Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/o25rgfdpU8lzOXTSpn-cCQx4baE.roa
File:                     o25rgfdpU8lzOXTSpn-cCQx4baE.roa (raw, json)
Hash identifier:          qU9ahO+lsJ6CjRYkk7b4QGkzQMKy6STiwbvud13iyOo=
Subject key identifier:   A3:6E:6B:81:F7:69:53:C9:73:39:74:D2:A6:7F:9C:09:0C:78:6D:A1
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       125CA349
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/o25rgfdpU8lzOXTSpn-cCQx4baE.roa
Signing time:             Tue 22 Feb 2022 21:58:15 +0000
ROA not before:           Tue 22 Feb 2022 21:58:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211184
IP address blocks:        2a0e:b107:1940::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308061001 (0x125ca349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 22 21:58:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a36e6b81f76953c9733974d2a67f9c090c786da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:d7:d9:90:94:61:7a:8a:e4:2d:e5:61:03:
                    b6:24:a3:22:0e:44:34:ef:bb:c1:77:cc:df:08:e0:
                    d9:f1:91:2a:d2:6a:09:f1:05:1f:9a:20:eb:88:d3:
                    26:04:fd:94:3b:89:c7:dc:b9:d7:0a:0a:2a:13:03:
                    18:ae:e2:ea:7d:87:b9:55:c4:67:c3:db:61:94:af:
                    88:ae:66:0d:34:02:51:32:a6:41:59:b6:c6:56:5f:
                    4b:ff:4d:e5:a4:0a:91:0c:ae:e9:a6:6b:cb:e2:d4:
                    4c:de:ab:27:00:90:97:95:90:47:d7:41:69:bd:f6:
                    7e:85:3d:00:2b:22:da:65:fd:6b:95:93:b0:21:8c:
                    f9:4a:48:03:ef:8c:af:5e:f0:33:4c:b2:58:0e:c3:
                    16:cd:2c:0e:1b:c4:7f:fd:fd:52:2a:70:e3:fb:7b:
                    34:4a:73:c0:52:18:7a:e8:84:e5:90:6f:1a:dd:6e:
                    3a:23:19:23:cb:73:0c:d4:6f:da:20:73:f8:f4:4f:
                    8f:6e:90:e7:be:ab:cb:f4:f0:79:ef:87:f6:ce:3b:
                    b1:75:b6:6b:55:b4:4c:1e:4a:da:38:45:70:0c:75:
                    a2:83:a6:46:1f:49:6d:18:4b:34:e1:77:31:95:25:
                    ed:19:9b:28:f7:3f:c1:c2:56:b6:68:dd:d7:53:fc:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6E:6B:81:F7:69:53:C9:73:39:74:D2:A6:7F:9C:09:0C:78:6D:A1
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/o25rgfdpU8lzOXTSpn-cCQx4baE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1940::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:8c:bf:4f:a9:96:59:be:d7:8a:6e:df:28:8a:c0:2a:6d:c4:
         bb:f2:72:d6:9a:6f:5a:46:75:9b:e1:9e:a3:66:af:ad:e6:83:
         9e:83:3a:39:d2:de:94:4e:ee:ac:7c:86:4b:e8:53:5e:77:f9:
         6a:ee:8f:6b:8d:e3:9c:44:35:d9:3b:cf:c7:9d:eb:f0:26:bf:
         66:ea:35:c5:69:9a:81:0f:62:3f:d6:9a:67:60:43:f4:be:b5:
         5d:31:c5:f1:f6:ca:e4:bb:09:38:b4:3a:7e:8f:1b:df:4e:e7:
         59:13:08:d8:97:3a:8d:8c:cb:bb:ae:78:f8:d0:17:68:0e:5f:
         ff:9c:4f:95:3b:ec:97:3e:38:b1:a8:45:f1:e1:9c:28:ae:f4:
         c2:b9:89:96:f3:6b:dc:35:3b:41:d3:75:b5:80:88:73:cc:54:
         88:74:44:b2:f0:24:68:f9:ed:9b:12:d3:bf:5b:06:ec:d2:f5:
         3e:bd:ba:19:d6:77:87:e2:28:7b:11:b9:07:62:4e:8f:65:8e:
         b3:b6:34:2d:fd:f6:4d:a7:a5:45:ff:8b:10:ab:af:24:0c:7e:
         3e:a9:ce:d7:90:1e:c5:af:81:29:f0:f3:0a:fa:e9:b2:e3:85:
         f0:fc:4b:87:eb:25:5a:d1:af:2c:4a:0c:49:99:e5:fe:8c:13:
         a6:ff:60:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----