Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vlvp4X23mgFWeHDAi3IeEQvzBeU.roa
File:                     Vlvp4X23mgFWeHDAi3IeEQvzBeU.roa (raw, json)
Hash identifier:          Ut4i8/ys7IB+JcbvrE0zgE5MrwhyNRPJG5Xp4GXUymM=
Subject key identifier:   56:5B:E9:E1:7D:B7:9A:01:56:78:70:C0:8B:72:1E:11:0B:F3:05:E5
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01820A56BD97013F40D050FD3A3F0E6100D1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vlvp4X23mgFWeHDAi3IeEQvzBeU.roa
Signing time:             Sun 17 Jul 2022 04:07:12 +0000
ROA not before:           Sun 17 Jul 2022 04:07:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     400542
IP address blocks:        2a0e:b107:b15::/48 maxlen: 48
                          2a0e:b107:b12::/48 maxlen: 48
                          2a0e:b107:b11::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:0a:56:bd:97:01:3f:40:d0:50:fd:3a:3f:0e:61:00:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul 17 04:07:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=565be9e17db79a01567870c08b721e110bf305e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:54:bc:fb:b6:27:76:84:18:f5:1a:4f:de:3a:
                    ca:01:d6:ae:7a:ec:da:eb:05:4d:64:14:c3:86:3d:
                    ad:f2:4f:2a:a9:67:6b:00:23:bd:e1:85:65:d8:aa:
                    29:bf:70:f7:e4:cc:8d:f8:1b:69:31:66:b9:b7:67:
                    7e:ff:65:9f:53:2c:5d:de:44:b9:b8:15:8a:54:0a:
                    c5:65:53:53:be:2f:d4:8f:21:3c:8a:08:24:bf:08:
                    8e:b6:f8:0e:6c:3a:b8:15:d1:10:e8:30:6c:05:a1:
                    e3:81:f6:e4:38:67:c7:60:15:16:de:6a:a7:b6:bd:
                    83:94:4c:ec:5d:76:82:ec:64:ae:24:b0:ef:e6:4d:
                    57:f5:c7:d7:15:ac:f6:ea:0c:28:9c:c0:ab:89:c8:
                    2d:1b:dc:d7:51:57:74:a0:eb:88:49:94:f0:a9:3e:
                    47:4d:26:c0:36:48:3b:d8:c9:c1:de:a3:7b:ed:f0:
                    ac:20:b4:c2:fc:18:cd:0e:4b:ed:61:5b:20:04:57:
                    6a:dd:46:12:ab:69:f6:4c:e9:d8:24:1b:12:64:ba:
                    86:58:01:a5:aa:5f:ba:d8:ec:13:43:99:3c:9e:87:
                    2b:aa:e3:c3:1f:e1:ee:1e:33:76:e1:31:84:8e:f3:
                    3f:d8:86:48:92:b2:70:fc:3c:81:16:73:e2:10:c4:
                    cd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5B:E9:E1:7D:B7:9A:01:56:78:70:C0:8B:72:1E:11:0B:F3:05:E5
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vlvp4X23mgFWeHDAi3IeEQvzBeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:b11::-2a0e:b107:b12:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:b15::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:8e:de:38:57:e4:58:50:c0:ab:89:06:e3:ce:0a:95:a5:04:
         87:d4:26:bd:ef:bd:18:84:a9:a1:cd:5d:3d:04:1b:6e:1b:9e:
         52:4b:77:87:f6:bc:79:f1:4a:cb:0a:6e:cb:d5:7d:70:21:c9:
         f8:62:69:08:c8:15:cd:12:8d:60:4c:d3:23:a0:a9:c9:d7:4a:
         f1:3e:d1:01:20:64:c6:11:eb:10:f1:b5:06:f0:61:b6:a0:1c:
         3a:ee:6b:d3:34:c4:2e:95:83:d9:78:e1:bd:e5:28:f0:9c:71:
         43:62:35:a0:eb:ef:6c:66:73:71:06:76:ed:8f:94:8a:4a:8b:
         10:2e:33:81:32:a0:1f:9c:2c:be:42:fa:49:f0:0e:8c:85:b9:
         d7:14:68:a0:2d:71:15:75:8c:f1:fb:0b:ff:3f:18:ef:9e:cc:
         fc:54:b0:b5:f9:01:ff:b1:d1:4a:92:4a:97:38:7e:9e:94:7f:
         13:ee:c0:fc:54:4a:e8:cb:36:33:7b:24:18:7a:d1:84:cb:bf:
         fb:a9:c6:a2:2e:ee:78:20:54:a7:80:84:02:8a:83:12:cb:b0:
         a0:2b:45:5e:01:c6:8a:90:33:3a:99:94:05:29:f4:22:2b:b7:
         9f:54:23:45:b2:fe:00:4c:d8:0c:98:3b:53:01:5d:c7:14:6c:
         57:c9:dc:33
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYIKVr2XAT9A0FD9Oj8OYQDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjIwNzE3MDQwNzEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjViZTllMTdkYjc5YTAxNTY3ODcwYzA4YjcyMWUxMTBiZjMwNWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVS8+7YndoQY9RpP3jrKAdaueuza
6wVNZBTDhj2t8k8qqWdrACO94YVl2Kopv3D35MyN+BtpMWa5t2d+/2WfUyxd3kS5
uBWKVArFZVNTvi/UjyE8iggkvwiOtvgObDq4FdEQ6DBsBaHjgfbkOGfHYBUW3mqn
tr2DlEzsXXaC7GSuJLDv5k1X9cfXFaz26gwonMCricgtG9zXUVd0oOuISZTwqT5H
TSbANkg72MnB3qN77fCsILTC/BjNDkvtYVsgBFdq3UYSq2n2TOnYJBsSZLqGWAGl
ql+62OwTQ5k8nocrquPDH+HuHjN24TGEjvM/2IZIkrJw/DyBFnPiEMTNdwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFFZb6eF9t5oBVnhwwItyHhEL8wXlMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVmx2cDRYMjNtZ0ZXZUhEQWkzSWVFUXZ6QmVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdMBIDBwAqDrEH
CxEDBwAqDrEHCxIDBwAqDrEHCxUwDQYJKoZIhvcNAQELBQADggEBAEiO3jhX5FhQ
wKuJBuPOCpWlBIfUJr3vvRiEqaHNXT0EG24bnlJLd4f2vHnxSssKbsvVfXAhyfhi
aQjIFc0SjWBM0yOgqcnXSvE+0QEgZMYR6xDxtQbwYbagHDrua9M0xC6Vg9l44b3l
KPCccUNiNaDr72xmc3EGdu2PlIpKixAuM4EyoB+cLL5C+knwDoyFudcUaKAtcRV1
jPH7C/8/GO+ezPxUsLX5Af+x0UqSSpc4fp6UfxPuwPxUSujLNjN7JBh60YTLv/up
xqIu7nggVKeAhAKKgxLLsKArRV4BxoqQMzqZlAUp9CIrt59UI0Wy/gBM2AyYO1MB
XccUbFfJ3DM=
-----END CERTIFICATE-----