Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/Q2EJayLwx6JjbgE4lwc4vgoLWbo.roa
File:                     Q2EJayLwx6JjbgE4lwc4vgoLWbo.roa (raw, json)
Hash identifier:          erPBDH+38JMEP/dGFbf1jwTdInPgaQvclumVlhBu96w=
Subject key identifier:   43:61:09:6B:22:F0:C7:A2:63:6E:01:38:97:07:38:BE:0A:0B:59:BA
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       7DE1DC
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/Q2EJayLwx6JjbgE4lwc4vgoLWbo.roa
Signing time:             Tue 15 Feb 2022 01:08:15 +0000
ROA not before:           Tue 15 Feb 2022 01:08:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211398
IP address blocks:        2a12:4940::/32 maxlen: 48
                          2a12:4946:46::/48 maxlen: 48
                          2a12:4942::/31 maxlen: 48
                          2a12:4946:3005::/48 maxlen: 48
                          2a12:4946:6960::/44 maxlen: 48
                          2a12:4946:1600::/48 maxlen: 48
                          2a12:4946:1700::/48 maxlen: 48
                          2a12:4946:1800::/48 maxlen: 48
                          2a12:4946:1900::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8249820 (0x7de1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Feb 15 01:08:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4361096b22f0c7a2636e0138970738be0a0b59ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:3f:61:5f:fa:4a:32:42:f8:ae:84:a8:9c:
                    39:8a:f1:9b:67:02:a4:de:f3:91:58:69:e1:d3:89:
                    2f:39:b3:c3:f9:8a:3c:07:9a:cc:3a:36:fe:1c:02:
                    b6:fd:36:e6:a2:63:79:e1:3a:08:24:9d:f5:34:ae:
                    38:ca:76:2c:a9:3a:60:32:47:f0:82:5b:62:da:22:
                    76:86:27:a1:52:b7:3b:11:95:5e:a3:e4:86:91:ab:
                    d4:41:cf:32:ff:41:b9:49:e4:f7:ec:31:8f:c9:27:
                    70:b5:32:05:73:69:6b:da:cb:05:84:93:94:ee:7b:
                    ce:82:f3:ee:6d:d1:76:ed:e6:69:6c:67:92:ba:7e:
                    5c:ec:4d:08:20:cc:79:c2:40:04:e4:67:5e:ed:a4:
                    b9:e8:3f:6c:61:73:8c:72:d3:27:c0:5a:3d:4e:6c:
                    d7:70:ea:7a:63:8c:16:53:ca:5b:c7:61:ab:dc:a7:
                    4a:cc:98:b2:89:a4:b3:00:d8:4b:3f:f7:af:5f:1f:
                    06:c0:9b:3c:13:dc:53:11:19:36:ff:20:8a:29:4b:
                    c4:2b:04:67:6c:e1:15:95:38:eb:8f:c1:09:8b:a0:
                    2c:62:5b:a2:27:db:af:7f:51:99:8b:c0:d4:aa:4f:
                    f2:71:9c:8c:a8:8b:07:d9:59:12:92:6f:0b:ae:ae:
                    63:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:61:09:6B:22:F0:C7:A2:63:6E:01:38:97:07:38:BE:0A:0B:59:BA
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/Q2EJayLwx6JjbgE4lwc4vgoLWbo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:4940::/32
                  2a12:4942::/31
                  2a12:4946:46::/48
                  2a12:4946:1600::/48
                  2a12:4946:1700::/48
                  2a12:4946:1800::/48
                  2a12:4946:1900::/48
                  2a12:4946:3005::/48
                  2a12:4946:6960::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:93:03:2a:6e:3f:50:b0:46:18:17:72:ce:20:2c:aa:65:30:
         a3:e0:29:4f:b2:4e:36:de:ab:4a:f2:c4:74:57:14:a0:e4:3d:
         40:c9:56:f9:3b:57:d3:fc:94:74:71:e2:b6:05:3c:b1:c2:18:
         cc:e7:59:f5:4a:df:ed:04:95:43:22:1e:e1:a4:65:ff:3e:48:
         cc:a4:62:e4:af:b5:94:88:0e:94:5b:77:21:fa:4a:62:4c:70:
         f7:50:ec:12:db:46:18:80:77:db:c3:67:5c:88:f8:db:9b:31:
         34:e2:11:a0:3c:4b:7a:c9:a6:2f:53:b8:7a:e4:67:db:26:df:
         77:ab:cb:1b:81:e2:50:be:a8:63:62:fa:1f:96:a9:47:cc:5d:
         da:f1:57:b3:f9:6d:5b:49:d9:8c:98:14:70:8d:1b:87:6f:88:
         e8:85:78:ff:5b:dc:a0:72:c1:c1:a8:d3:80:f7:4a:bc:0a:6d:
         5d:23:7c:f8:07:a0:b8:6c:32:43:d1:ca:dc:02:1d:43:65:30:
         a3:8b:ff:99:7e:46:14:ca:bd:f6:c8:33:bf:e4:55:5f:61:1e:
         21:10:96:c0:06:d7:67:a0:58:12:33:55:4c:70:bc:74:70:01:
         a3:02:4a:76:12:08:7a:49:bf:c0:8b:6b:3b:37:8e:25:12:3c:
         6c:1a:49:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----