Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/jEBEeecy76WbYcw3ynYDws0mpEY.roa
File:                     jEBEeecy76WbYcw3ynYDws0mpEY.roa (raw, json)
Hash identifier:          MPaASRDdG+9D6Eo3WROkVpoOrxLSocILUUgz+ghGde4=
Subject key identifier:   8C:40:44:79:E7:32:EF:A5:9B:61:CC:37:CA:76:03:C2:CD:26:A4:46
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       0100F143
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/jEBEeecy76WbYcw3ynYDws0mpEY.roa
Signing time:             Wed 13 Apr 2022 13:24:10 +0000
ROA not before:           Wed 13 Apr 2022 13:24:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211398
IP address blocks:        2001:678:f30::/48 maxlen: 48
                          2a12:4940::/32 maxlen: 48
                          2a12:4946:46::/48 maxlen: 48
                          2a12:4946:3005::/48 maxlen: 48
                          2a12:4946:1655::/48 maxlen: 48
                          2a12:4946:1650::/48 maxlen: 48
                          2a12:4946:1900::/48 maxlen: 48
                          2a12:4946:1800::/48 maxlen: 48
                          2a12:4946:1700::/48 maxlen: 48
                          2a12:4946:1600::/48 maxlen: 48
                          2a12:4942::/31 maxlen: 48
                          2a12:4946:6960::/44 maxlen: 48
                          2a12:4946:1658::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16838979 (0x100f143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Apr 13 13:24:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8c404479e732efa59b61cc37ca7603c2cd26a446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:19:86:ca:32:8f:7e:b5:b1:b7:52:50:1f:e9:
                    21:a8:df:61:36:e1:b5:45:ad:c4:87:4d:36:1f:a6:
                    b2:3e:59:aa:08:fc:4e:b1:de:6e:0d:09:aa:7a:bf:
                    26:12:47:f6:b9:52:1a:6b:8a:9f:40:dc:1a:21:d2:
                    13:8d:0a:4d:29:53:13:6e:6c:c2:cf:ab:a0:29:21:
                    b0:d3:72:d1:39:95:9d:16:c0:05:b7:06:8d:80:26:
                    73:01:8a:44:67:72:2b:06:ca:e7:17:cd:e4:d6:02:
                    c1:f0:c4:e4:e4:61:51:c1:66:c3:d9:6e:62:fe:4a:
                    9b:76:a2:ee:f1:53:e4:01:0e:50:0b:bf:7a:e3:f3:
                    38:dd:e8:cb:af:16:00:e9:74:cc:ba:bd:10:d2:0b:
                    83:18:09:7e:82:a2:61:14:5f:c9:89:de:e3:8e:eb:
                    c9:c9:a1:59:d3:a8:75:24:90:46:8e:c1:5e:fa:08:
                    7d:48:cf:6a:b9:61:7a:60:39:9d:77:f5:c9:42:da:
                    c4:5e:ae:49:83:be:75:d4:45:10:5c:57:46:65:ec:
                    57:71:b0:c3:8a:58:d5:ed:7a:4c:07:57:fd:16:e1:
                    db:35:61:fd:82:f1:86:31:d2:57:d0:aa:d7:be:a1:
                    73:94:c6:bc:08:28:d9:3b:1d:5e:c1:9f:7e:8d:b9:
                    dd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:40:44:79:E7:32:EF:A5:9B:61:CC:37:CA:76:03:C2:CD:26:A4:46
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/jEBEeecy76WbYcw3ynYDws0mpEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:f30::/48
                  2a12:4940::/32
                  2a12:4942::/31
                  2a12:4946:46::/48
                  2a12:4946:1600::/48
                  2a12:4946:1650::/48
                  2a12:4946:1655::/48
                  2a12:4946:1658::/48
                  2a12:4946:1700::/48
                  2a12:4946:1800::/48
                  2a12:4946:1900::/48
                  2a12:4946:3005::/48
                  2a12:4946:6960::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:ed:80:95:a3:2b:e1:8f:27:44:98:58:d8:cc:41:a9:bf:3a:
         1a:e9:9f:bc:4a:3b:d9:88:0a:1d:a5:c4:d7:32:4c:bd:94:a9:
         c7:3b:72:ff:f8:12:72:69:6a:92:43:1a:5c:b1:a1:5e:74:9b:
         50:f5:fc:16:1a:f3:fa:00:2e:5c:95:c3:c3:40:0d:cf:56:1c:
         2e:57:79:d6:8d:28:f7:97:1e:83:d9:69:42:92:26:10:ae:c5:
         47:1a:93:6c:ae:20:08:3a:b7:2d:59:9b:82:cd:b6:7f:b8:0e:
         88:ea:b2:7e:bc:ba:41:d7:c7:14:be:fb:da:c4:09:86:09:4e:
         6d:90:a1:73:75:21:a4:78:50:1d:6f:c4:ac:9d:45:68:d6:06:
         34:1f:52:67:e8:0e:ff:f2:c0:1d:fa:23:e6:b8:10:d5:30:0e:
         a1:7b:6d:90:e0:58:3c:20:bf:96:ea:11:48:57:07:3a:d2:62:
         eb:bb:c4:92:31:b7:e2:16:70:e7:49:07:e8:01:e7:c4:e6:e6:
         37:bc:39:21:b0:ee:3c:c2:69:15:2d:f6:77:12:58:87:b7:0e:
         ec:6c:ac:cc:e7:7f:15:a0:26:ba:ac:88:75:05:3b:f8:92:50:
         26:f4:8a:82:b6:c2:28:9d:19:c4:d0:a6:66:e9:32:3a:cf:29:
         8e:a2:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----