Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/PK7g-3eAYzOhJ3HJWs4jsamf-N8.roa
File:                     PK7g-3eAYzOhJ3HJWs4jsamf-N8.roa (raw, json)
Hash identifier:          1FIEN+aJTfW7+G1qgwww7GrDvMLuPhxkcqu+nleUL88=
Subject key identifier:   3C:AE:E0:FB:77:80:63:33:A1:27:71:C9:5A:CE:23:B1:A9:9F:F8:DF
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       02B0E9C4
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/PK7g-3eAYzOhJ3HJWs4jsamf-N8.roa
Signing time:             Sat 01 Jan 2022 02:01:13 +0000
ROA not before:           Sat 01 Jan 2022 02:01:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60781
IP address blocks:        45.80.50.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45148612 (0x2b0e9c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: Jan  1 02:01:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3caee0fb77806333a12771c95ace23b1a99ff8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ae:5d:14:3f:a7:09:3a:d2:e1:60:a2:af:0d:
                    41:2e:e0:d0:7c:a4:b7:65:21:ce:0f:8e:e1:18:fb:
                    84:d1:13:fe:92:2f:10:4b:0f:8c:28:18:67:bf:e4:
                    bb:ea:07:43:3f:a3:bc:15:5e:36:09:e6:04:47:a5:
                    c9:f3:51:0e:fd:62:4c:29:96:ad:17:d2:12:21:3a:
                    36:87:3e:3c:84:0e:8e:1f:f7:3e:12:cb:b9:15:50:
                    33:4c:04:08:0e:24:14:ef:20:22:9e:ad:d0:c7:7f:
                    75:12:dc:b9:be:72:0d:ec:2b:78:3b:7a:93:63:bf:
                    0b:7b:df:94:75:e9:c8:fb:33:62:8d:f8:38:5b:2d:
                    27:e3:b7:c0:2b:c4:3c:d0:3e:50:6c:51:38:2b:9f:
                    08:76:88:a8:48:63:b6:1f:69:66:67:48:24:5c:59:
                    fc:72:2a:35:c1:6c:ee:5a:54:89:e9:66:c6:c9:29:
                    5b:37:ad:ff:ef:90:af:35:90:71:45:09:19:d2:85:
                    3b:79:b8:16:29:5f:c5:67:f6:b3:6f:e6:73:5e:57:
                    c1:76:48:96:e8:ca:9f:0e:c4:c9:89:76:fd:86:4d:
                    ea:38:74:e3:34:15:99:3b:c6:a0:65:d4:e8:a4:c8:
                    14:70:81:96:8d:e0:53:77:20:38:bc:1c:58:db:af:
                    a9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AE:E0:FB:77:80:63:33:A1:27:71:C9:5A:CE:23:B1:A9:9F:F8:DF
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/PK7g-3eAYzOhJ3HJWs4jsamf-N8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:d1:23:43:38:0e:1b:d0:89:2d:93:32:c8:b3:d7:8a:33:67:
         2f:ae:ac:72:6d:a8:3e:48:15:0a:c2:d0:a0:2c:ed:83:bb:4c:
         ef:78:3f:1d:34:a1:a1:c7:66:ab:9a:c5:31:cc:e0:07:16:88:
         79:41:88:a1:19:a3:6c:40:b6:ba:03:8c:2c:0d:0e:7b:fb:f5:
         a6:04:7f:9e:83:f9:4d:6d:1b:34:58:72:92:26:aa:2e:d3:83:
         74:d9:6b:fc:56:a8:48:c5:e2:ad:2a:52:20:c5:be:5f:52:ca:
         5c:95:54:11:88:1b:5e:c4:19:13:8c:d2:b4:c3:bd:07:15:02:
         56:2a:87:c7:97:0d:37:5f:a6:57:17:1c:44:cb:bb:09:13:e3:
         2d:9b:de:38:03:49:60:68:16:d1:bb:d1:5b:71:af:e6:a2:f8:
         4c:5b:7b:47:51:70:f4:51:1f:16:a6:f9:1d:19:5d:d4:87:72:
         57:c8:59:ca:b5:bf:e8:57:27:39:55:ee:7b:03:f5:d7:e5:5f:
         ab:43:ee:c6:fe:60:a9:8d:47:dc:96:56:00:4e:1a:d9:0f:b4:
         05:2d:84:e7:ac:ca:79:85:40:cd:96:7a:b0:35:66:c8:4e:64:
         8d:38:84:23:c4:a5:c2:26:7c:96:a5:44:7f:22:82:f7:ba:87:
         de:34:af:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----