Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uoA5FQKL89Q7DkxXZbSXtD4ihW4.roa
File:                     uoA5FQKL89Q7DkxXZbSXtD4ihW4.roa (raw, json)
Hash identifier:          9+wmd/gAAqtRrzLPDRAsFAsElElRDulL3yI9jrlxY+w=
Subject key identifier:   BA:80:39:15:02:8B:F3:D4:3B:0E:4C:57:65:B4:97:B4:3E:22:85:6E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       15363651
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uoA5FQKL89Q7DkxXZbSXtD4ihW4.roa
Signing time:             Sun 19 Jun 2022 12:43:47 +0000
ROA not before:           Sun 19 Jun 2022 12:43:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205043
IP address blocks:        2a0e:97c0:b15::/48 maxlen: 48
                          2a0e:97c0:b10::/48 maxlen: 48
                          2a0e:97c0:b13::/48 maxlen: 48
                          2a0e:97c0:b16::/48 maxlen: 48
                          2a0e:97c0:b11::/48 maxlen: 48
                          2a0e:97c0:b14::/48 maxlen: 48
                          2a0e:97c0:b17::/48 maxlen: 48
                          2a0e:97c0:b12::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355874385 (0x15363651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun 19 12:43:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ba803915028bf3d43b0e4c5765b497b43e22856e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fe:e4:01:38:c7:c7:62:44:98:5c:b1:28:3c:
                    d3:33:c6:e4:92:b0:5a:df:4b:d2:4a:53:69:57:6d:
                    40:f6:29:28:b6:95:5f:e4:a4:61:90:67:4f:f9:46:
                    97:19:47:ec:c4:8a:0e:62:be:af:b8:a2:28:f2:a2:
                    66:71:94:21:8f:55:a7:fa:f0:3c:f4:b1:7e:fa:e6:
                    cf:00:a4:bd:bf:04:9e:6e:d1:d0:0c:79:a7:0b:87:
                    37:39:f1:88:ad:bb:7f:22:ad:8c:94:83:b2:fd:c7:
                    38:f7:07:3b:ce:27:07:6c:06:87:58:63:83:fd:2a:
                    8a:a0:fd:eb:b0:0f:00:9b:33:c7:30:35:43:fd:59:
                    29:92:53:cc:05:63:63:cf:6b:f0:12:8e:af:3e:3e:
                    f9:91:ed:91:1b:27:9d:07:27:51:31:d7:cf:53:13:
                    84:69:c3:fc:1d:be:d1:76:6d:f9:9e:ed:f6:56:04:
                    2c:a5:bf:9f:c1:1e:6c:bd:c2:5f:b3:b7:39:7c:25:
                    9e:34:7d:37:37:70:20:39:6f:2d:d7:44:f4:4b:c2:
                    cf:e5:6d:c8:df:6d:61:3e:69:32:62:a1:10:1f:a2:
                    ab:33:81:91:db:23:13:35:24:95:01:ce:12:42:11:
                    6f:10:49:66:6b:6a:67:f7:a3:40:14:8e:bb:e2:0a:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:80:39:15:02:8B:F3:D4:3B:0E:4C:57:65:B4:97:B4:3E:22:85:6E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uoA5FQKL89Q7DkxXZbSXtD4ihW4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:b10::/45

    Signature Algorithm: sha256WithRSAEncryption
         73:03:6e:0e:4b:66:dd:4e:00:e3:ca:b3:e2:73:ca:6f:b5:9b:
         31:98:17:b7:80:59:7f:0e:b1:bf:82:78:02:76:3d:96:83:51:
         d7:e0:43:48:e3:bd:fb:50:a5:f5:1f:b3:e5:56:04:69:a7:6f:
         44:1f:60:b1:ab:35:59:ea:b9:c7:11:3b:64:26:5d:e6:87:a5:
         5e:1c:80:e8:fa:8a:a4:50:19:50:ed:86:7d:e7:ba:8f:d5:d4:
         ac:a6:8c:72:26:6b:91:d4:1e:11:81:6a:4f:ac:e6:75:72:20:
         2c:0b:d8:d5:f1:f3:54:d4:71:2d:b2:91:45:59:a4:e9:7d:eb:
         43:95:43:a6:4e:5f:b6:45:9a:f9:8c:bd:7b:48:7a:90:03:34:
         3e:5c:a5:6e:8d:0e:cc:f6:95:94:c9:d1:0a:11:72:8d:83:7a:
         1d:de:83:59:b6:99:0f:7c:7d:55:e5:57:3c:67:ee:66:e9:48:
         de:10:72:fc:c9:d6:0b:f4:6a:40:b9:88:87:74:96:74:32:ef:
         ef:5d:e8:e0:25:59:ea:ea:7b:03:95:4a:c9:d4:7b:25:c4:14:
         0c:3e:db:3f:4f:fd:ac:c0:29:c2:91:5d:5c:e6:8b:a3:8f:6e:
         e6:ac:03:ce:45:45:72:23:2d:e3:f9:1c:2f:f6:69:4d:fa:63:
         48:bd:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----