Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xn_JyxkwH2r1yCIGuZUYp9pAL80.roa
File:                     Xn_JyxkwH2r1yCIGuZUYp9pAL80.roa (raw, json)
Hash identifier:          pBwW11aJrtc7vi+/dHqsL04QC45rKOw4ebFBpg0xKko=
Subject key identifier:   5E:7F:C9:CB:19:30:1F:6A:F5:C8:22:06:B9:95:18:A7:DA:40:2F:CD
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       1347CD18
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xn_JyxkwH2r1yCIGuZUYp9pAL80.roa
Signing time:             Tue 29 Mar 2022 10:42:06 +0000
ROA not before:           Tue 29 Mar 2022 10:42:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206895
IP address blocks:        2a0e:97c0:a10::/48 maxlen: 48
                          2a0e:97c0:a11::/48 maxlen: 48
                          2a10:cc40:15e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323472664 (0x1347cd18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar 29 10:42:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5e7fc9cb19301f6af5c82206b99518a7da402fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:43:2e:a3:24:aa:0b:0f:07:aa:70:e8:74:36:
                    ca:29:1a:b2:0f:3c:6b:cd:a9:e5:6b:86:27:6e:1b:
                    f2:eb:01:41:65:25:e7:fa:d4:e8:c9:ab:5c:16:7b:
                    35:d6:e3:da:7a:96:c7:06:9a:4d:4b:82:22:55:76:
                    79:18:97:16:fb:aa:4b:2a:d0:a8:c6:4d:44:be:af:
                    92:6a:0f:31:2b:83:54:a5:cd:27:8a:e3:04:26:df:
                    d3:aa:2f:39:bc:bb:59:e0:4a:1c:b5:8b:f1:27:98:
                    a9:c2:d1:a4:4f:7f:cd:bb:e3:6e:24:30:13:d1:35:
                    3d:39:7d:80:60:4f:5b:33:f3:9b:99:7e:9b:ef:99:
                    64:62:77:19:5b:9d:19:69:8c:85:fc:5d:7b:5b:2e:
                    28:8d:33:ae:6e:ab:b3:1e:33:12:94:d3:85:c1:7d:
                    96:90:2d:ab:03:be:83:ed:c4:e4:50:a8:d3:80:50:
                    b3:2c:a5:b8:a0:a0:bc:19:d2:14:03:3a:4b:bb:7c:
                    48:53:9a:56:d0:88:3a:c3:0a:af:f2:4e:61:c3:53:
                    c1:27:46:6f:93:a6:33:7c:44:7c:84:1c:7f:9d:70:
                    8f:a5:ff:b5:88:6b:89:8a:a8:46:d9:5f:32:d4:0e:
                    bb:08:29:9b:d8:54:34:8e:7f:eb:8e:e5:d4:a5:bf:
                    f2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:7F:C9:CB:19:30:1F:6A:F5:C8:22:06:B9:95:18:A7:DA:40:2F:CD
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Xn_JyxkwH2r1yCIGuZUYp9pAL80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:a10::/47
                  2a10:cc40:15e::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:73:29:3e:0b:5f:9d:b5:9a:01:b8:38:90:fa:1a:76:70:c0:
         9f:96:77:29:9a:df:a8:e5:5d:ca:7a:cd:94:f5:59:b5:b9:a9:
         c9:33:b9:f1:6b:f4:47:df:e9:ff:d8:0a:82:94:22:c6:51:e3:
         60:42:8e:62:91:5a:46:9b:92:90:3f:9f:f7:d6:c9:ca:84:24:
         2b:9b:1f:59:3c:b0:03:35:6b:c7:c5:6e:ef:01:a9:f3:2d:64:
         3d:2c:46:66:4f:81:ed:a4:88:b9:17:48:b1:ec:61:c4:3d:7e:
         9a:c9:ff:69:5b:01:2e:a4:98:b5:6c:08:62:a9:7f:b9:d9:43:
         61:ac:ce:c8:97:6e:2f:2d:35:e2:30:46:8d:d2:ce:db:4c:46:
         c7:87:6a:c6:e3:76:c7:b8:e7:2e:39:fb:6e:2e:58:10:54:4d:
         e0:dc:28:59:e7:b5:bb:ef:16:5c:20:70:ac:fd:7d:3f:07:35:
         7c:2a:3b:7f:12:ca:de:dd:b3:ef:a4:4a:f2:72:bf:53:5d:43:
         95:6a:e4:e2:9d:4d:fa:9d:1a:f5:01:e5:cc:36:c9:74:2d:ef:
         5f:cf:97:b0:6c:3a:80:e0:ee:f0:ba:91:63:1c:d3:d7:e7:e6:
         28:91:d4:02:4e:ba:bc:68:f8:9c:d3:8d:a5:1b:71:0d:4d:4b:
         9f:0e:f1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----