Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Cu4rj_VWYRv9XP_IbdqAY1oSFbI.roa
File:                     Cu4rj_VWYRv9XP_IbdqAY1oSFbI.roa (raw, json)
Hash identifier:          yZsCaHORQcDedL/Q3To+V+OHS/ThmmmHmA7nW86WOwk=
Subject key identifier:   0A:EE:2B:8F:F5:56:61:1B:FD:5C:FF:C8:6D:DA:80:63:5A:12:15:B2
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01848FEFA2E8B7D67F6CA6179AF98AE0422C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Cu4rj_VWYRv9XP_IbdqAY1oSFbI.roa
Signing time:             Sat 19 Nov 2022 12:49:17 +0000
ROA not before:           Sat 19 Nov 2022 12:49:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202613
IP address blocks:        2a10:cc41:100::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:8f:ef:a2:e8:b7:d6:7f:6c:a6:17:9a:f9:8a:e0:42:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 19 12:49:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0aee2b8ff556611bfd5cffc86dda80635a1215b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:56:3e:34:e5:21:04:aa:95:10:9f:04:a8:d5:
                    94:55:a5:eb:80:3d:46:2d:26:26:09:bc:14:d4:92:
                    b4:3d:3d:44:a9:23:d9:f8:a6:c5:2d:13:79:9a:92:
                    de:44:95:2e:11:3c:93:c4:4a:fe:38:45:64:05:82:
                    2a:d1:de:53:9d:3c:08:98:6e:25:28:10:16:03:35:
                    33:a2:61:b8:37:d2:67:03:15:5d:79:bd:18:06:13:
                    3c:02:de:2b:85:99:ae:7e:2e:39:3d:7a:71:0b:c8:
                    10:0e:cb:31:d5:4d:2e:f9:3f:de:53:1b:b3:a3:08:
                    d9:40:b6:fe:bf:45:70:ff:aa:88:9e:a3:a8:42:b7:
                    32:df:27:2a:f9:ff:b6:25:77:f2:3a:15:eb:4d:95:
                    b6:58:60:f5:3e:51:6d:f4:bb:d6:96:dd:05:4f:ef:
                    3f:e5:d8:17:eb:6c:27:b6:16:bc:e0:8c:68:3e:94:
                    72:ca:23:1f:49:60:9c:8f:e9:26:e6:76:c9:fa:f9:
                    5a:18:c5:09:33:d9:19:0a:a8:b1:0e:50:ef:2a:a9:
                    b2:a4:86:ca:40:44:34:1e:60:49:fc:c5:3a:d1:4a:
                    e4:a0:37:59:3c:c6:5e:23:06:08:39:d9:10:a0:31:
                    a9:52:04:05:6b:29:70:57:35:9e:1e:8b:ef:aa:05:
                    ee:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EE:2B:8F:F5:56:61:1B:FD:5C:FF:C8:6D:DA:80:63:5A:12:15:B2
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Cu4rj_VWYRv9XP_IbdqAY1oSFbI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc41:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         af:ed:19:48:c2:a5:5d:c9:f9:16:01:7e:37:e9:8f:07:35:38:
         cc:41:e3:54:06:ac:01:ba:7b:e6:1a:95:33:ae:4d:38:74:fc:
         43:e3:11:b5:51:1f:6d:57:0a:6e:c5:5a:fd:01:d3:c7:72:5e:
         44:52:6f:4f:68:53:d0:2f:7f:dd:4b:c0:04:9b:9f:29:81:63:
         1f:80:e4:e5:34:80:fc:52:b4:22:1a:ce:b9:25:fd:8a:a3:7b:
         ee:98:75:4d:25:1f:80:58:b1:e0:32:f9:7e:9d:51:42:f6:d2:
         f9:f2:40:dc:0d:0b:2d:64:d5:aa:69:d6:4a:cf:af:6f:c1:2f:
         f5:16:da:90:1c:90:aa:a9:1b:73:0c:a8:f6:51:bd:79:26:e9:
         02:28:93:8e:be:c9:35:0d:f3:56:25:24:a9:a3:b9:f5:a5:d3:
         da:4f:b4:02:55:6f:ef:28:9d:08:97:82:ad:4c:fd:45:cd:ef:
         50:ac:93:b9:ea:f8:b1:8e:25:7b:fc:9d:77:6b:0f:0b:4c:a0:
         50:26:ed:72:8f:71:cd:70:6e:cb:dc:87:c0:a2:4f:09:04:7a:
         d6:82:88:bd:28:5f:6c:a4:63:19:3c:4e:35:93:a0:51:0e:bf:
         c9:03:0d:4a:34:af:d2:55:e4:d0:5d:ac:c8:76:14:49:74:72:
         86:85:89:9d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYSP76Lot9Z/bKYXmvmK4EIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjIxMTE5MTI0OTE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWVlMmI4ZmY1NTY2MTFiZmQ1Y2ZmYzg2ZGRhODA2MzVhMTIxNWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFY+NOUhBKqVEJ8EqNWUVaXrgD1G
LSYmCbwU1JK0PT1EqSPZ+KbFLRN5mpLeRJUuETyTxEr+OEVkBYIq0d5TnTwImG4l
KBAWAzUzomG4N9JnAxVdeb0YBhM8At4rhZmufi45PXpxC8gQDssx1U0u+T/eUxuz
owjZQLb+v0Vw/6qInqOoQrcy3ycq+f+2JXfyOhXrTZW2WGD1PlFt9LvWlt0FT+8/
5dgX62wntha84IxoPpRyyiMfSWCcj+km5nbJ+vlaGMUJM9kZCqixDlDvKqmypIbK
QEQ0HmBJ/MU60UrkoDdZPMZeIwYIOdkQoDGpUgQFaylwVzWeHovvqgXuMQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAruK4/1VmEb/Vz/yG3agGNaEhWyMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvQ3U0cmpfVldZUnY5WFBfSWJkcUFZMW9TRmJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhDMQQEA
MA0GCSqGSIb3DQEBCwUAA4IBAQCv7RlIwqVdyfkWAX436Y8HNTjMQeNUBqwBunvm
GpUzrk04dPxD4xG1UR9tVwpuxVr9AdPHcl5EUm9PaFPQL3/dS8AEm58pgWMfgOTl
NID8UrQiGs65Jf2Ko3vumHVNJR+AWLHgMvl+nVFC9tL58kDcDQstZNWqadZKz69v
wS/1FtqQHJCqqRtzDKj2Ub15JukCKJOOvsk1DfNWJSSpo7n1pdPaT7QCVW/vKJ0I
l4KtTP1Fze9QrJO56vixjiV7/J13aw8LTKBQJu1yj3HNcG7L3IfAok8JBHrWgoi9
KF9spGMZPE41k6BRDr/JAw1KNK/SVeTQXazIdhRJdHKGhYmd
-----END CERTIFICATE-----