Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/unwCOgFsiH1kUr-K67IYTSsMnBg.roa
File:                     unwCOgFsiH1kUr-K67IYTSsMnBg.roa (raw, json)
Hash identifier:          TPMAPJzHJ+/j8Xmf3dj4DmyczGfOKmkNTdgnik9ZhbQ=
Subject key identifier:   BA:7C:02:3A:01:6C:88:7D:64:52:BF:8A:EB:B2:18:4D:2B:0C:9C:18
Certificate issuer:       /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial:       473D26
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/unwCOgFsiH1kUr-K67IYTSsMnBg.roa
Signing time:             Tue 04 Jan 2022 12:23:33 +0000
ROA not before:           Tue 04 Jan 2022 12:23:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203764
IP address blocks:        2a06:ee80::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4668710 (0x473d26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
        Validity
            Not Before: Jan  4 12:23:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ba7c023a016c887d6452bf8aebb2184d2b0c9c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:c7:8e:ba:36:76:98:94:7f:34:6b:a2:71:
                    fd:f6:1e:bd:8d:af:4b:20:f6:4d:4e:ee:2f:ea:2d:
                    ff:97:4f:01:36:82:c0:ba:86:30:e3:69:23:ad:20:
                    11:60:90:aa:7c:7a:8a:cb:03:e1:e7:e5:bb:7d:35:
                    6b:e2:69:d8:41:6f:47:b6:cc:bd:ad:a6:4b:1b:b6:
                    b8:7d:9e:ef:23:9c:85:e9:53:fe:24:ee:68:41:ec:
                    ce:c5:77:67:9b:fe:3e:8e:d0:b9:5b:e7:4d:62:1c:
                    e5:a9:40:f9:dd:2b:f7:aa:f2:9b:51:0f:55:7e:46:
                    64:99:2a:dc:33:f4:98:bd:62:57:75:da:29:d8:0b:
                    79:d5:e8:25:ef:1c:88:a8:ca:19:be:2a:dd:3b:73:
                    e6:e0:99:92:2e:50:02:aa:65:0c:a4:26:5e:38:94:
                    65:fa:ba:a0:4c:6a:d6:27:36:73:6b:0f:d3:03:59:
                    6f:b0:ed:d2:d8:b4:f7:80:2a:ef:28:1c:f8:f2:0a:
                    49:12:3c:82:aa:7b:1a:80:bb:95:05:fe:bf:52:23:
                    7a:f4:95:97:27:2f:cf:f2:9d:00:9a:d2:3d:18:8a:
                    b4:cb:38:6a:d8:4a:ca:8d:1c:30:4c:2d:55:9a:75:
                    4a:30:87:40:42:b4:61:ee:ba:7c:1a:62:fc:9e:d4:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7C:02:3A:01:6C:88:7D:64:52:BF:8A:EB:B2:18:4D:2B:0C:9C:18
            X509v3 Authority Key Identifier:
                keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/unwCOgFsiH1kUr-K67IYTSsMnBg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:ee80::/29

    Signature Algorithm: sha256WithRSAEncryption
         53:aa:df:59:99:64:8c:48:c7:6b:db:61:ca:ed:cc:a7:e0:33:
         bb:33:c6:33:26:24:29:15:c4:4f:79:13:29:54:5e:5f:67:93:
         a1:99:e3:a0:9e:f9:b2:71:be:68:16:7b:4d:67:5a:c3:f8:cc:
         55:8c:98:85:0f:36:f8:db:39:82:71:26:07:eb:f3:57:16:7d:
         43:ad:16:37:29:6c:41:9b:75:ec:2a:68:5e:cf:bc:0a:52:4d:
         2b:63:ce:45:a3:e1:5d:d5:a8:42:0a:a2:eb:c5:c2:21:ed:e9:
         34:ee:9c:dc:20:8c:9f:f5:47:af:fc:79:80:3c:da:f5:eb:fc:
         53:01:55:3d:37:1c:01:71:93:c9:a1:b1:a1:8c:f8:66:6f:94:
         5f:7d:ca:b7:da:4a:49:b5:01:25:ae:95:68:dc:e3:2b:84:7d:
         1c:6c:6d:1f:8c:45:c6:65:b2:d7:a5:4b:7a:cc:8f:8c:b1:40:
         4a:4c:3f:b8:64:1d:38:df:a4:df:a2:3d:ed:7c:61:20:87:56:
         e5:96:69:ba:81:72:8b:95:73:b7:d5:9e:a1:08:fc:78:fb:72:
         19:44:3c:80:3a:c8:66:9f:58:4b:ee:e7:9a:ad:fc:dc:e5:1e:
         f4:ef:85:08:51:bb:d7:38:2e:f8:ed:d7:e2:67:b5:04:3a:da:
         ab:47:b7:5f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDRz0mMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBm
MmY4YjJiOTQ3MjFlOTI4ZjYxODhiNWNmMTUwNTMxNDRkZWRmOGMwHhcNMjIwMTA0
MTIyMzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiYTdjMDIzYTAxNmM4
ODdkNjQ1MmJmOGFlYmIyMTg0ZDJiMGM5YzE4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArDbHjro2dpiUfzRronH99h69ja9LIPZNTu4v6i3/l08BNoLA
uoYw42kjrSARYJCqfHqKywPh5+W7fTVr4mnYQW9Htsy9raZLG7a4fZ7vI5yF6VP+
JO5oQezOxXdnm/4+jtC5W+dNYhzlqUD53Sv3qvKbUQ9VfkZkmSrcM/SYvWJXddop
2At51egl7xyIqMoZvirdO3Pm4JmSLlACqmUMpCZeOJRl+rqgTGrWJzZzaw/TA1lv
sO3S2LT3gCrvKBz48gpJEjyCqnsagLuVBf6/UiN69JWXJy/P8p0AmtI9GIq0yzhq
2ErKjRwwTC1VmnVKMIdAQrRh7rp8GmL8ntQoPQIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFLp8AjoBbIh9ZFK/iuuyGE0rDJwYMB8GA1UdIwQYMBaAFA8viyuUch6Sj2GI
tc8VBTFE3t+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
RHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83Yi80ZTU5MDItZTI4My00OTE2LWEzM2MtNzIyNmE4ODQ1ZTAxLzEv
dW53Q09nRnNpSDFrVXItSzY3SVlUU3NNbkJnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80
ZTU5MDItZTI4My00OTE2LWEzM2MtNzIyNmE4ODQ1ZTAxLzEvRHktTEs1UnlIcEtQ
WVlpMXp4VUZNVVRlMzR3LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAG
CCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgbugDANBgkqhkiG9w0BAQsFAAOC
AQEAU6rfWZlkjEjHa9thyu3Mp+AzuzPGMyYkKRXET3kTKVReX2eToZnjoJ75snG+
aBZ7TWdaw/jMVYyYhQ82+Ns5gnEmB+vzVxZ9Q60WNylsQZt17CpoXs+8ClJNK2PO
RaPhXdWoQgqi68XCIe3pNO6c3CCMn/VHr/x5gDza9ev8UwFVPTccAXGTyaGxoYz4
Zm+UX33Kt9pKSbUBJa6VaNzjK4R9HGxtH4xFxmWy16VLesyPjLFASkw/uGQdON+k
36I97XxhIIdW5ZZpuoFyi5Vzt9WeoQj8ePtyGUQ8gDrIZp9YS+7nmq383OUe9O+F
CFG71zgu+O3X4me1BDraq0e3Xw==
-----END CERTIFICATE-----