Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/4uKdI_vib3OQBt5Xrua5iB_bMOw.roa
File:                     4uKdI_vib3OQBt5Xrua5iB_bMOw.roa (raw, json)
Hash identifier:          3H4aVAE9Lq7VINf9La8/guLrY/B166rtZhHWDED4uME=
Subject key identifier:   E2:E2:9D:23:FB:E2:6F:73:90:06:DE:57:AE:E6:B9:88:1F:DB:30:EC
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       0970CE0C
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/4uKdI_vib3OQBt5Xrua5iB_bMOw.roa
Signing time:             Sat 01 Jan 2022 09:04:00 +0000
ROA not before:           Sat 01 Jan 2022 09:04:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208884
IP address blocks:        2a0e:aa07:f090::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158387724 (0x970ce0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 09:04:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e2e29d23fbe26f739006de57aee6b9881fdb30ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:1e:1f:b0:c4:4b:83:eb:7c:00:65:51:49:1a:
                    8b:f7:d9:47:97:52:23:f9:3d:f6:dc:8f:29:a0:c9:
                    b7:dd:b1:48:a5:3e:60:7f:87:a7:6a:6a:63:bd:7b:
                    73:12:8a:1e:61:9f:0b:63:62:ba:99:b5:6e:37:4b:
                    9e:52:5e:7d:08:41:a6:76:36:77:1b:8f:e7:b5:42:
                    ed:af:0e:33:64:b5:80:b2:d0:ee:df:c8:68:bc:a1:
                    9e:2b:44:91:f4:a2:ad:b9:03:eb:34:cb:db:c3:a4:
                    f8:b7:a5:26:84:49:19:b9:b9:90:73:20:50:30:68:
                    6a:64:a5:02:3d:78:25:49:52:7e:c9:e4:46:dd:de:
                    8b:94:58:e4:04:84:57:2a:78:6e:15:bb:d0:f9:1a:
                    90:59:69:d3:ed:fa:99:c9:c3:eb:b6:20:73:25:e2:
                    95:2a:eb:2e:73:18:a4:31:9b:71:f1:83:7a:c4:ff:
                    1f:82:86:6c:6a:4d:a6:a3:8b:14:91:28:15:e1:68:
                    e9:af:d7:7f:4e:bb:64:2a:93:8c:ef:72:43:7a:b3:
                    88:e2:69:db:9a:57:94:a2:4a:d5:32:c5:e5:d7:f9:
                    35:e8:0a:c2:0f:b9:f9:06:fb:68:13:c7:26:cd:90:
                    c7:86:60:30:45:09:d1:f0:2e:b0:4e:a7:98:ca:45:
                    cf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E2:9D:23:FB:E2:6F:73:90:06:DE:57:AE:E6:B9:88:1F:DB:30:EC
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/4uKdI_vib3OQBt5Xrua5iB_bMOw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:f090::/44

    Signature Algorithm: sha256WithRSAEncryption
         69:b7:9b:74:1d:b3:18:11:a3:69:c5:23:86:a7:63:f7:6c:cb:
         52:38:1b:91:ed:a9:c5:e9:6c:e3:d5:f4:5b:ac:5b:64:84:6a:
         3e:05:44:b7:1b:08:e0:dd:9c:e0:66:9d:8d:32:db:bf:02:4f:
         16:f9:cb:99:f3:b1:8d:53:76:76:7d:80:64:ff:bb:4e:f8:23:
         7f:08:75:dc:8f:88:42:df:64:62:b3:22:e9:58:fa:23:6b:99:
         71:ca:4d:c2:de:a5:be:6d:fe:40:6c:f2:f9:ce:74:64:5e:ed:
         49:5b:6d:30:61:05:ff:e1:ab:53:84:bc:f6:4a:ae:48:af:b6:
         e6:26:67:13:3d:2c:f5:e9:c0:16:db:4a:63:0f:30:b6:ad:44:
         e1:b5:fa:a0:f9:a3:04:86:82:f6:38:6e:76:df:e2:83:82:a0:
         69:f5:2a:04:37:79:49:2d:44:b5:e0:bb:50:57:db:c6:27:91:
         5b:eb:d9:cf:e5:9f:9f:bd:3c:9c:a4:12:cb:ad:55:e4:36:ed:
         e9:a9:35:70:24:99:da:0d:dd:80:34:c9:98:0c:4a:19:8e:f6:
         a0:28:1d:ff:a2:b9:21:96:36:e1:65:f6:21:c0:ed:21:55:62:
         34:a6:f6:9d:da:e8:f7:af:71:a4:07:1d:35:6d:16:55:4b:02:
         78:85:79:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----