ae:d0:ff:60:1c:4c:51:c7:3d:4e:ee:f3:cf:98:
                    13:84:c1:47:36:c9:a9:8e:5d:24:77:d8:31:44:fd:
                    fe:b2:47:9a:b6:07:f2:f9:da:b1:9a:2f:bd:59:4a:
                    a3:a1:1a:4a:15:3c:2d:67:9c:cc:52:1e:94:64:e5:
                    88:e5:db:b1:f3:18:27:69:22:bf:48:86:33:84:c5:
                    d1:59:52:87:50:64:14:d9:87:50:74:37:44:d2:13:
                    37:98:f2:9a:ea:93:af:f6:cc:7c:b7:74:a7:f3:80:
                    36:4c:86:18:0d:9a:12:6f:68:0a:cb:ea:88:89:6d:
                    2a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9C:BE:99:A7:2E:34:16:F8:FF:0A:14:D8:97:98:5C:00:53:C9:10
            X509v3 Authority Key Identifier:
                keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/JZy-macuNBb4_woU2JeYXABTyRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:ae4::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:8d:74:90:35:00:7b:1f:d1:ac:1c:3e:ea:64:ef:31:17:cb:
         53:74:22:e1:8e:16:c6:22:c5:83:48:a5:67:9f:38:a0:c3:17:
         90:4e:dc:1a:4c:96:9f:01:fd:42:70:68:df:26:b3:21:ad:ba:
         ca:bc:7a:c4:c9:74:76:ed:16:36:9a:b8:bf:83:20:d3:f5:fa:
         47:47:5b:43:f8:2b:ff:9d:18:a1:8f:26:7c:50:91:64:61:cd:
         cd:bc:8b:b0:34:c1:91:2f:af:f8:97:fa:07:8a:46:47:48:ae:
         e7:1e:84:02:ba:bc:b1:d6:29:20:bc:8c:ef:64:35:65:f5:c2:
         29:36:27:b2:18:5d:53:42:e8:ca:5f:bb:76:71:1c:53:e5:0e:
         50:54:07:6d:4e:19:39:f7:e6:e7:f4:cf:d1:aa:3e:02:a1:0f:
         a7:91:b0:84:80:73:67:86:de:72:15:07:3e:e0:92:03:61:33:
         1d:25:4f:69:74:ad:4c:76:87:51:4f:30:f1:de:14:03:5e:0f:
         40:12:d3:e2:a4:56:e5:7b:39:75:34:35:87:8b:98:28:6a:60:
         e2:30:7c:49:42:8d:b7:25:17:5d:4c:2f:5b:cf:06:2d:9d:b1:
         e9:69:d7:12:d9:b4:7c:57:cb:63:8a:b7:b6:a7:1f:2d:90:94:
         4b:7a:50:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----