Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0Bf7FJ3MP1kAlDB92mhF3FqxcJk.roa
File:                     0Bf7FJ3MP1kAlDB92mhF3FqxcJk.roa (raw, json)
Hash identifier:          DlR2jjj0tDLGnk7U0+l5yYnCUZsmubjZgDkKycBu6Ss=
Subject key identifier:   D0:17:FB:14:9D:CC:3F:59:00:94:30:7D:DA:68:45:DC:5A:B1:70:99
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       15609E63
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0Bf7FJ3MP1kAlDB92mhF3FqxcJk.roa
Signing time:             Wed 29 Jun 2022 16:54:03 +0000
ROA not before:           Wed 29 Jun 2022 16:54:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206271
IP address blocks:        2a0e:b107:1ac0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358653539 (0x15609e63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun 29 16:54:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d017fb149dcc3f590094307dda6845dc5ab17099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0e:27:b4:ee:50:40:ef:17:40:cc:0b:98:2b:
                    5f:09:15:57:9f:86:90:7d:ed:81:aa:bc:4d:b8:6b:
                    a8:0c:b3:10:49:72:59:29:92:77:b5:a7:28:d4:b1:
                    1d:96:01:c5:03:99:ad:ce:24:57:a5:62:4b:54:bd:
                    5c:bd:cf:29:6d:94:ed:4a:77:03:c3:14:83:d5:63:
                    57:72:d1:f7:81:ed:8a:1b:10:03:69:e0:2c:4c:7a:
                    2b:01:3f:6d:cc:d3:66:68:b6:a1:39:32:9c:42:30:
                    1a:25:5b:57:ce:9d:fd:26:d8:f6:e8:fe:d2:e8:16:
                    89:0d:e5:a3:b6:4c:b1:6b:5d:77:35:36:f4:90:82:
                    dc:d1:d3:06:93:f5:83:25:73:e3:42:3a:c5:5e:cb:
                    b7:12:3b:18:69:5c:8d:ca:3c:ad:89:a6:ef:b9:27:
                    6b:f0:e0:ce:20:6b:5f:eb:d8:47:b3:92:61:66:dd:
                    06:52:4e:7f:56:68:0a:d0:d6:fd:ca:8d:95:e8:0e:
                    92:65:b0:2f:a6:44:e1:47:93:fe:0c:97:c4:cb:a4:
                    9f:5b:3b:77:fd:26:3e:13:2c:b7:f6:c0:7b:37:61:
                    1b:03:44:0b:46:a9:9e:52:b7:8e:15:29:19:ec:b4:
                    c5:f3:41:67:34:71:ed:d4:28:a4:ea:30:f6:97:50:
                    5a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:17:FB:14:9D:CC:3F:59:00:94:30:7D:DA:68:45:DC:5A:B1:70:99
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0Bf7FJ3MP1kAlDB92mhF3FqxcJk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1ac0::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:ee:91:00:b5:e5:b2:4e:7a:bb:b4:ce:7a:02:12:cf:77:12:
         8d:6a:66:a9:4d:6d:6d:f5:ab:57:4f:5e:28:cb:ba:bc:8f:cb:
         f8:59:b6:c0:be:c8:eb:be:d7:27:73:01:6b:11:64:3c:50:34:
         bd:dd:92:6f:c6:98:95:10:cd:e9:e4:a1:22:f1:0b:4d:29:0d:
         9e:e5:f2:0c:78:6e:30:62:cc:02:55:40:7c:4f:64:11:7a:f0:
         8e:7e:23:80:1b:c6:27:92:34:58:2a:7c:6f:ce:ec:40:7b:66:
         a8:36:79:e8:4c:15:63:45:38:1c:25:5f:2b:30:84:3f:7c:59:
         e0:72:ad:3f:d3:4a:10:1a:75:61:16:f9:22:67:a5:d7:ea:c4:
         ea:92:b1:d8:8a:64:84:ad:93:30:be:3f:64:06:bc:7a:cc:36:
         9d:bb:d6:f8:f3:bc:62:62:13:9e:4e:75:41:79:e4:03:7b:ed:
         63:25:72:8e:26:bf:7b:fa:dd:af:e6:34:f5:91:33:99:b1:76:
         94:0b:73:14:5b:31:51:06:68:9b:17:24:a1:b3:5a:fd:bc:04:
         8e:76:db:c7:a4:fd:07:28:14:38:ea:12:56:3a:15:da:b6:5e:
         a1:2b:94:ac:9f:d4:a5:b1:a6:5f:fa:e3:76:ea:cf:60:60:80:
         86:86:3e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----