Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/Ka8CrWHdCjIJ1IkGRZdD4Cp1l2I.roa
File:                     Ka8CrWHdCjIJ1IkGRZdD4Cp1l2I.roa (raw, json)
Hash identifier:          DvDC7aWCU+9U5WsrznazS3xsh9YqE98wCslW1uAG5Bc=
Subject key identifier:   29:AF:02:AD:61:DD:0A:32:09:D4:89:06:45:97:43:E0:2A:75:97:62
Certificate issuer:       /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial:       040203AC
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/Ka8CrWHdCjIJ1IkGRZdD4Cp1l2I.roa
Signing time:             Wed 20 Apr 2022 09:42:54 +0000
ROA not before:           Wed 20 Apr 2022 09:42:54 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61102
IP address blocks:        2a10:1fc0:4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67240876 (0x40203ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
        Validity
            Not Before: Apr 20 09:42:54 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=29af02ad61dd0a3209d48906459743e02a759762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a2:98:d1:6e:88:19:38:5a:3f:dd:a6:b5:98:
                    58:7a:e4:42:da:80:36:46:83:eb:43:ca:b2:80:db:
                    d4:cb:8f:01:c2:36:39:a6:84:c6:b4:c6:f0:47:85:
                    af:08:ea:88:43:7f:4d:3e:66:7f:63:6e:9b:e1:aa:
                    11:fc:cf:63:23:76:05:c9:77:ae:ed:10:ab:91:0c:
                    fd:58:ed:54:de:8c:e8:96:c8:2e:d9:49:ce:80:fc:
                    bf:1e:20:be:83:20:0b:27:79:da:64:5a:78:2f:4f:
                    d3:41:52:d5:0f:9f:44:90:f8:de:db:6d:43:a0:ca:
                    b5:ef:7f:1a:64:7a:4c:12:b3:30:0a:4e:5c:54:ca:
                    2b:fb:a1:e8:4a:68:9d:00:db:ab:fc:d0:b0:66:5d:
                    67:e3:6a:c1:ca:41:1b:58:d1:07:12:04:01:90:27:
                    91:bb:4c:f5:81:41:79:08:c4:9e:0a:ec:83:fe:e9:
                    4f:78:66:77:e1:ae:37:f0:f6:c9:a5:48:84:82:b5:
                    fa:4a:27:16:21:6a:79:d7:67:88:38:a9:73:b0:80:
                    bd:10:91:a3:bd:60:f0:6d:55:fb:08:8d:e3:3e:86:
                    bd:92:de:28:6b:b8:e1:61:bd:1d:0c:ff:58:8c:4e:
                    d1:20:c6:dd:63:40:57:d6:46:ee:80:00:db:c3:4e:
                    c4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AF:02:AD:61:DD:0A:32:09:D4:89:06:45:97:43:E0:2A:75:97:62
            X509v3 Authority Key Identifier:
                keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/Ka8CrWHdCjIJ1IkGRZdD4Cp1l2I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:1fc0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:02:9d:83:32:fd:f2:e3:8c:de:23:f1:62:7f:b9:d7:27:fe:
         85:11:0d:ba:e8:62:39:65:06:09:9b:d8:04:73:df:ba:64:85:
         a2:bf:3e:61:3a:03:72:e1:97:97:49:f3:42:36:d0:8b:8e:84:
         5e:d3:1e:5b:4f:01:c7:96:b0:7e:09:38:25:5c:2a:52:88:42:
         aa:0e:be:f2:2b:99:5d:59:df:57:53:09:2f:cf:38:2b:1b:9e:
         70:57:77:c5:00:e4:5f:2b:bb:51:32:7e:12:b9:e9:09:62:d9:
         be:6d:18:42:b5:57:ac:74:3e:50:d5:01:62:f0:33:e0:70:50:
         58:51:2f:ee:98:7f:80:0a:09:da:7e:a8:13:90:4c:5a:e4:2d:
         cc:9f:dd:86:72:fe:4c:97:6a:06:e1:29:b6:16:ca:02:65:1c:
         4b:71:44:30:14:66:1d:2e:77:8e:47:8d:1b:92:17:06:b1:d2:
         1c:af:29:94:7d:bd:ba:82:8c:a5:8f:46:9f:54:6d:e5:4c:17:
         3e:d0:13:7e:9a:90:1b:33:96:92:13:b8:c0:d4:8e:db:09:08:
         47:ce:ce:cc:53:e0:2a:31:96:f5:55:7f:40:3f:40:6d:cd:79:
         56:be:9f:05:d0:3f:b1:48:02:f8:7d:d5:89:76:d2:47:73:78:
         2e:b4:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----