Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vkCQKp6ALKrEMh1yJhwyLrWMUEo.roa
File:                     vkCQKp6ALKrEMh1yJhwyLrWMUEo.roa (raw, json)
Hash identifier:          7SdY3nJCXI1/F5EnksRtU3edLpZL2LlzxT73QyGtCXc=
Subject key identifier:   BE:40:90:2A:9E:80:2C:AA:C4:32:1D:72:26:1C:32:2E:B5:8C:50:4A
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       107E3AE7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vkCQKp6ALKrEMh1yJhwyLrWMUEo.roa
Signing time:             Sat 01 Jan 2022 09:04:48 +0000
ROA not before:           Sat 01 Jan 2022 09:04:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58336
IP address blocks:        2a0e:97c0:550::/44 maxlen: 48
                          2a0e:b107:16b0::/44 maxlen: 48
                          2a10:cc42:120::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276708071 (0x107e3ae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:04:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be40902a9e802caac4321d72261c322eb58c504a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ec:18:3c:1b:38:d8:f6:a8:38:ac:e3:d2:c3:
                    88:40:e8:03:d7:d5:15:f4:4c:1a:fc:53:a8:fe:ec:
                    33:86:04:a7:81:d4:d0:8b:89:04:02:bf:2e:07:93:
                    dd:56:42:1b:d9:ea:be:e4:1e:d5:c6:af:fd:3a:ae:
                    85:8d:84:5d:66:7f:47:1c:e1:10:bc:f8:28:52:72:
                    19:be:31:ec:d3:ca:07:7f:a5:60:bc:49:2d:cd:2a:
                    86:e8:0a:e0:2a:7d:5f:c3:1a:6c:8c:1b:4e:6f:34:
                    be:33:b9:ee:4b:c9:ad:62:7b:33:cc:a0:f0:3c:77:
                    bf:96:97:22:eb:92:c9:a5:5f:48:44:3d:44:9b:ce:
                    d2:5e:e6:c3:07:23:20:4d:26:8d:83:31:08:17:df:
                    92:c1:1d:2a:57:4d:2d:fc:2b:3c:06:41:80:20:f9:
                    f6:4a:80:64:91:3c:85:e0:6b:b2:54:c1:96:27:af:
                    d2:1d:65:2a:68:1d:4d:23:fa:cb:d3:51:6a:69:72:
                    db:da:a0:ba:17:b7:3f:6e:8c:7b:19:87:41:dc:ba:
                    74:10:e2:64:be:96:73:c1:5c:6f:04:bc:98:14:b1:
                    cd:eb:fa:65:ce:89:81:3a:2c:45:b8:ac:09:33:81:
                    c3:41:c8:45:f0:78:f7:a4:f7:e0:92:1d:6b:a3:02:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:40:90:2A:9E:80:2C:AA:C4:32:1D:72:26:1C:32:2E:B5:8C:50:4A
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vkCQKp6ALKrEMh1yJhwyLrWMUEo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:550::/44
                  2a0e:b107:16b0::/44
                  2a10:cc42:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         1f:62:5f:9f:c9:ac:65:da:43:bb:f8:9d:cd:48:1d:09:fd:01:
         33:0a:89:47:1f:6e:62:93:8c:07:72:b5:7c:75:02:8c:96:c1:
         21:e6:29:79:6d:ea:86:01:d7:42:14:24:44:19:66:cc:e4:fb:
         f9:c3:03:53:b9:28:c7:68:2e:0a:5e:7d:b0:e0:69:e2:39:ca:
         a1:cc:6a:4c:f2:f2:68:a3:62:00:03:1f:95:71:40:20:77:45:
         3d:c1:f4:ac:e4:ed:c0:25:27:04:1f:ab:59:05:66:35:cb:e8:
         a5:07:3e:13:51:7e:bb:f2:ea:3a:d1:bb:a4:e6:c7:54:76:e1:
         58:9c:4f:35:42:bf:42:18:cd:81:70:7c:94:29:a7:8c:ef:d4:
         77:f1:0b:e8:24:ad:01:07:33:fb:f9:82:03:5b:df:5a:c0:ae:
         ad:d1:17:21:f0:19:d0:49:63:05:ac:11:a6:46:f2:73:6c:55:
         0c:56:9f:64:c8:81:8e:a6:66:72:7d:62:06:76:33:58:0b:0f:
         58:9b:51:c6:f9:e2:13:80:97:53:34:d0:ef:47:3e:df:ea:eb:
         61:27:6a:90:ed:b6:b6:93:04:5b:c5:07:36:63:c1:0c:71:e5:
         73:a5:99:f8:4a:39:80:21:97:11:d7:6c:a3:bd:43:bd:8c:a7:
         9e:d6:3e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----