Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iElX-5xe9KohNyBkEQ3WwA4o_Hs.roa
File:                     iElX-5xe9KohNyBkEQ3WwA4o_Hs.roa (raw, json)
Hash identifier:          BBJ3q67jGHPvK/AL1n2YkmBVOh3e98OO0sPBLhA4cJc=
Subject key identifier:   88:49:57:FB:9C:5E:F4:AA:21:37:20:64:11:0D:D6:C0:0E:28:FC:7B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10A0C6AB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iElX-5xe9KohNyBkEQ3WwA4o_Hs.roa
Signing time:             Sat 01 Jan 2022 09:05:09 +0000
ROA not before:           Sat 01 Jan 2022 09:05:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208717
IP address blocks:        2a0e:b107:220::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278972075 (0x10a0c6ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=884957fb9c5ef4aa21372064110dd6c00e28fc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:dd:2e:a2:9e:56:23:45:63:59:8c:69:81:
                    6b:de:f0:41:e3:cb:02:da:a1:ab:c5:01:04:7b:be:
                    44:d4:ba:03:d0:8a:8e:e8:8a:dc:a2:da:84:a5:95:
                    e0:a0:47:0a:52:50:f3:de:d5:60:d2:df:3e:3f:c5:
                    b1:71:4e:52:9d:a2:44:eb:72:cf:a1:37:59:b7:b5:
                    3c:90:8b:3b:79:f7:8d:f8:a9:80:6d:dc:a9:64:6a:
                    f6:cc:96:e3:b7:fa:4b:6d:c5:ef:17:42:7c:34:2b:
                    5b:e1:dc:2e:ac:50:cf:1b:47:5d:49:ad:73:3d:f7:
                    4d:bf:9e:f4:8e:b1:45:ed:55:08:2d:f7:b6:8b:54:
                    6d:0c:88:fc:47:58:9c:ba:b5:8d:b3:1e:5d:af:de:
                    8e:bb:82:2e:b9:6c:ee:35:7d:31:cb:e8:f3:3e:66:
                    6a:0c:05:78:ba:22:98:38:22:e2:bc:c1:5c:73:7c:
                    e2:6a:fd:4f:2c:f9:9f:b1:91:01:cb:ac:43:84:5b:
                    47:a4:58:60:1b:fc:a5:f3:d0:07:98:4f:6c:74:7f:
                    c9:8d:52:1b:79:7f:1b:77:45:8d:09:27:2b:13:62:
                    7a:a8:ee:37:eb:a3:d7:ea:c6:29:46:31:46:ac:68:
                    1e:b7:98:07:4b:87:de:c2:77:b0:96:15:a1:7f:bb:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:49:57:FB:9C:5E:F4:AA:21:37:20:64:11:0D:D6:C0:0E:28:FC:7B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/iElX-5xe9KohNyBkEQ3WwA4o_Hs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:220::/44

    Signature Algorithm: sha256WithRSAEncryption
         43:0e:65:b7:63:fb:ad:97:a3:4a:8a:11:6e:21:1e:48:40:78:
         0f:da:77:29:7d:f9:8f:2d:cd:33:c8:f0:55:74:15:37:76:bc:
         0a:76:eb:5d:bd:63:0c:33:41:9f:4a:bb:8f:5f:88:f4:50:c3:
         3b:d8:3f:c8:d3:eb:d8:b6:39:a4:2d:f8:3f:77:09:d2:8b:31:
         4e:11:d9:51:de:46:7d:30:d0:c7:f0:e6:36:f9:b7:19:0c:08:
         68:cf:0a:5f:49:c8:25:0c:3e:7e:71:04:d2:4c:ae:21:14:56:
         81:19:01:b0:6b:f5:cc:ee:23:f3:83:f3:ac:a6:dc:7d:6a:98:
         9d:43:c6:61:36:f3:0f:a4:4c:71:9a:d4:23:68:3a:23:33:5b:
         77:a8:e7:58:d6:cd:3c:43:c2:d2:e6:be:0a:2c:b9:24:2c:c1:
         f1:4b:f3:cc:e3:e8:3a:2d:87:20:5c:5f:71:bd:39:22:a6:c8:
         5f:76:83:8b:e9:4a:30:55:82:58:2f:e3:78:93:97:db:1f:18:
         9a:7d:b8:d6:6a:c9:31:3c:1f:5f:7e:e0:03:a6:7a:01:05:77:
         6f:5b:42:d5:18:46:73:0a:04:f3:39:6e:89:74:6f:51:42:5b:
         b1:48:45:ec:3d:ae:05:28:71:c7:07:6f:6c:88:40:fd:01:f3:
         90:b2:19:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----