Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/dMj1G_dV4u_wU13-CznMi9RW5Pc.roa
File:                     dMj1G_dV4u_wU13-CznMi9RW5Pc.roa (raw, json)
Hash identifier:          0EJ1wy0Hl4cFJW7QrNEiKkNktWEFgZrRpfvMz2AvWSM=
Subject key identifier:   74:C8:F5:1B:F7:55:E2:EF:F0:53:5D:FE:0B:39:CC:8B:D4:56:E4:F7
Certificate issuer:       /CN=5df53645843e6d2883dc8f9c4f415c1eadbbf60a
Certificate serial:       04D0EEB6
Authority key identifier: 5D:F5:36:45:84:3E:6D:28:83:DC:8F:9C:4F:41:5C:1E:AD:BB:F6:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XfU2RYQ-bSiD3I-cT0FcHq279go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/dMj1G_dV4u_wU13-CznMi9RW5Pc.roa
Signing time:             Tue 15 Feb 2022 20:36:26 +0000
ROA not before:           Tue 15 Feb 2022 20:36:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208686
IP address blocks:        2a10:4741:27::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80801462 (0x4d0eeb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df53645843e6d2883dc8f9c4f415c1eadbbf60a
        Validity
            Not Before: Feb 15 20:36:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=74c8f51bf755e2eff0535dfe0b39cc8bd456e4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:3a:06:23:69:60:6a:4d:ed:e4:bc:f1:e8:
                    33:93:12:37:53:24:4d:59:41:0d:33:f3:97:c6:d5:
                    d4:4a:0b:92:7d:45:99:db:32:d0:bc:a6:f1:dc:66:
                    03:f9:53:11:0c:56:be:54:be:88:ad:6c:02:e4:e7:
                    5b:b1:95:6d:dd:29:dc:6b:e0:c4:54:3a:be:c0:8e:
                    1d:9e:f0:ff:97:24:ef:c9:27:a1:8c:19:d5:64:39:
                    3a:3c:af:30:a0:a3:d8:97:88:0e:40:f4:d3:f2:d9:
                    39:7d:32:1e:1a:e3:30:e2:86:56:7f:90:16:9d:6b:
                    19:65:83:ce:ea:0e:db:ed:bc:d8:7a:b1:0d:2e:6d:
                    15:0c:f0:f3:26:c2:0e:ca:2d:38:7f:04:c2:8b:15:
                    dc:0f:62:22:bd:68:99:dd:11:76:77:e2:00:a1:be:
                    3d:0c:0c:a6:9b:c0:38:71:71:7d:84:da:51:95:3e:
                    db:47:d2:73:48:f9:e4:d5:91:78:70:01:e5:1d:58:
                    ff:c4:56:bb:95:f7:b8:9c:60:1d:f7:58:9a:46:fb:
                    dc:a3:a2:49:b3:bc:05:6a:b4:ea:54:96:78:6d:e2:
                    34:e8:30:ec:be:19:c7:40:da:68:db:e9:4e:fa:ee:
                    3a:4e:a7:66:78:52:1a:12:c2:be:c5:94:87:8f:80:
                    69:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C8:F5:1B:F7:55:E2:EF:F0:53:5D:FE:0B:39:CC:8B:D4:56:E4:F7
            X509v3 Authority Key Identifier:
                keyid:5D:F5:36:45:84:3E:6D:28:83:DC:8F:9C:4F:41:5C:1E:AD:BB:F6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfU2RYQ-bSiD3I-cT0FcHq279go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/dMj1G_dV4u_wU13-CznMi9RW5Pc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d107de-e2e5-4727-98ad-3821810344e6/1/XfU2RYQ-bSiD3I-cT0FcHq279go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:4741:27::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:93:71:49:d4:25:53:31:90:74:09:62:2f:06:34:80:45:11:
         e2:2d:93:73:ca:04:30:4c:f6:b1:52:44:e1:10:17:33:cd:34:
         29:e2:1a:17:59:9f:be:58:a9:a2:3e:ca:e2:8f:9f:14:1a:49:
         9d:c4:3f:da:72:16:0b:96:c8:0d:da:af:02:19:fb:bf:f0:6e:
         7b:fd:7f:fd:5b:82:c1:94:f6:c3:d1:11:00:d3:10:db:60:ac:
         1f:fe:3f:b0:3b:7f:f7:0e:76:31:44:51:87:d4:99:78:52:10:
         be:bd:fc:5a:7f:b8:fe:5e:ef:5e:c7:12:29:b4:9d:a3:82:3d:
         ba:a3:58:b3:1a:30:50:43:7d:7e:f2:e8:73:5d:92:02:09:0f:
         44:b9:ac:f6:eb:35:3f:21:86:5e:9b:c7:8a:20:97:c7:07:53:
         f3:f2:56:56:4c:c5:8b:e1:49:2f:13:a5:89:8d:56:e6:67:a7:
         d9:95:04:a5:21:db:13:4e:3b:f5:de:27:ab:90:7e:3a:83:f3:
         ea:11:dd:91:f3:d3:3e:4b:60:97:bf:ea:d0:c5:87:c9:1a:c1:
         26:a6:28:7e:9a:b5:51:4f:53:ab:46:03:ee:94:ad:c2:bb:7b:
         4f:4b:41:54:a5:33:79:86:3e:bd:0e:18:a3:dd:63:fb:bd:63:
         da:47:af:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----