Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fln51TennmmZDyyKzOAc7s-LfvI.roa
File:                     fln51TennmmZDyyKzOAc7s-LfvI.roa (raw, json)
Hash identifier:          Bk+bQYz8K3WvKdQiuKzgDeqVmLeFnqMQlGTqOJ8B+RY=
Subject key identifier:   7E:59:F9:D5:37:A7:9E:69:99:0F:2C:8A:CC:E0:1C:EE:CF:8B:7E:F2
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018509289A0C894B0C13C2401F3981A2E6F2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fln51TennmmZDyyKzOAc7s-LfvI.roa
Signing time:             Tue 13 Dec 2022 01:45:33 +0000
ROA not before:           Tue 13 Dec 2022 01:45:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200872
IP address blocks:        2a0e:97c0:5f0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:09:28:9a:0c:89:4b:0c:13:c2:40:1f:39:81:a2:e6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec 13 01:45:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e59f9d537a79e69990f2c8acce01ceecf8b7ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:58:3c:85:1a:63:58:75:54:2b:9f:84:aa:4d:
                    4c:09:60:13:df:8d:ca:34:82:d8:27:79:53:43:8e:
                    7f:db:ab:d7:2c:c9:dd:e5:30:aa:19:04:d5:a3:96:
                    c1:85:b5:39:60:98:b2:dc:85:5f:28:7d:52:04:41:
                    13:eb:eb:0d:a7:7b:b8:bd:48:da:59:f2:11:7e:31:
                    cb:0d:bc:eb:6e:4b:8d:4e:9f:53:b8:b7:fb:38:e4:
                    c9:84:c8:96:84:19:36:10:7b:64:ef:fb:8b:4b:80:
                    e7:8a:e9:af:f8:02:35:d0:42:6b:4f:dc:23:0d:07:
                    92:e5:84:0a:31:7a:25:20:46:12:7f:e6:c6:bd:ee:
                    c0:67:10:c7:d1:67:9f:f9:61:d3:c1:02:d8:62:48:
                    a2:85:ca:14:ce:3e:4b:b7:dc:22:8a:74:f9:85:8f:
                    81:8b:f6:7d:4e:ab:db:44:30:0a:a9:4e:d2:86:23:
                    ed:0d:92:0c:a8:94:97:da:a1:36:06:ec:22:9c:be:
                    f4:25:1d:84:40:08:75:37:ec:6e:60:4c:6e:c9:b5:
                    00:04:af:60:a8:09:af:e5:22:c2:c9:d2:75:86:75:
                    ba:4e:fb:db:b8:1b:e2:68:61:04:0c:df:a6:cf:cf:
                    7f:b6:18:fb:3d:db:91:70:1a:08:97:f3:86:bd:fe:
                    8c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:59:F9:D5:37:A7:9E:69:99:0F:2C:8A:CC:E0:1C:EE:CF:8B:7E:F2
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fln51TennmmZDyyKzOAc7s-LfvI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:5f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:54:c4:cd:4d:60:7d:38:83:b1:51:58:dd:5c:c8:84:05:9f:
         ae:ea:f3:58:8c:05:78:80:04:e2:db:c0:30:1b:dc:6b:c7:e9:
         55:aa:de:b2:d4:ad:61:70:2e:78:0b:dc:6c:7d:45:3e:62:0a:
         c6:0f:55:02:4a:91:c1:1a:ba:69:f4:09:b5:6f:74:d0:a4:26:
         ef:ae:38:67:ce:8c:cf:35:78:27:98:a8:bb:31:91:b4:2b:ba:
         86:cc:37:d8:07:c5:6a:c5:64:39:80:2a:7c:45:70:44:ee:c0:
         89:50:a7:c7:02:f3:c6:3f:cf:26:13:b7:40:3a:67:cf:18:a6:
         2c:d5:ba:cc:91:ff:0c:34:d4:cb:43:9a:45:bc:cd:06:dc:4b:
         c6:e8:84:b4:1f:6b:eb:50:2c:67:aa:04:8c:6f:a5:6f:46:1a:
         5a:df:68:c3:1d:c6:d3:fd:89:be:7a:f5:85:bb:48:31:ae:31:
         b4:84:1d:35:8a:7c:c6:7d:7f:a9:ff:93:b7:ea:e4:84:54:a2:
         78:e0:d8:ad:1d:35:7f:0f:68:36:87:60:a3:bb:9a:b6:f6:c8:
         4b:46:d4:c0:79:69:6d:a8:50:9e:bb:49:12:72:56:fc:28:fb:
         70:3a:30:bd:29:66:6c:a0:51:ee:3a:e6:31:03:5a:79:28:a3:
         a0:cb:a5:a0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYUJKJoMiUsME8JAHzmBoubyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjIxMjEzMDE0NTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTU5ZjlkNTM3YTc5ZTY5OTkwZjJjOGFjY2UwMWNlZWNmOGI3ZWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lg8hRpjWHVUK5+Eqk1MCWAT343K
NILYJ3lTQ45/26vXLMnd5TCqGQTVo5bBhbU5YJiy3IVfKH1SBEET6+sNp3u4vUja
WfIRfjHLDbzrbkuNTp9TuLf7OOTJhMiWhBk2EHtk7/uLS4Dniumv+AI10EJrT9wj
DQeS5YQKMXolIEYSf+bGve7AZxDH0Wef+WHTwQLYYkiihcoUzj5Lt9wiinT5hY+B
i/Z9TqvbRDAKqU7ShiPtDZIMqJSX2qE2BuwinL70JR2EQAh1N+xuYExuybUABK9g
qAmv5SLCydJ1hnW6TvvbuBviaGEEDN+mz89/thj7PduRcBoIl/OGvf6MhwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFH5Z+dU3p55pmQ8siszgHO7Pi37yMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvZmxuNTFUZW5ubW1aRHl5S3pPQWM3cy1MZnZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6XwAXw
MA0GCSqGSIb3DQEBCwUAA4IBAQACVMTNTWB9OIOxUVjdXMiEBZ+u6vNYjAV4gATi
28AwG9xrx+lVqt6y1K1hcC54C9xsfUU+YgrGD1UCSpHBGrpp9Am1b3TQpCbvrjhn
zozPNXgnmKi7MZG0K7qGzDfYB8VqxWQ5gCp8RXBE7sCJUKfHAvPGP88mE7dAOmfP
GKYs1brMkf8MNNTLQ5pFvM0G3EvG6IS0H2vrUCxnqgSMb6VvRhpa32jDHcbT/Ym+
evWFu0gxrjG0hB01inzGfX+p/5O36uSEVKJ44NitHTV/D2g2h2Cju5q29shLRtTA
eWltqFCeu0kSclb8KPtwOjC9KWZsoFHuOuYxA1p5KKOgy6Wg
-----END CERTIFICATE-----