Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/09unDwQn2qhXNn9tQsDA20TxNSA.roa
File:                     09unDwQn2qhXNn9tQsDA20TxNSA.roa (raw, json)
Hash identifier:          Vhmg7g79PI9sFNn5IsmNZ4cwbmd2kSh+gHx1+5eqHgk=
Subject key identifier:   D3:DB:A7:0F:04:27:DA:A8:57:36:7F:6D:42:C0:C0:DB:44:F1:35:20
Certificate issuer:       /CN=710068d5bf1bffd79174e37501bfa17f917b313d
Certificate serial:       DD2C
Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/09unDwQn2qhXNn9tQsDA20TxNSA.roa
Signing time:             Thu 06 Jan 2022 10:38:40 +0000
ROA not before:           Thu 06 Jan 2022 10:38:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1712
IP address blocks:        2a04:8ec0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56620 (0xdd2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d
        Validity
            Not Before: Jan  6 10:38:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d3dba70f0427daa857367f6d42c0c0db44f13520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:94:c4:e7:61:a2:8d:95:44:ea:6d:1f:5d:
                    13:d3:11:bb:7e:21:48:2b:ee:ef:c8:2e:e2:f8:ec:
                    f2:f5:ea:2c:fa:c7:8e:c3:0e:bd:96:32:ec:3a:01:
                    e4:54:92:3e:34:ab:53:6b:73:e2:88:bb:a9:ce:6b:
                    5c:f8:7a:7a:57:d2:4c:a4:f0:4b:30:9b:cb:2b:15:
                    8a:c5:db:84:9b:84:41:ad:a8:ec:9d:bb:e8:de:59:
                    3d:0e:6e:0f:0b:d4:f8:a9:d1:e1:e5:7a:19:b5:91:
                    4d:b3:7d:64:67:7d:bf:f3:a0:71:72:2b:fe:4a:98:
                    38:2c:4a:06:49:fc:77:bf:61:f5:bf:fa:e6:1b:2c:
                    c5:ec:32:ac:22:8c:57:40:c0:42:d5:b7:bb:ba:a0:
                    e0:6d:66:69:6f:33:df:de:0c:9f:55:59:fd:9d:f1:
                    ea:5c:73:ce:4c:28:cf:dc:09:10:e6:e3:12:aa:e9:
                    af:43:72:3b:ff:cf:4b:23:8d:c9:f6:83:87:dd:88:
                    cd:a4:74:80:53:12:8f:bd:5e:26:5e:1c:a6:09:f4:
                    0a:a1:59:2b:35:43:ba:a8:0f:87:8e:88:23:65:c8:
                    71:cf:35:d5:73:93:e7:fb:68:4e:02:f0:90:9c:5c:
                    7b:bc:19:18:c6:75:e3:08:cf:16:13:b8:5a:d2:da:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DB:A7:0F:04:27:DA:A8:57:36:7F:6D:42:C0:C0:DB:44:F1:35:20
            X509v3 Authority Key Identifier:
                keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/09unDwQn2qhXNn9tQsDA20TxNSA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:8ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:0a:20:ac:3e:5f:fd:28:f9:62:86:d0:85:bd:69:68:62:7e:
         a1:b6:ca:ae:14:0c:1d:b3:b4:8b:cf:34:0e:a4:f3:13:77:9e:
         1f:18:d7:08:f8:36:7d:27:d8:b1:63:b2:98:48:4b:0c:ea:de:
         52:0f:6d:b5:96:72:49:78:54:ec:93:71:96:de:de:7d:00:fc:
         da:7a:fc:ab:f5:ec:47:19:df:67:14:66:76:ef:d1:9f:e2:d7:
         75:4d:94:39:cc:cb:67:60:5c:b9:2f:44:c3:ae:4c:eb:b9:63:
         f8:ef:9c:5d:c2:34:52:ad:8e:57:b9:67:46:88:45:28:09:a2:
         f8:4f:b7:31:7f:2e:11:be:df:54:c6:73:01:f7:03:f7:0b:49:
         6f:04:76:1d:2c:d9:2b:e1:0a:6b:84:12:db:66:6f:44:ef:14:
         c9:42:59:cb:5a:2b:32:77:71:e9:6e:e9:9e:0c:e9:5c:50:2c:
         75:d3:dd:b4:b4:3a:94:e7:63:81:97:5f:bd:6a:be:f6:f5:86:
         41:03:41:64:d6:af:99:f0:da:5e:d3:b3:8f:2f:e7:73:4c:ae:
         66:df:aa:ca:0f:64:ac:18:a4:15:8c:a1:10:50:83:35:83:63:
         fb:4b:05:b1:be:8c:aa:09:03:00:b8:db:6a:13:d0:dc:87:6a:
         68:6c:ad:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----