Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ET_dpCnRnrH3BiI34hkhH0HwuSg.roa
File:                     ET_dpCnRnrH3BiI34hkhH0HwuSg.roa (raw, json)
Hash identifier:          y6b+LHMvjHKr/L3d3+0eNv/b06VQz4Wdk2cdJckrNkA=
Subject key identifier:   11:3F:DD:A4:29:D1:9E:B1:F7:06:22:37:E2:19:21:1F:41:F0:B9:28
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01847E7A0FC5DEA2CC6BFDB0660DDF198205
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ET_dpCnRnrH3BiI34hkhH0HwuSg.roa
Signing time:             Wed 16 Nov 2022 03:27:19 +0000
ROA not before:           Wed 16 Nov 2022 03:27:19 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202256
IP address blocks:        2a10:cc44:800::/37 maxlen: 48
                          2a0e:97c6:4000::/34 maxlen: 48
                          2a0e:97c1:800::/37 maxlen: 48
                          2a0e:97c7:800::/37 maxlen: 48
                          2a10:cc42:1000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:7e:7a:0f:c5:de:a2:cc:6b:fd:b0:66:0d:df:19:82:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 16 03:27:19 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=113fdda429d19eb1f7062237e219211f41f0b928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6b:d1:7f:65:70:41:68:c0:3c:8a:e6:9f:a0:
                    3b:c1:6c:da:02:c2:7e:80:02:1e:4c:0a:ff:c6:7b:
                    e0:d7:8f:2c:10:ec:a8:0e:98:ad:3f:e0:44:d0:3d:
                    a8:51:ab:e3:78:40:9a:da:4b:20:ad:ba:d3:1a:84:
                    c7:f9:c9:71:6e:20:bb:2e:3f:1d:27:7e:35:b4:34:
                    25:e3:45:83:88:82:bb:7a:1e:fc:64:d7:33:72:b2:
                    46:13:cc:a4:47:ec:e7:9d:af:d0:16:26:8e:66:f5:
                    b5:e0:17:29:96:40:4d:ac:9c:5c:04:53:5d:06:8b:
                    9a:8b:62:28:f6:6d:cb:e5:b7:f7:a5:9d:9b:cf:00:
                    b2:a5:1a:41:cb:7e:86:0c:22:cc:92:8e:29:ab:e7:
                    c7:dd:7c:75:73:7d:3e:53:2f:e4:01:52:1e:8b:b3:
                    f9:d1:02:e6:7a:bf:d8:39:e9:a6:46:0a:ff:4f:7e:
                    e1:9b:56:a0:b2:bc:94:0f:a3:af:32:1b:29:50:0f:
                    41:fd:42:79:5d:ef:23:40:c0:58:b5:fe:42:35:8a:
                    3f:34:0c:55:41:cb:c7:8e:da:2c:ed:d4:87:36:5c:
                    43:49:c7:12:70:7a:87:f9:b6:79:79:d1:de:fa:96:
                    a1:e5:c9:0f:4a:ed:8f:f7:40:ff:88:52:47:fc:a0:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3F:DD:A4:29:D1:9E:B1:F7:06:22:37:E2:19:21:1F:41:F0:B9:28
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ET_dpCnRnrH3BiI34hkhH0HwuSg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c1:800::/37
                  2a0e:97c6:4000::/34
                  2a0e:97c7:800::/37
                  2a10:cc42:1000::/36
                  2a10:cc44:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:32:f5:b3:a5:8d:a0:50:18:f0:a5:74:8d:18:3c:98:8d:
         03:ab:15:21:ea:2d:ac:b9:10:6b:6d:62:c3:e3:4e:3c:5c:fe:
         91:ee:01:65:f5:a6:91:ea:51:98:80:4d:11:5f:c2:a1:09:15:
         5a:22:17:ba:5b:39:a9:e8:93:da:de:e1:57:42:b4:a3:21:14:
         18:96:64:67:ab:71:b7:0a:75:f3:8b:77:5a:50:48:ac:9a:1b:
         38:2f:c8:67:ea:17:7b:1c:3b:55:15:72:70:72:84:73:b1:f0:
         68:b1:87:c0:ca:53:18:bf:c1:21:32:88:4e:8b:dd:28:97:30:
         e0:62:6b:c6:79:59:6a:df:f3:48:93:06:3d:7e:74:45:fd:3a:
         96:82:03:b7:a1:8b:82:26:bb:bf:d3:4b:58:25:79:33:b5:97:
         3c:89:f3:38:1f:c8:64:e7:1a:eb:6b:7e:51:f6:09:47:dc:dd:
         e0:f9:04:8f:b6:55:df:59:bc:40:fb:98:95:a2:fa:52:ef:c4:
         c2:56:d7:ea:d1:e9:ff:ae:cf:bb:c6:e7:06:85:bc:66:3a:7c:
         54:26:c9:d1:ad:f0:62:a9:97:ab:94:de:ad:37:60:cf:f4:37:
         57:53:f9:1a:f9:99:31:d2:46:72:5c:6d:dd:95:d7:d8:af:73:
         a6:2b:5c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----