Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/Saxi8rwIWdL9v84FSf-uYgLFO64.roa
File:                     Saxi8rwIWdL9v84FSf-uYgLFO64.roa (raw, json)
Hash identifier:          U8TD+md0vYSa795NfxLgcd5I0mrgX2aZR/xrg3tNlw0=
Subject key identifier:   49:AC:62:F2:BC:08:59:D2:FD:BF:CE:05:49:FF:AE:62:02:C5:3B:AE
Certificate issuer:       /CN=1e398285e227827d8f2c51f1ea997357554be612
Certificate serial:       0A199A98
Authority key identifier: 1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/Saxi8rwIWdL9v84FSf-uYgLFO64.roa
Signing time:             Sat 01 Jan 2022 04:55:04 +0000
ROA not before:           Sat 01 Jan 2022 04:55:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62445
IP address blocks:        2001:678:898::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169450136 (0xa199a98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e398285e227827d8f2c51f1ea997357554be612
        Validity
            Not Before: Jan  1 04:55:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=49ac62f2bc0859d2fdbfce0549ffae6202c53bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b1:2d:dc:4f:33:71:a1:c3:96:3f:4a:0c:36:
                    4d:8f:e3:fa:75:65:b3:8d:74:e6:ed:15:ce:26:a1:
                    ca:a9:7b:a6:64:4d:75:b1:f6:21:35:45:2b:f5:64:
                    71:59:1f:f8:47:12:28:ff:f3:b9:44:93:14:2d:25:
                    32:7b:7c:00:d6:d5:3c:d4:af:b8:4f:90:90:18:58:
                    49:9b:2b:44:2a:46:b7:f0:cb:00:51:a9:cd:85:fb:
                    52:cb:44:86:13:f8:fe:6d:f1:00:bf:8c:9e:2c:28:
                    e0:92:f5:bb:de:54:f9:c0:7f:82:c0:cb:d1:d2:7f:
                    e6:04:71:0d:a3:da:ba:00:10:b2:8b:22:f0:21:20:
                    70:33:45:de:cb:a2:10:65:b3:a6:9a:df:43:1c:d1:
                    29:f1:64:97:e5:ae:11:e3:7c:46:f6:b9:e0:f1:9d:
                    c8:3e:bd:bc:2d:65:a2:3b:02:60:c3:8b:1f:f6:fb:
                    3a:58:82:a4:29:e5:a8:31:86:53:75:28:56:e9:48:
                    4e:f7:06:18:01:e8:b5:2e:31:52:4e:3c:15:13:fb:
                    28:bd:a6:c9:eb:1a:da:3c:1c:b3:12:70:d9:38:4b:
                    25:08:60:7c:10:8b:77:ed:e7:4a:ff:d5:1b:4e:af:
                    a4:c2:71:60:1f:df:c3:47:ea:16:c9:42:b3:7c:37:
                    d9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AC:62:F2:BC:08:59:D2:FD:BF:CE:05:49:FF:AE:62:02:C5:3B:AE
            X509v3 Authority Key Identifier:
                keyid:1E:39:82:85:E2:27:82:7D:8F:2C:51:F1:EA:99:73:57:55:4B:E6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjmCheIngn2PLFHx6plzV1VL5hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/Saxi8rwIWdL9v84FSf-uYgLFO64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/309980-afd7-4569-a25b-e909e41a07e5/1/HjmCheIngn2PLFHx6plzV1VL5hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:898::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:5f:37:cb:4b:28:3d:1c:60:65:d4:61:d8:36:66:00:9f:67:
         4a:04:c5:7a:c4:1a:45:78:1b:5d:ec:c0:53:ca:15:bc:ac:8d:
         b6:18:35:83:f1:68:68:da:8b:3c:98:80:96:d8:fe:32:7e:ee:
         f5:90:48:e2:35:f3:fe:26:1b:bf:15:33:dd:2c:1b:bd:2a:ee:
         a4:8d:84:81:2d:1f:40:bd:a4:68:c4:65:a6:ba:29:6a:e6:7c:
         5d:e9:4a:e0:c4:49:c1:6f:91:8d:98:07:db:17:5c:f3:06:8c:
         f1:45:f5:cb:58:fa:63:58:4b:d0:11:e9:91:bf:6b:b8:d0:3a:
         70:03:b2:6d:e8:4f:11:4e:ee:1d:fc:18:a0:eb:a3:47:34:ad:
         41:a8:8d:02:05:2f:26:f8:dc:44:3b:1a:31:9c:b7:29:ae:15:
         2c:d8:31:33:f4:1d:41:95:be:46:49:8a:57:6b:78:97:12:60:
         c9:3d:ec:ff:ce:29:76:18:fd:e1:c5:98:55:ff:aa:9f:70:1a:
         7e:23:29:76:6b:af:d9:24:e8:72:24:a4:f9:b3:ab:71:1f:58:
         36:d8:a6:09:d9:70:05:32:09:20:c7:e2:09:15:b2:df:75:45:
         67:11:02:c6:1b:82:fd:85:a2:f5:68:4a:ea:01:8c:e6:32:0e:
         cc:bf:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----