Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CHnXF1Or1ZaOLN_6_uG2L1ovn0Q.roa
File:                     CHnXF1Or1ZaOLN_6_uG2L1ovn0Q.roa (raw, json)
Hash identifier:          ZRdmrcR053rqLiSz0DU9pgPC4ktViQ0LDtTbAArCtsg=
Subject key identifier:   08:79:D7:17:53:AB:D5:96:8E:2C:DF:FA:FE:E1:B6:2F:5A:2F:9F:44
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       13C14E63
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CHnXF1Or1ZaOLN_6_uG2L1ovn0Q.roa
Signing time:             Sun 17 Apr 2022 06:32:50 +0000
ROA not before:           Sun 17 Apr 2022 06:32:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        2a0e:b107:e70::/48 maxlen: 48
                          2a10:2f00:173::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331435619 (0x13c14e63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 17 06:32:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0879d71753abd5968e2cdffafee1b62f5a2f9f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:fe:3f:34:43:b7:c8:ea:7f:3d:46:23:e8:
                    08:b5:0f:88:e5:62:66:10:06:b4:4d:20:66:83:73:
                    76:2a:7c:1c:0e:37:31:1a:6a:51:23:56:0d:f4:31:
                    e0:98:67:21:b4:d3:03:1d:99:6b:92:88:e9:19:26:
                    31:bb:ee:71:2d:7a:97:58:35:f9:fd:3d:d1:ff:e6:
                    fb:d9:9d:06:28:35:04:24:83:78:75:18:30:66:4b:
                    e1:36:e1:33:36:27:6e:ba:0e:66:dc:18:44:78:82:
                    2b:5d:b1:8e:27:2c:17:d9:d5:f9:86:ee:10:21:73:
                    4b:dc:e9:1d:8e:45:2c:55:3a:96:0a:3b:7b:06:85:
                    12:f4:07:84:56:cc:62:5c:1d:78:15:67:9b:8b:7d:
                    fd:ae:77:8f:91:76:67:f0:3c:51:e2:6a:1a:23:64:
                    cd:51:4f:79:0e:d3:d2:bf:3f:d9:59:a0:94:c5:29:
                    c6:f7:b7:59:89:34:4e:7d:44:60:4f:6f:39:08:6e:
                    46:45:67:8b:c2:c5:4a:4c:e0:cf:48:fc:ff:26:e1:
                    6d:67:94:39:75:2a:e1:f0:95:8c:9a:24:21:9c:f0:
                    c3:d8:d2:ba:41:1b:21:34:45:62:4d:01:86:8a:94:
                    a4:3a:dc:78:80:51:54:ea:89:fb:fa:cd:ce:1b:7b:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:79:D7:17:53:AB:D5:96:8E:2C:DF:FA:FE:E1:B6:2F:5A:2F:9F:44
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CHnXF1Or1ZaOLN_6_uG2L1ovn0Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:e70::/48
                  2a10:2f00:173::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:b4:ac:39:7f:5a:62:54:73:0a:6a:d9:dc:6a:75:9a:ae:8d:
         50:50:57:ef:5a:dd:81:d9:d3:a4:9e:28:3f:c0:f4:26:02:60:
         42:1e:16:57:f6:28:59:04:31:21:ea:f1:59:9b:f3:b2:5b:d5:
         f5:de:9c:f9:e4:63:c3:6c:84:22:f6:ea:28:4e:eb:5a:f8:75:
         f5:9f:73:67:68:47:1e:c4:58:4f:e6:bc:67:75:0f:66:11:25:
         3c:09:c8:3b:68:f0:b0:8d:b2:22:08:db:94:fb:c3:7c:9e:2d:
         c7:52:2b:ab:5b:a0:ce:dc:58:67:54:a3:a5:aa:38:e3:cb:c0:
         1e:e4:2d:c6:c7:d2:61:ad:57:6d:ad:e8:9d:9a:58:87:34:4e:
         2f:88:30:82:1c:86:0f:be:a1:c3:92:eb:81:b0:36:cf:d4:1f:
         7f:4b:fc:98:1f:10:cf:36:95:91:cb:3e:0b:45:90:24:19:4e:
         b4:34:8f:33:20:fc:93:0f:6b:ee:b7:d0:c4:16:4f:53:d9:f7:
         d0:81:95:8a:f3:b0:c6:59:24:4b:89:1d:58:cc:69:43:ca:28:
         37:7d:6b:55:16:dc:00:2c:33:fa:8e:0f:45:d7:a5:f8:63:a1:
         97:d0:35:99:2f:72:b0:59:30:dc:63:fb:6b:b9:b7:c5:33:ac:
         95:3c:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----