Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-cbv9O6z9jn9vALRjM9Xqf1d-GI.roa
File:                     1-cbv9O6z9jn9vALRjM9Xqf1d-GI.roa (raw, json)
Hash identifier:          fVJlPPnTLNCj6Q5/WghkwtA/m+gPkmapeHONhPT+kHE=
Subject key identifier:   F9:C6:EF:F4:EE:B3:F6:39:FD:BC:02:D1:8C:CF:57:A9:FD:5D:F8:62
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10D49C6D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-cbv9O6z9jn9vALRjM9Xqf1d-GI.roa
Signing time:             Sat 01 Jan 2022 09:05:40 +0000
ROA not before:           Sat 01 Jan 2022 09:05:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211977
IP address blocks:        2a0e:97c0:120::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282369133 (0x10d49c6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f9c6eff4eeb3f639fdbc02d18ccf57a9fd5df862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:f4:df:d3:a3:42:62:ec:12:61:ba:68:ff:
                    79:07:cc:7a:5c:35:2b:d0:df:0a:99:56:ec:80:71:
                    c3:50:91:89:89:b1:c1:c2:5c:8c:94:6a:61:97:e2:
                    63:a0:07:aa:98:b0:ea:5f:e3:0e:b2:52:2c:34:8e:
                    4d:1e:4e:d7:38:39:f1:44:fa:da:56:28:66:70:cb:
                    ec:c4:30:39:e7:17:b7:a0:bd:27:84:1d:fe:d0:ef:
                    0b:9e:0f:9a:57:e6:75:15:49:cc:2e:1a:ab:56:1d:
                    cc:fa:fc:81:81:9a:bb:70:96:b1:ee:e4:54:01:dc:
                    aa:4b:0c:f0:fd:10:cc:bb:1f:c1:06:8b:38:07:7e:
                    35:af:a8:4e:0d:63:af:77:fc:65:ef:ec:32:7c:0b:
                    cc:ec:74:0e:60:dd:0c:60:40:31:08:03:96:c6:e1:
                    62:f5:e0:75:7c:36:9f:06:a9:d2:12:0f:d1:ec:4a:
                    54:26:80:9c:de:88:12:d5:b8:7d:50:ad:c3:2a:89:
                    eb:12:a0:df:0e:9e:2a:a9:b8:49:64:f7:03:21:ae:
                    6b:4c:93:58:0d:b6:b9:fa:73:29:86:6c:08:81:a3:
                    c6:2d:cd:1d:6b:b4:e6:39:ca:e3:87:1a:c6:ef:8c:
                    6e:74:10:57:80:a4:3a:25:98:f3:34:a8:be:b3:55:
                    5c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C6:EF:F4:EE:B3:F6:39:FD:BC:02:D1:8C:CF:57:A9:FD:5D:F8:62
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-cbv9O6z9jn9vALRjM9Xqf1d-GI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:a1:1c:14:0c:a1:f7:b8:f8:85:5e:5e:65:d1:95:46:25:06:
         91:c6:1a:1d:7d:c9:94:d3:a3:db:d2:1f:7e:bb:e3:30:5b:fb:
         33:dd:64:47:0c:2b:39:34:d4:a3:58:92:c8:c1:74:92:99:88:
         28:38:12:4f:3b:c7:f1:a7:02:e4:f4:b7:77:34:52:a3:d0:f7:
         92:10:07:be:87:54:b8:b5:6f:87:e4:2b:13:07:45:e3:77:de:
         ba:19:75:ef:e2:c0:8e:8a:c4:4e:84:47:17:19:19:bf:94:9b:
         86:78:d7:8f:88:13:c1:3b:0f:ea:98:21:4e:2c:17:67:bf:4f:
         e5:4e:94:b2:29:4c:68:75:e2:dd:3b:48:08:1e:a8:2a:fe:1b:
         ba:87:69:a6:a8:23:a3:87:63:77:40:9f:57:ad:30:35:5e:2e:
         65:85:b8:96:dc:83:54:2d:c8:91:8e:6a:06:9a:8c:8d:35:42:
         29:5e:0b:4d:9c:70:df:61:31:aa:16:35:11:38:cd:34:f0:e3:
         67:a0:00:68:6c:20:9c:a8:1c:d1:49:d3:96:8a:3d:25:60:e8:
         78:bc:cc:e4:cb:62:e4:f4:57:65:4b:d9:cb:c5:ae:fd:8e:5c:
         fb:8b:70:02:19:49:82:8a:f9:f2:27:1f:d8:55:e9:e3:ad:99:
         74:ae:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----