Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ifs3H9vWItlObIEapInojZ2Q33Y.roa
File:                     ifs3H9vWItlObIEapInojZ2Q33Y.roa (raw, json)
Hash identifier:          gtDc1a5W6ZJ5LMI3th6U350IGw4/UaBxDKe4FPJV0ds=
Subject key identifier:   89:FB:37:1F:DB:D6:22:D9:4E:6C:81:1A:A4:89:E8:8D:9D:90:DF:76
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       106D8C64
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ifs3H9vWItlObIEapInojZ2Q33Y.roa
Signing time:             Sat 01 Jan 2022 09:04:35 +0000
ROA not before:           Sat 01 Jan 2022 09:04:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9886
IP address blocks:        2a10:2f00:12a::/48 maxlen: 48
                          2a0e:b107:f08::/45 maxlen: 45

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275614820 (0x106d8c64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:04:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=89fb371fdbd622d94e6c811aa489e88d9d90df76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:a2:ee:d3:d1:4d:63:7d:76:c5:1d:48:5c:
                    a5:f6:5b:39:69:63:6e:dc:dc:e7:f5:83:20:14:e7:
                    c5:0d:fd:69:44:0f:b2:0b:b4:28:cf:23:99:92:32:
                    2f:ad:50:96:96:c9:f3:61:5d:15:cd:31:47:3a:88:
                    73:53:b3:9f:cc:a8:a4:46:33:2b:af:89:bd:5e:45:
                    8f:2e:37:d8:17:43:1b:19:8b:1a:66:24:d3:cc:cf:
                    7a:b8:79:08:16:7a:c9:67:6c:16:19:7d:99:5c:f0:
                    6d:80:87:a7:d0:64:89:a3:5b:dd:aa:19:a4:99:37:
                    ee:75:33:4a:51:e8:f5:d5:46:9e:ce:f5:f5:72:e8:
                    4e:5e:85:d8:25:3e:75:00:c9:2c:92:be:e0:d2:0a:
                    8a:1b:95:2b:57:32:df:9b:ce:cf:cc:10:d6:3e:66:
                    15:cb:97:29:c6:79:9b:56:89:d8:da:e7:d5:0b:e1:
                    9f:e3:d2:f7:15:50:69:d2:c6:84:eb:9b:31:ef:15:
                    35:80:2f:af:f0:57:61:05:70:cf:39:cd:21:d8:e0:
                    6c:89:bd:1d:b8:a1:3e:af:29:3c:64:f3:e6:ff:83:
                    7b:1b:b2:db:b1:e7:fe:b7:88:42:1c:99:59:52:4f:
                    38:50:03:ac:14:c0:a6:54:68:0e:2c:12:36:d5:44:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FB:37:1F:DB:D6:22:D9:4E:6C:81:1A:A4:89:E8:8D:9D:90:DF:76
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ifs3H9vWItlObIEapInojZ2Q33Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:f08::/45
                  2a10:2f00:12a::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:b2:bd:77:57:cb:fa:60:d5:50:fd:d0:f8:d4:ed:7e:77:d0:
         50:5b:e4:30:4c:79:ab:e0:72:42:4e:5d:ea:c5:a9:9a:57:58:
         a9:43:3b:fe:38:31:8b:8b:26:16:12:20:c4:17:c8:45:d5:5a:
         9a:d4:c7:7a:bf:a7:5e:4c:24:a9:f5:6d:93:38:62:f9:77:e9:
         80:71:d3:25:e3:99:d5:ac:e8:eb:91:7b:83:15:d2:8c:44:e9:
         7f:b4:1a:2d:27:76:3e:4a:d8:9d:d8:c4:59:05:2a:e8:73:37:
         11:58:fc:55:62:00:cb:03:7e:e5:b5:d0:3a:49:f8:dc:28:1a:
         b5:d1:c9:ab:eb:c1:3e:84:37:06:9f:e5:13:18:19:83:d4:19:
         b4:21:e8:98:1b:02:6f:f2:35:39:fd:0d:78:78:2a:23:30:16:
         57:47:90:52:d9:13:48:5d:32:e4:d5:1e:58:bd:25:f6:df:fc:
         b0:9e:df:e0:c2:59:e3:30:19:d4:91:83:8f:3f:20:93:3a:bf:
         17:93:7b:33:5d:46:16:0b:d8:2b:e9:8b:74:2f:b4:1a:ff:c5:
         60:93:0b:5f:be:fe:67:e8:c1:5f:c2:87:a8:3f:5b:31:a7:72:
         3e:71:c5:1d:fa:93:e0:cc:9b:20:e1:1e:b3:e3:da:d0:31:32:
         cc:3b:ab:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----