Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/OakYE70Qa8DZYgCCx4ikxhu3Ye4.roa
File:                     OakYE70Qa8DZYgCCx4ikxhu3Ye4.roa (raw, json)
Hash identifier:          Z63iiHGBONuNfLUnDgqClpNas8VkMNT6ke1JF8v6RUk=
Subject key identifier:   39:A9:18:13:BD:10:6B:C0:D9:62:00:82:C7:88:A4:C6:1B:B7:61:EE
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       0183F428B53B1FD0B0782440DF913BC97B7F
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/OakYE70Qa8DZYgCCx4ikxhu3Ye4.roa
Signing time:             Thu 20 Oct 2022 06:50:51 +0000
ROA not before:           Thu 20 Oct 2022 06:50:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39831
IP address blocks:        2a05:4380::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f4:28:b5:3b:1f:d0:b0:78:24:40:df:91:3b:c9:7b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Oct 20 06:50:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=39a91813bd106bc0d9620082c788a4c61bb761ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6c:7d:b4:d0:60:2c:e9:b1:0f:43:89:15:26:
                    ae:2f:0c:5a:7d:b9:2b:a6:4a:06:e1:bf:d5:41:37:
                    8b:c4:c1:37:1a:e1:39:3c:09:9c:b8:51:1b:cb:a2:
                    88:14:a4:f6:7d:9c:a0:13:02:7f:55:da:00:4c:2d:
                    c2:b4:54:c2:81:d2:a5:03:9a:83:c1:34:01:c1:9e:
                    e9:ee:69:0b:5f:12:ae:6d:9d:85:dc:65:39:e8:5b:
                    5e:3c:d9:ab:3a:69:c7:b1:15:a8:7b:2e:51:aa:15:
                    29:8a:11:df:82:03:e6:6a:2c:f2:04:71:8f:d4:54:
                    1f:ed:1d:98:26:51:1a:43:eb:da:26:3c:fa:25:51:
                    c8:21:a4:af:0c:1f:bc:3a:dd:5c:3a:6a:86:b8:48:
                    7b:f6:89:55:0b:54:62:3b:b4:59:cf:12:46:3e:1c:
                    af:77:7f:32:18:8b:8e:4e:02:7e:55:a3:f3:e7:48:
                    a0:ad:4f:6f:96:7a:43:69:7c:46:48:9c:d7:c7:82:
                    72:a1:75:c6:ba:2c:0d:7c:fc:32:c8:10:df:a3:e1:
                    c9:99:e5:5c:85:fe:50:9c:52:57:f7:a2:c6:c7:e6:
                    03:77:f4:5b:cd:c3:b8:62:a5:f9:dc:95:8e:78:cd:
                    9d:d2:7d:df:49:82:4e:b1:26:d2:f8:b4:a4:93:2b:
                    af:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A9:18:13:BD:10:6B:C0:D9:62:00:82:C7:88:A4:C6:1B:B7:61:EE
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/OakYE70Qa8DZYgCCx4ikxhu3Ye4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4380::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:5e:bf:f2:66:4e:b8:96:5f:8e:f3:a5:bf:ad:9f:51:7f:83:
         9f:ce:8e:d9:ba:2c:7a:78:8d:4f:8e:b8:75:7c:39:21:be:a0:
         ff:3b:89:8a:bc:8b:0a:73:8d:e9:2b:ba:c2:62:74:4f:ca:ce:
         3f:7e:02:98:97:42:cb:0d:34:56:0b:23:23:9e:d8:00:12:97:
         e2:cc:82:2f:e0:7a:94:fb:98:ab:fe:3b:f6:e1:3f:9f:73:e5:
         82:e0:b9:32:8f:a8:a7:93:9a:c8:d9:38:06:1a:2d:08:0d:07:
         e9:cb:c8:31:35:ac:b9:4e:0f:da:01:db:b2:e4:e6:bc:bd:34:
         da:49:6c:1d:db:5c:20:a5:d4:06:c6:83:4c:cb:5a:cb:24:32:
         0f:d8:71:27:af:23:1c:52:af:13:60:f5:3a:20:6c:99:df:6f:
         54:7a:ce:5b:67:f1:99:cc:2f:9c:d8:1f:a3:56:52:68:be:e7:
         8f:3a:0e:2b:53:cf:31:c9:04:90:2d:62:39:0d:4e:4d:2c:15:
         d6:93:fc:e3:bd:c8:27:d3:8e:95:c2:f9:41:01:b4:50:9e:61:
         17:0f:08:a4:7b:8a:ae:45:5b:18:94:fc:cf:7d:3c:ec:1e:b2:
         f7:de:fa:4e:51:ff:ee:e0:50:eb:71:c3:ca:84:2e:8f:f3:57:
         f6:7d:f3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----