Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eNhNZwCx_x-HY8fZrpl3Xrns0g0.roa
File:                     eNhNZwCx_x-HY8fZrpl3Xrns0g0.roa (raw, json)
Hash identifier:          MMaUyh9bLlu0C4YHXhGKoPYgLrvlHQ2rzNq45u2Dgjs=
Subject key identifier:   78:D8:4D:67:00:B1:FF:1F:87:63:C7:D9:AE:99:77:5E:B9:EC:D2:0D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01830D0A35FF9A7A1FEA4A36C421C3C437B1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eNhNZwCx_x-HY8fZrpl3Xrns0g0.roa
Signing time:             Mon 05 Sep 2022 09:45:16 +0000
ROA not before:           Mon 05 Sep 2022 09:45:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211688
IP address blocks:        2a0e:97c0:240::/44 maxlen: 48
                          2a0e:97c1:110::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:0d:0a:35:ff:9a:7a:1f:ea:4a:36:c4:21:c3:c4:37:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep  5 09:45:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=78d84d6700b1ff1f8763c7d9ae99775eb9ecd20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:d1:ea:4e:2e:f4:07:73:ef:bb:b5:c0:0e:
                    8f:d7:f3:6a:20:80:6f:2c:80:1f:f5:7d:7d:2e:fb:
                    e8:4d:58:68:a5:73:2a:a8:00:07:d3:7a:77:1a:50:
                    10:1a:ec:9a:58:83:f0:59:84:34:cb:02:02:01:87:
                    5c:29:aa:ba:51:d4:67:23:5d:29:4c:03:c5:d8:a7:
                    25:ed:6c:87:6c:3b:ca:8d:4d:33:8a:c3:68:e6:63:
                    eb:4b:f0:17:c5:c4:98:2b:de:a5:42:16:5c:a4:6a:
                    62:3f:3d:2f:35:29:b8:6b:19:4d:d3:fb:4e:a4:cb:
                    fb:e4:92:46:d8:8b:6c:32:52:16:b5:bd:5f:df:29:
                    15:10:a7:95:b8:c5:38:c2:3c:7f:61:21:f5:a8:51:
                    e5:f0:bd:22:5a:70:16:e9:7d:d8:c7:ae:4b:9f:9c:
                    f1:d1:6b:af:b4:96:97:ca:0d:45:d9:dc:6a:fd:41:
                    85:75:f4:fa:05:cd:d9:8f:ee:ca:d2:ed:8b:05:0f:
                    18:68:8e:a3:dc:63:e0:c7:75:20:4f:59:26:4b:7f:
                    0c:ea:98:77:0f:b2:de:eb:df:7c:cf:d0:46:be:a8:
                    29:48:cc:31:1b:00:9f:46:53:44:c7:f2:9e:5f:6a:
                    0f:a7:f0:b8:6b:a9:4a:5f:10:92:af:53:7c:20:79:
                    99:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D8:4D:67:00:B1:FF:1F:87:63:C7:D9:AE:99:77:5E:B9:EC:D2:0D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eNhNZwCx_x-HY8fZrpl3Xrns0g0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:240::/44
                  2a0e:97c1:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:7f:22:07:ba:1c:ac:da:9e:c5:2a:1f:92:a0:03:ef:a8:bb:
         7c:ce:a1:71:e2:cb:ab:d8:4d:db:0b:f5:1e:ed:f6:d9:7e:f1:
         7f:f8:59:85:33:3f:e8:6c:8c:69:39:5d:92:5f:38:04:aa:8e:
         ea:40:53:84:f3:33:58:2a:70:82:83:68:ac:44:35:5c:2f:c8:
         e5:56:3f:dd:e5:c0:32:51:8e:e7:72:83:5a:30:c8:3b:3a:a4:
         b1:9f:72:40:ff:23:40:57:47:87:de:69:5a:79:db:49:ac:14:
         ea:ba:73:72:98:d0:38:cb:02:5a:3c:8e:56:76:47:f4:fb:c6:
         c2:0f:c4:44:cb:a0:3c:e7:c0:dc:9c:ae:4a:80:a4:1e:5e:b0:
         bf:e9:80:0f:33:3e:c1:5f:fe:fb:35:e8:c5:1e:91:83:0d:ed:
         47:50:ed:31:6c:6a:b6:a8:54:df:e3:1f:a5:70:70:c4:7b:28:
         e6:61:d8:8c:da:8f:44:52:71:92:41:9f:ef:cd:0d:ca:d9:3b:
         74:4a:06:0c:8e:a6:6f:c6:f0:65:d6:b4:81:aa:8a:be:d1:a5:
         0c:9f:d0:db:cd:7e:79:65:83:3b:dd:92:10:76:8c:6d:70:45:
         90:b9:4e:69:5b:97:06:c8:07:d2:bd:6c:16:51:87:d6:17:0d:
         82:d6:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----