Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BXKvP-FSC6ZveQoW3aheudgjGGI.roa
File:                     BXKvP-FSC6ZveQoW3aheudgjGGI.roa (raw, json)
Hash identifier:          IxTau70vpjjJaNULnYX0hIVhfw15DzjWWKLzcJDnCgc=
Subject key identifier:   05:72:AF:3F:E1:52:0B:A6:6F:79:0A:16:DD:A8:5E:B9:D8:23:18:62
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       14B4245F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BXKvP-FSC6ZveQoW3aheudgjGGI.roa
Signing time:             Tue 17 May 2022 12:31:55 +0000
ROA not before:           Tue 17 May 2022 12:31:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205043
IP address blocks:        2a0e:97c0:b10::/48 maxlen: 48
                          2a0e:97c0:b13::/48 maxlen: 48
                          2a0e:97c0:b11::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347350111 (0x14b4245f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May 17 12:31:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0572af3fe1520ba66f790a16dda85eb9d8231862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:33:bb:21:0b:e5:15:11:b8:5e:9f:dc:7d:37:
                    2a:9e:78:95:7c:e8:08:ae:94:72:8b:8f:62:60:e3:
                    59:ce:1e:39:17:58:22:9d:74:e4:6f:cf:cc:c5:70:
                    02:e9:01:d1:76:e1:94:cb:70:ab:8c:78:8d:3f:03:
                    1d:f2:a9:4e:9b:a4:76:dd:92:c5:69:b1:a0:a5:8c:
                    25:57:a5:57:06:00:22:2e:74:10:c3:16:93:8b:29:
                    22:90:a9:08:dd:4f:de:84:db:7a:a9:c8:7e:81:56:
                    34:f8:a3:41:c3:14:a1:1a:f3:52:3b:24:17:0e:ab:
                    2e:10:ae:ee:7c:46:71:01:c1:cd:8e:66:bc:52:8e:
                    0b:1b:5e:33:94:59:c9:5e:08:ff:ce:73:02:f1:bc:
                    a1:bf:e1:27:a5:f2:c0:90:e2:bb:01:7c:c7:c4:54:
                    ab:e2:b0:58:f1:a9:ce:03:c0:5b:13:93:9b:56:9e:
                    8f:54:00:61:8e:a7:3d:36:d7:de:0e:1e:52:df:83:
                    46:cb:c2:ed:67:17:c4:24:6d:81:3d:87:9e:24:58:
                    a3:91:6b:f3:ec:b6:55:f8:b8:4d:98:e0:e4:6a:ca:
                    c6:05:14:51:5f:51:f3:9a:5a:02:e5:9e:7d:f5:fd:
                    53:47:30:02:94:84:b7:7b:34:91:9a:28:22:5a:2f:
                    69:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:72:AF:3F:E1:52:0B:A6:6F:79:0A:16:DD:A8:5E:B9:D8:23:18:62
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BXKvP-FSC6ZveQoW3aheudgjGGI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:b10::/47
                  2a0e:97c0:b13::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:6c:57:4f:de:fa:f2:78:25:5e:35:e6:47:5a:0a:17:ab:77:
         99:a1:5e:38:81:fb:da:f7:21:32:de:2d:fe:c2:13:5a:a2:31:
         4e:f1:0b:82:4b:4e:35:b9:fc:17:cf:c5:76:ef:ee:2e:76:1b:
         c6:93:2b:ea:6e:9b:31:4d:79:1c:86:ee:74:e4:8a:a9:50:12:
         d8:8e:e4:b9:51:1d:d1:23:98:44:54:a1:a7:1e:2e:d6:97:9e:
         e2:e7:ec:4f:9a:79:6e:d7:8c:22:06:ea:a4:84:13:95:c8:2e:
         b5:bb:4d:a7:80:4c:3a:51:a8:36:30:d5:fe:f9:46:6d:d8:1a:
         3d:d6:9c:d6:28:e8:7b:a6:04:cf:b7:63:46:73:d3:aa:9d:ab:
         27:e5:57:a3:66:81:50:40:54:cb:34:9c:f5:f4:fd:c3:91:08:
         ed:0b:9e:2e:f1:e7:f3:03:9a:ef:98:b9:2d:34:3e:db:e0:bc:
         82:be:56:1b:d9:a6:14:ea:86:22:ef:7f:57:e2:d8:b7:78:30:
         88:c1:f6:3d:ec:a8:58:32:4c:37:a3:cf:97:3a:c0:7b:6d:91:
         e9:70:d9:3c:10:e5:e7:ee:09:62:0c:22:e6:7d:37:57:cd:c7:
         4b:84:24:d8:4d:ff:ef:c1:4a:83:fc:2b:9f:28:f6:27:92:54:
         9f:27:f8:65
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEFLQkXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDUx
NzEyMzE1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDU3MmFmM2ZlMTUy
MGJhNjZmNzkwYTE2ZGRhODVlYjlkODIzMTg2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN4zuyEL5RURuF6f3H03Kp54lXzoCK6UcouPYmDjWc4eORdY
Ip105G/PzMVwAukB0XbhlMtwq4x4jT8DHfKpTpukdt2SxWmxoKWMJVelVwYAIi50
EMMWk4spIpCpCN1P3oTbeqnIfoFWNPijQcMUoRrzUjskFw6rLhCu7nxGcQHBzY5m
vFKOCxteM5RZyV4I/85zAvG8ob/hJ6XywJDiuwF8x8RUq+KwWPGpzgPAWxOTm1ae
j1QAYY6nPTbX3g4eUt+DRsvC7WcXxCRtgT2HniRYo5Fr8+y2Vfi4TZjg5GrKxgUU
UV9R85paAuWeffX9U0cwApSEt3s0kZooIlovaWECAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQFcq8/4VILpm95ChbdqF652CMYYjAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L0JYS3ZQLUZTQzZadmVRb1czYWhldWRnakdHSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHASoOl8ALEAMHACoOl8ALEzANBgkq
hkiG9w0BAQsFAAOCAQEARmxXT9768nglXjXmR1oKF6t3maFeOIH72vchMt4t/sIT
WqIxTvELgktONbn8F8/Fdu/uLnYbxpMr6m6bMU15HIbudOSKqVAS2I7kuVEd0SOY
RFShpx4u1pee4ufsT5p5bteMIgbqpIQTlcgutbtNp4BMOlGoNjDV/vlGbdgaPdac
1ijoe6YEz7djRnPTqp2rJ+VXo2aBUEBUyzSc9fT9w5EI7QueLvHn8wOa75i5LTQ+
2+C8gr5WG9mmFOqGIu9/V+LYt3gwiMH2PeyoWDJMN6PPlzrAe22R6XDZPBDl5+4J
Ygwi5n03V83HS4Qk2E3/78FKg/wrnyj2J5JUnyf4ZQ==
-----END CERTIFICATE-----