Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/dlkDtlu1ugiwSfr7ErTXY0R2f2s.roa
File:                     dlkDtlu1ugiwSfr7ErTXY0R2f2s.roa (raw, json)
Hash identifier:          DIpI6nghWQC/Ai+3AyS9HMoSO6vVey3RQNQXOcIh8p4=
Subject key identifier:   76:59:03:B6:5B:B5:BA:08:B0:49:FA:FB:12:B4:D7:63:44:76:7F:6B
Certificate issuer:       /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial:       08829C63
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/dlkDtlu1ugiwSfr7ErTXY0R2f2s.roa
Signing time:             Sat 01 Jan 2022 10:00:20 +0000
ROA not before:           Sat 01 Jan 2022 10:00:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48446
IP address blocks:        2a02:c47:4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142777443 (0x8829c63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
        Validity
            Not Before: Jan  1 10:00:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=765903b65bb5ba08b049fafb12b4d76344767f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:60:06:87:a1:3a:6c:6b:fe:b3:5b:62:79:
                    23:e9:1c:74:58:be:fe:b6:92:2d:fc:a0:07:9e:1c:
                    9c:b2:23:bd:88:98:a0:06:dc:10:0d:92:96:00:52:
                    e5:87:98:31:9d:94:bc:67:e4:64:32:7d:57:b3:cd:
                    f9:7d:ad:58:c9:56:8b:13:80:80:9b:8d:ef:57:21:
                    3f:72:d6:7c:d2:c1:3f:f3:f5:0d:82:d7:5f:86:4a:
                    70:b8:f6:35:41:4d:85:39:15:17:d6:29:8f:83:2b:
                    bc:51:f9:68:bc:13:97:5f:85:e9:ca:b3:45:d8:1a:
                    8f:6f:eb:44:42:29:3f:f7:9a:3f:c3:f1:c0:ac:7b:
                    e2:94:2b:8b:18:bc:ad:83:31:af:0b:59:fc:39:4b:
                    ae:52:7a:7c:b5:77:1d:69:0e:d8:bf:fc:e6:95:5a:
                    a1:08:76:a7:98:10:ba:b3:9f:42:95:d1:6d:cb:c2:
                    ac:59:e2:53:93:82:35:59:dc:59:f2:5f:c3:4a:86:
                    4b:10:1e:88:97:48:d2:3d:a0:d7:5b:bb:ed:f5:d1:
                    17:fd:f2:1d:f7:e0:c9:74:93:83:10:ab:28:06:f4:
                    2e:98:0f:17:4c:64:86:e4:24:47:5d:08:dd:fb:96:
                    30:39:f2:a9:0f:ca:6d:de:8c:52:61:e3:16:98:ff:
                    a1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:59:03:B6:5B:B5:BA:08:B0:49:FA:FB:12:B4:D7:63:44:76:7F:6B
            X509v3 Authority Key Identifier:
                keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/dlkDtlu1ugiwSfr7ErTXY0R2f2s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:c47:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:2e:0c:d1:af:a6:fd:cf:dc:8f:db:f2:d8:a1:d1:2b:ad:d6:
         ca:78:2d:d6:f8:4e:ed:ec:e8:ba:c1:08:90:04:37:8b:c5:4a:
         ba:9f:6d:4c:b8:82:9e:c4:d1:66:ca:1d:84:cc:9b:11:14:14:
         a1:52:a6:71:29:52:7e:fb:19:82:0e:89:c7:7e:9d:a7:a5:90:
         51:17:0d:ec:ab:99:e8:db:c7:04:a7:36:ce:ed:6c:24:ca:cb:
         99:8f:f8:33:e2:0c:39:c6:45:3b:68:35:66:d8:19:54:d1:86:
         59:55:c9:4d:39:73:b5:b5:6d:1a:08:a1:d0:8b:d6:7f:0a:ce:
         e6:d7:2a:ef:55:a7:91:46:17:18:1c:59:23:e2:6f:e6:21:63:
         10:81:cc:9f:df:cb:2b:6f:20:6e:9a:03:05:c1:c1:40:58:44:
         09:2f:1d:d0:80:b2:c8:7e:a5:fc:95:2f:f5:1c:29:a1:57:7e:
         c0:bd:50:09:b2:d7:6d:fe:e6:85:f4:dc:7e:16:65:50:4a:02:
         aa:8d:7f:6c:ef:3a:d1:a6:51:2b:58:a8:03:23:9c:13:95:2b:
         f8:26:76:4f:28:b7:9a:74:3c:49:5f:e4:8e:a6:4c:9a:58:9f:
         fb:7f:e4:53:19:dd:cd:24:00:53:63:3d:26:0b:47:8e:43:fd:
         86:69:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----