Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ebPQ7DbD6q72CSazlzs7nvBe8ag.roa
File:                     ebPQ7DbD6q72CSazlzs7nvBe8ag.roa (raw, json)
Hash identifier:          jX9gERvxhUilF4XtRDCs1AJgzTRi3GCHUe50h1Q1Vxg=
Subject key identifier:   79:B3:D0:EC:36:C3:EA:AE:F6:09:26:B3:97:3B:3B:9E:F0:5E:F1:A8
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018410C1E270BD0015FD449355A9E7869EB0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ebPQ7DbD6q72CSazlzs7nvBe8ag.roa
Signing time:             Tue 25 Oct 2022 20:07:32 +0000
ROA not before:           Tue 25 Oct 2022 20:07:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60998
IP address blocks:        2a0e:b107:6e9::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:10:c1:e2:70:bd:00:15:fd:44:93:55:a9:e7:86:9e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 25 20:07:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=79b3d0ec36c3eaaef60926b3973b3b9ef05ef1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:77:bd:47:9f:03:50:a0:2f:44:7e:ad:76:65:
                    d3:29:59:7a:0c:bb:e3:8d:a9:aa:cc:ec:52:7d:0e:
                    eb:bc:e4:4d:f5:fa:46:f1:03:1d:06:ea:d8:97:09:
                    ae:61:b7:38:d8:5d:e5:16:24:5f:bb:5c:ce:ed:c5:
                    e5:7a:f2:bc:12:be:77:8e:75:20:20:8d:91:a9:1c:
                    e5:7b:af:96:3a:3b:2b:c4:46:df:98:3b:d4:cb:dc:
                    7a:e7:5c:43:ac:1e:27:ed:91:68:82:ba:24:51:05:
                    c4:75:60:9c:eb:35:bc:71:f9:84:9e:70:3d:b3:05:
                    74:22:9f:0a:ff:d0:ed:78:5b:f0:e0:37:b3:ef:1c:
                    5e:7e:7a:e4:cd:03:ea:c9:d7:3e:fe:c4:4d:6b:e8:
                    db:3d:0e:51:88:ce:68:ef:6d:10:cf:82:c5:b5:8c:
                    16:c8:f6:66:af:7b:d7:1c:81:9d:fe:05:d2:6f:3a:
                    00:8b:65:25:b8:c6:0c:1d:75:14:fd:50:fc:a8:b3:
                    67:2f:ad:77:94:4f:9a:bb:86:07:e0:00:b2:13:49:
                    ee:f1:27:6b:1f:c1:d0:3c:89:a9:f8:c4:99:8c:96:
                    24:30:4a:38:30:c5:42:d0:5f:a4:38:5b:9f:64:a4:
                    fd:7d:8c:48:18:00:77:75:97:31:4c:1e:aa:e2:4b:
                    86:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B3:D0:EC:36:C3:EA:AE:F6:09:26:B3:97:3B:3B:9E:F0:5E:F1:A8
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ebPQ7DbD6q72CSazlzs7nvBe8ag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:6e9::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:cb:52:d9:c0:61:ab:b3:93:5f:d0:c5:79:ff:d5:7f:ef:17:
         ca:c6:c8:61:b8:0d:de:5b:a1:81:6e:bc:21:95:5d:13:42:f5:
         a1:a6:be:88:f3:09:5f:14:46:f3:2a:d6:6e:e0:29:c7:72:2b:
         13:07:0f:9d:c8:5f:7b:72:fc:47:45:2c:31:d7:ad:29:eb:3e:
         a0:46:1d:8d:bc:65:59:1c:16:9e:e5:c9:0b:a0:87:9e:92:af:
         06:d8:04:75:e6:d4:71:6d:bd:7f:1e:4e:12:0c:74:3d:c1:c0:
         86:97:ef:e8:09:d3:2e:6d:76:c6:d6:ef:a1:aa:25:63:3f:e6:
         65:55:93:af:a6:1b:64:ef:12:4b:ce:96:c0:d8:e1:c8:ef:5f:
         d2:90:ea:dd:bb:0b:02:c8:d2:ed:50:0a:6b:54:f1:e7:6e:d1:
         bf:23:11:c4:a0:1b:69:82:8a:81:c0:b5:a3:08:ad:ce:a4:15:
         9e:67:1d:d8:41:24:22:5f:c4:79:c5:19:00:1c:5e:a9:a1:18:
         d9:4b:f4:c5:36:e9:ef:15:0d:5b:04:b2:8b:9e:44:4b:1e:2b:
         5c:f9:9e:36:1a:24:51:95:5b:c5:7d:99:f7:25:43:a9:9c:4c:
         6f:ee:27:2f:66:94:2e:d3:de:82:cd:fb:04:ca:64:97:e7:d0:
         7c:e8:b8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----