Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6kz-D5vZNZgBCYri9cVvTovuxgo.roa
File:                     6kz-D5vZNZgBCYri9cVvTovuxgo.roa (raw, json)
Hash identifier:          vdBuxu2h7/H6fbvFkg+Kt4nknmI7NF518e/ZqM2sd0A=
Subject key identifier:   EA:4C:FE:0F:9B:D9:35:98:01:09:8A:E2:F5:C5:6F:4E:8B:EE:C6:0A
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       13E5C1ED
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6kz-D5vZNZgBCYri9cVvTovuxgo.roa
Signing time:             Wed 20 Apr 2022 15:49:48 +0000
ROA not before:           Wed 20 Apr 2022 15:49:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207556
IP address blocks:        2a0e:b100:106::/48 maxlen: 48
                          2a0e:b100:101::/48 maxlen: 48
                          2a0e:b100:109::/48 maxlen: 48
                          2a0e:b100:104::/48 maxlen: 48
                          2a0e:b100:107::/48 maxlen: 48
                          2a0e:b100:102::/48 maxlen: 48
                          2a0e:b100:105::/48 maxlen: 48
                          2a0e:b100:100::/48 maxlen: 48
                          2a0e:b100:108::/48 maxlen: 48
                          2a0e:b100:110::/48 maxlen: 48
                          2a10:2f00:181::/48 maxlen: 48
                          2a0e:b100:103::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333824493 (0x13e5c1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 20 15:49:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea4cfe0f9bd9359801098ae2f5c56f4e8beec60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:59:8e:a7:62:c4:2c:55:1d:2a:dc:7f:88:31:
                    dc:63:38:1f:ba:8c:13:71:2a:6f:33:95:13:5f:7a:
                    03:69:5f:45:de:e0:12:db:6b:d1:50:f8:9c:2a:25:
                    ec:38:ce:5a:e2:f9:b3:b4:7f:70:24:35:8a:94:ad:
                    23:0c:04:71:19:ef:41:19:5d:53:85:1b:d4:1c:57:
                    04:2a:9b:f2:2e:cd:94:5f:7d:d4:d3:8f:4b:66:f5:
                    7d:fe:78:31:42:39:c5:50:29:77:c2:c4:10:44:2e:
                    91:36:c3:13:0f:51:47:8a:e1:d1:80:36:c9:16:09:
                    07:07:f5:9e:6a:62:60:c1:9d:83:03:19:c8:b6:c5:
                    c6:87:19:85:3a:82:cb:74:a4:ad:27:ec:27:a4:3f:
                    91:09:87:7d:2e:59:35:7e:8e:52:54:f1:6e:19:89:
                    90:80:cc:1a:8b:dd:f3:5b:30:f0:01:d9:58:33:8e:
                    b9:f0:51:1e:ce:8b:5f:a7:1d:c6:97:25:71:9d:0c:
                    75:c2:93:74:46:00:4d:8c:de:05:4d:e3:7f:ca:62:
                    99:49:13:12:6c:a8:95:4c:18:2e:6d:02:e8:09:a2:
                    1d:13:fa:37:d0:bc:11:4c:ae:19:00:c4:52:46:05:
                    31:cd:44:47:d8:be:b9:42:a5:25:1c:81:b7:a3:e9:
                    80:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4C:FE:0F:9B:D9:35:98:01:09:8A:E2:F5:C5:6F:4E:8B:EE:C6:0A
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6kz-D5vZNZgBCYri9cVvTovuxgo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b100:100::-2a0e:b100:109:ffff:ffff:ffff:ffff:ffff
                  2a0e:b100:110::/48
                  2a10:2f00:181::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:b9:62:13:c1:4b:6c:f2:25:ae:0f:1b:d2:c2:dc:f9:94:56:
         a2:77:a6:5e:a5:57:84:fa:a2:d4:7e:db:69:77:a0:a2:55:b5:
         b6:55:83:66:08:dd:34:c2:6d:8c:55:b3:4c:a5:e1:41:91:c4:
         ab:d3:21:dd:97:a3:69:f0:06:d0:84:41:2f:74:dd:81:40:2c:
         9f:17:0d:46:9c:6b:78:5b:78:a7:f9:ff:b6:c3:59:59:1d:35:
         ed:81:fd:1b:36:d6:ea:8b:5c:23:3e:64:39:c8:de:4a:e1:5f:
         26:20:eb:19:bd:20:9f:f6:92:1b:3c:0d:cb:89:97:87:a8:10:
         d4:c9:e7:78:02:78:5b:2d:59:d5:a2:91:c7:6f:ab:17:5c:3e:
         a5:35:bd:41:ac:af:4f:a4:2f:af:e7:c7:53:9c:87:fb:14:a3:
         8c:60:e5:5a:1e:03:f1:b6:e4:20:09:1c:09:b9:9d:66:0c:44:
         cf:b3:15:f0:6d:66:b4:69:35:2e:c5:7c:62:63:53:a5:fe:7d:
         72:00:b8:bc:9f:cb:ed:5e:23:d4:9c:92:ee:39:58:57:cc:93:
         1e:4b:a5:76:95:8b:16:b8:45:0b:22:ec:72:94:5e:2d:b9:23:
         ed:33:91:65:58:89:e1:72:d2:c8:15:c8:fc:92:43:66:ef:85:
         f4:fc:fd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----