Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c1NlemcGwWBRTi-PuhmGz0hvNOI.roa
File:                     c1NlemcGwWBRTi-PuhmGz0hvNOI.roa (raw, json)
Hash identifier:          qyQ5h1WjbhY3FYc3Rup4FYgu7DyJLFOZ2TbVri6bOLo=
Subject key identifier:   73:53:65:7A:67:06:C1:60:51:4E:2F:8F:BA:19:86:CF:48:6F:34:E2
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       11CD1278
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c1NlemcGwWBRTi-PuhmGz0hvNOI.roa
Signing time:             Mon 07 Feb 2022 13:54:35 +0000
ROA not before:           Mon 07 Feb 2022 13:54:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211946
IP address blocks:        2a0e:97c0:140::/44 maxlen: 48
                          2a0e:97c0:143::/48 maxlen: 48
                          2a0e:97c0:141::/48 maxlen: 48
                          2a0e:97c0:142::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298652280 (0x11cd1278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb  7 13:54:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7353657a6706c160514e2f8fba1986cf486f34e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c2:24:82:b8:29:3a:97:d4:35:89:de:be:9a:
                    45:64:03:7d:eb:a4:b7:ba:b4:2a:9a:87:13:c1:0d:
                    e7:51:c8:a4:75:64:9b:fd:d2:14:a8:54:7b:92:ca:
                    b3:2a:fb:8d:e5:f3:01:78:32:d3:98:82:48:09:be:
                    d7:5d:88:17:53:d9:c9:7f:a1:e1:4a:bd:c4:21:5e:
                    79:6a:01:ea:f1:d1:d4:75:a3:4d:29:42:07:95:26:
                    4a:8e:92:c2:ce:a0:0e:33:ed:f5:87:00:b1:bf:b5:
                    dc:55:f4:8e:aa:99:23:d7:b2:5e:08:15:60:58:d1:
                    76:28:8c:8a:8b:ed:7f:e3:f6:b0:b3:dd:b4:0b:df:
                    b2:b6:33:ce:64:1a:cd:ca:1e:c1:81:99:7f:c4:54:
                    c6:90:c1:da:90:8b:c1:fc:11:19:7a:98:4e:58:84:
                    e2:fa:7d:74:c1:45:3b:00:a6:c6:b2:e8:69:65:1e:
                    c3:f8:02:0c:56:5a:51:ef:c4:78:e0:63:dd:c6:16:
                    1a:2e:a4:ee:95:80:e4:3e:52:f8:47:d8:0a:9d:cb:
                    e0:81:b2:f4:b2:5d:db:67:28:34:be:e8:cd:53:d9:
                    3a:e1:c9:20:9e:ea:c1:b4:2e:30:ab:18:db:17:58:
                    fa:63:94:d9:13:60:6d:b9:09:9d:c4:22:01:83:c7:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:53:65:7A:67:06:C1:60:51:4E:2F:8F:BA:19:86:CF:48:6F:34:E2
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c1NlemcGwWBRTi-PuhmGz0hvNOI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:140::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:5a:bb:68:bb:6f:4b:fe:8c:80:43:82:da:2d:ff:41:b8:c1:
         1b:6a:4e:a6:47:01:65:3c:15:02:34:fc:d9:52:2a:33:55:f8:
         b8:a4:22:37:60:49:7b:8d:93:dd:86:f7:f0:41:10:bc:ea:78:
         65:b7:21:50:f6:29:65:c7:56:f2:77:ab:ce:6c:78:74:33:73:
         ac:d3:e1:61:41:c7:33:8f:ac:72:22:bc:c5:68:97:ce:86:51:
         f3:44:5c:09:fc:df:e3:0d:d0:3f:6d:6a:21:1c:49:e5:3c:1d:
         88:7b:9d:83:16:99:bd:1a:79:3e:f5:25:52:40:b9:a8:e5:e0:
         5d:71:58:af:f2:ec:b1:9c:40:ae:56:99:30:80:aa:d6:e0:74:
         4c:dc:06:fb:c9:4a:a3:59:63:b2:2f:46:08:b2:f6:a4:bd:f7:
         a2:2a:57:98:32:8d:93:34:15:c5:94:05:84:90:99:ab:28:70:
         88:d9:c0:a6:58:05:eb:1c:fa:a8:e0:ee:89:8c:29:b6:b1:71:
         aa:9d:6f:7f:9f:98:f3:75:d3:fb:d2:01:38:8e:e9:bf:d2:2d:
         74:df:19:e9:9a:c8:fc:9a:52:fc:59:49:95:55:41:a1:b7:9d:
         de:87:14:d1:1e:34:e3:20:ed:66:0c:dd:18:b7:d0:80:88:14:
         fb:69:21:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----