Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AJqYTCuIS_63J74y6VqZ0DULaRk.roa
File:                     AJqYTCuIS_63J74y6VqZ0DULaRk.roa (raw, json)
Hash identifier:          BMIee2dLtdCOvQ4+2dSkO5tCZtGTk92vDYoyZNeYK3M=
Subject key identifier:   00:9A:98:4C:2B:88:4B:FE:B7:27:BE:32:E9:5A:99:D0:35:0B:69:19
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01827D0F675044035E29C0F06963B92EA92E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AJqYTCuIS_63J74y6VqZ0DULaRk.roa
Signing time:             Mon 08 Aug 2022 10:45:37 +0000
ROA not before:           Mon 08 Aug 2022 10:45:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58336
IP address blocks:        2a0e:97c0:550::/44 maxlen: 48
                          2a0e:b107:16b0::/44 maxlen: 48
                          2a10:cc44:100::/44 maxlen: 48
                          2a10:cc42:120::/44 maxlen: 48
                          2a10:cc42:130::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:7d:0f:67:50:44:03:5e:29:c0:f0:69:63:b9:2e:a9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  8 10:45:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=009a984c2b884bfeb727be32e95a99d0350b6919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:f3:fd:16:90:4e:46:97:a4:e6:ae:9d:18:
                    22:d0:e4:80:0b:f5:14:3a:34:84:a5:cd:fe:9d:2d:
                    fd:38:8a:9f:8e:a7:51:ff:3c:52:ca:8a:c4:03:05:
                    e4:3f:03:e2:18:76:ce:d6:fa:41:d0:2e:97:7d:52:
                    90:83:95:86:9d:cd:72:dd:d9:e9:30:59:c8:5c:da:
                    58:cb:6e:11:df:eb:33:4f:77:c8:54:f4:8b:45:be:
                    01:76:70:85:16:7b:2b:cf:1b:3a:68:43:18:e4:0a:
                    43:dc:85:8e:1e:34:c6:8e:a7:23:85:c6:97:f5:ed:
                    56:57:9b:51:81:c4:0a:d7:8e:48:3e:24:43:90:d6:
                    4d:3d:8a:d0:07:fd:b9:cb:f3:c7:d6:d7:cb:ff:c7:
                    9d:2d:7b:33:e1:7f:ea:b6:47:a3:01:cf:82:53:69:
                    f9:5a:44:46:20:12:4e:60:61:8d:99:77:b3:ce:9a:
                    a9:04:bf:0f:0d:0d:74:73:6a:41:33:d3:24:ca:16:
                    38:cd:fb:22:46:8b:cd:2d:37:28:a8:af:9b:f3:f9:
                    b8:8b:d7:67:2e:47:7e:68:af:d6:dc:fc:f7:6e:c7:
                    5d:98:a4:ab:40:f5:23:12:bc:10:14:a6:2d:d8:78:
                    32:b7:02:47:dd:a7:3a:8a:bd:23:d0:b3:e9:e2:21:
                    1c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9A:98:4C:2B:88:4B:FE:B7:27:BE:32:E9:5A:99:D0:35:0B:69:19
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AJqYTCuIS_63J74y6VqZ0DULaRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:550::/44
                  2a0e:b107:16b0::/44
                  2a10:cc42:120::/43
                  2a10:cc44:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         b2:28:c0:9a:bd:1d:ea:90:8d:2f:ff:c8:67:4c:10:74:fa:90:
         b6:59:65:43:2e:5d:61:7f:4e:99:ff:2f:6f:20:99:a6:dc:1b:
         ba:b1:dc:10:db:75:46:64:ba:af:be:45:d6:2d:d1:b5:65:6c:
         e2:49:a7:4a:76:77:f1:79:1c:58:ed:93:de:b9:75:b0:48:83:
         d2:73:91:7f:b7:a7:68:99:66:39:8a:be:d9:62:0c:eb:fd:b3:
         b1:00:d3:a2:63:f5:a3:b3:c9:fd:27:fb:9e:1f:67:4d:bc:95:
         5a:cb:71:c5:3f:2f:df:07:a2:ed:d0:ea:ba:e7:02:e6:9f:df:
         98:32:17:4c:43:c0:cd:8d:fa:05:37:b1:6a:55:57:72:4b:62:
         59:79:3a:50:44:fd:d9:3a:32:49:0b:57:09:c2:54:9a:b3:3a:
         31:db:55:42:df:28:0b:a0:c3:35:ed:44:f0:fd:6e:9e:04:48:
         de:7b:db:ca:52:32:2a:68:2b:30:60:68:d1:00:46:11:c6:f2:
         58:a9:48:b0:14:f2:32:36:66:19:80:aa:90:b8:68:d7:1a:ec:
         f9:d8:cc:2b:16:e2:5e:e1:d3:cc:0e:a3:40:1e:87:38:43:5f:
         67:0f:e9:57:fc:78:12:cd:91:40:0d:4c:72:16:90:1a:ac:75:
         38:c2:03:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----