Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/j6zjMiOZdHps1bf4h_SJiU8Xc4s.roa
File:                     j6zjMiOZdHps1bf4h_SJiU8Xc4s.roa (raw, json)
Hash identifier:          HevzbLbovKbKUAYsXPDmClTPhZPtoaE4wHC8+CgiBT8=
Subject key identifier:   8F:AC:E3:32:23:99:74:7A:6C:D5:B7:F8:87:F4:89:89:4F:17:73:8B
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       095CDE94
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/j6zjMiOZdHps1bf4h_SJiU8Xc4s.roa
Signing time:             Sat 01 Jan 2022 09:03:49 +0000
ROA not before:           Sat 01 Jan 2022 09:03:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58235
IP address blocks:        2a0e:aa01:ab01::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157081236 (0x95cde94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jan  1 09:03:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8face3322399747a6cd5b7f887f489894f17738b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:34:28:8b:cd:fb:2b:68:01:94:a7:37:99:
                    fa:69:52:ec:01:97:07:2e:cc:18:ba:d3:c3:1f:21:
                    93:cd:d7:8d:66:28:86:e9:59:01:49:c4:86:f8:e6:
                    25:fb:a1:80:63:1c:f2:12:eb:c6:f6:13:cb:75:22:
                    e3:a2:97:da:ed:59:95:a7:85:e7:1c:92:0a:3c:fb:
                    20:b0:31:49:b4:d5:3f:21:c2:10:36:2c:99:1f:5c:
                    65:31:ee:83:9a:1e:f2:06:f0:05:14:b0:0b:62:5f:
                    aa:00:1a:e1:f4:29:e7:60:a6:a8:73:cc:cf:80:aa:
                    76:54:4a:ec:2b:fc:ab:55:4a:e4:fd:55:4e:56:8e:
                    2b:37:bf:1c:2b:bf:45:bc:8d:3c:44:8a:76:9b:aa:
                    fc:ac:66:a4:69:ed:48:9b:7d:0f:21:1d:c7:43:a5:
                    de:c7:84:3d:cf:99:3d:52:fa:aa:78:ca:1d:98:a8:
                    b9:9f:ba:93:ac:18:79:94:0e:a6:06:dd:56:0b:a0:
                    9b:a2:c8:37:02:89:6e:f8:06:86:64:92:47:31:24:
                    3a:5a:23:75:37:04:bb:e5:1d:85:ef:19:28:1c:53:
                    39:49:18:23:81:24:71:de:84:0b:da:85:ee:bd:dd:
                    9b:33:16:1d:9c:83:3b:bb:4f:f7:de:35:d6:fb:69:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AC:E3:32:23:99:74:7A:6C:D5:B7:F8:87:F4:89:89:4F:17:73:8B
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/j6zjMiOZdHps1bf4h_SJiU8Xc4s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa01:ab01::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:fa:1e:2d:12:f7:b8:d1:51:1b:70:bd:7d:76:3c:ff:bf:ab:
         81:e5:73:57:ba:96:d8:12:12:e6:fb:56:34:84:93:40:26:2d:
         dd:b3:e6:2d:1b:aa:49:40:7f:34:43:a9:4b:eb:6c:11:ab:fd:
         8b:af:ab:96:f2:23:ba:5c:52:e4:56:8b:2d:c4:4b:00:ab:f7:
         57:7d:3b:2b:27:71:20:ac:f8:9e:72:1c:59:c5:71:ed:3c:12:
         6c:89:aa:3c:02:4b:7d:a4:7c:1d:f5:91:a0:be:a8:a6:69:10:
         a4:ec:2a:29:98:33:8e:42:dc:9c:0c:a1:c0:fd:2f:4f:0e:6b:
         fd:34:84:d4:09:52:49:fa:2e:c7:c5:95:75:68:30:55:8b:6d:
         69:c2:20:18:74:44:e1:85:5d:8f:20:90:e5:e3:25:1a:cc:63:
         33:a8:5e:0c:06:7e:a5:29:d0:b7:19:dd:f3:65:2b:f3:7b:2e:
         8a:57:ae:b8:eb:ac:db:e6:6c:e8:7f:d0:4c:07:dc:9d:f0:39:
         ce:aa:04:88:50:d7:49:c0:ea:f1:7c:69:4f:f2:e8:b3:15:da:
         00:e3:35:95:99:03:45:59:7e:4c:55:c7:58:b3:6f:46:02:d4:
         15:3c:30:2a:d6:49:80:82:fd:78:7a:13:73:92:47:c1:0e:d2:
         41:b0:d3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----