Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dgR8O5tDHgY7bF_br4udnqq-gDA.roa
File:                     dgR8O5tDHgY7bF_br4udnqq-gDA.roa (raw, json)
Hash identifier:          khHtBS0sGjG/34yq1MmEOg+weDIZT6TD398RWmvK4Wk=
Subject key identifier:   76:04:7C:3B:9B:43:1E:06:3B:6C:5F:DB:AF:8B:9D:9E:AA:BE:80:30
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018284A8F91BCA016939ED0AAF3F2600E049
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dgR8O5tDHgY7bF_br4udnqq-gDA.roa
Signing time:             Tue 09 Aug 2022 22:10:42 +0000
ROA not before:           Tue 09 Aug 2022 22:10:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     23428
IP address blocks:        2a10:2f00:181::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:84:a8:f9:1b:ca:01:69:39:ed:0a:af:3f:26:00:e0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  9 22:10:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=76047c3b9b431e063b6c5fdbaf8b9d9eaabe8030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f8:37:95:0c:21:4e:e3:6b:20:e0:8e:8e:94:
                    06:4c:31:01:ab:73:05:7a:5b:c1:d8:17:96:c7:a3:
                    c4:11:ba:f9:29:6d:e3:7b:c5:4f:08:cf:a4:74:24:
                    d2:f0:a0:90:cd:25:0a:52:8b:b0:99:cb:c2:55:7c:
                    e2:1d:d5:b5:ef:70:f9:d9:4f:12:fc:ad:2a:91:20:
                    38:4b:ae:51:77:45:40:aa:a8:9d:e6:48:0a:b8:d1:
                    eb:21:60:03:c6:56:96:55:f1:f0:1a:c1:15:a0:a0:
                    96:d1:d4:37:43:cd:be:c9:7a:78:15:a0:58:0f:8a:
                    36:e8:61:84:3a:55:d3:69:c0:22:6d:b8:2f:dd:d0:
                    91:fe:3d:49:a0:30:61:40:9f:33:82:9d:d9:78:e6:
                    e7:f8:0b:ea:b8:14:e9:7d:8e:fd:94:e5:fa:d2:03:
                    6f:f4:be:8d:88:fa:d6:ac:53:df:5c:0b:06:0a:39:
                    ec:a6:20:8d:26:b7:81:61:34:18:67:d9:39:9c:c7:
                    01:03:7a:be:9b:20:a2:5d:f8:4c:ae:47:19:a9:e6:
                    51:8c:7c:f7:b2:79:07:1f:be:70:82:10:80:47:61:
                    d6:61:56:38:6c:e3:36:5d:ef:4e:73:44:08:ce:a9:
                    eb:14:91:90:92:60:42:56:5e:42:fa:2b:26:5f:e9:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:04:7C:3B:9B:43:1E:06:3B:6C:5F:DB:AF:8B:9D:9E:AA:BE:80:30
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dgR8O5tDHgY7bF_br4udnqq-gDA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:181::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:c4:4a:f7:a2:76:95:97:9b:6a:bb:10:11:b2:64:93:66:57:
         de:3a:a4:74:19:7a:c9:c1:f2:82:b2:82:49:64:df:ae:05:be:
         88:4a:bd:a3:5e:df:1d:ca:0f:07:f0:bf:86:1b:5c:2b:18:0e:
         49:87:e0:a9:0a:36:55:66:c1:26:7c:09:93:32:6c:ce:0f:5e:
         03:68:45:94:ef:47:c8:49:ed:0a:1b:b5:64:cd:ba:d6:d0:83:
         e8:83:d3:99:b4:61:c6:9c:13:30:c5:74:59:35:e6:26:68:11:
         04:a2:91:d8:59:59:4c:18:26:08:03:1c:96:75:10:60:31:37:
         d1:3d:bf:cf:78:0a:e8:e1:62:85:a2:fc:86:f9:fe:53:0e:1a:
         b7:6c:40:f2:9f:4f:16:24:24:b5:d2:42:66:66:d5:49:f6:2f:
         d8:8e:e8:33:e5:ae:4e:87:d3:62:b7:c2:19:73:34:dc:24:9e:
         51:9d:eb:67:74:30:80:f5:e8:2f:fd:01:16:55:fb:83:58:c0:
         25:9e:26:2d:81:90:30:97:77:d0:4b:57:44:98:45:6d:32:16:
         39:f0:3b:70:49:4a:81:3e:5f:a7:c2:ca:d3:f4:c7:43:41:96:
         98:b2:dd:bc:38:6a:43:0a:45:f2:69:97:9a:f1:75:47:3f:b8:
         dc:45:b0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----