Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/JQ34Q-8a8DZpqnrT-54QrlSpB0A.roa
File:                     JQ34Q-8a8DZpqnrT-54QrlSpB0A.roa (raw, json)
Hash identifier:          fW2nzvAy7awSLO1B8NjtRZOYk4X6ig8pegbWc8dE0WQ=
Subject key identifier:   25:0D:F8:43:EF:1A:F0:36:69:AA:7A:D3:FB:9E:10:AE:54:A9:07:40
Certificate issuer:       /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial:       01854B0512B68E41A593E172440A6658E74B
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/JQ34Q-8a8DZpqnrT-54QrlSpB0A.roa
Signing time:             Sun 25 Dec 2022 20:41:41 +0000
ROA not before:           Sun 25 Dec 2022 20:41:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        2a0a:4a40:10::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:4b:05:12:b6:8e:41:a5:93:e1:72:44:0a:66:58:e7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
        Validity
            Not Before: Dec 25 20:41:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=250df843ef1af03669aa7ad3fb9e10ae54a90740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:d3:a0:a5:18:66:9a:b5:da:b0:5c:51:aa:
                    c5:43:00:f8:cb:ec:d8:c5:28:d1:f4:01:3c:5a:17:
                    da:e7:54:85:b3:ad:39:54:09:61:1d:63:aa:bc:82:
                    b2:6a:1e:9c:60:df:b0:12:03:64:4d:4f:87:4a:04:
                    ae:09:25:6c:9d:58:64:84:b4:c5:f1:13:36:41:9f:
                    59:2d:e9:0c:1d:39:91:42:62:41:6f:2c:65:56:21:
                    72:94:6a:e5:28:92:33:51:e9:37:44:c9:97:26:fd:
                    06:c5:23:42:70:6f:a0:57:64:41:c4:61:53:bc:70:
                    81:c5:8d:c4:11:7b:fb:11:3e:c2:9e:00:9a:4a:5d:
                    bd:fc:c0:2e:b4:3b:60:78:e2:64:b3:19:be:be:17:
                    1c:f5:b8:e8:26:9e:bd:59:26:d4:01:ad:88:be:c0:
                    76:ad:70:85:fa:2d:96:db:e0:93:a3:a9:98:c6:78:
                    ac:28:22:50:0c:13:7e:dc:f1:21:4a:a3:06:bd:dc:
                    30:1d:e0:ec:75:7f:07:01:12:43:39:8e:8a:cc:f5:
                    e2:9e:21:47:02:32:07:09:28:d5:d5:2b:5c:bd:9e:
                    b9:70:5a:83:5c:ee:98:3c:12:54:73:b4:e1:8f:78:
                    96:1d:fa:21:36:77:d1:74:5e:c4:23:c4:c7:c1:63:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0D:F8:43:EF:1A:F0:36:69:AA:7A:D3:FB:9E:10:AE:54:A9:07:40
            X509v3 Authority Key Identifier:
                keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/JQ34Q-8a8DZpqnrT-54QrlSpB0A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:4a40:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:83:d4:44:80:3c:a1:85:b1:f2:21:ab:1a:93:52:57:c6:a9:
         2b:fa:af:c0:dd:ec:81:45:3b:fd:3f:2f:26:59:14:47:c7:a3:
         d7:b1:21:af:2d:c1:cb:66:8f:44:2c:68:3a:55:f2:d5:72:f6:
         9a:37:81:19:1f:6d:e5:ed:a1:89:af:11:fe:00:1c:67:6c:fe:
         6d:c6:76:4a:23:1a:47:df:10:5c:44:ec:9c:8f:a9:d0:5d:6e:
         d3:40:30:09:04:a0:d1:b5:79:ce:99:b8:37:bd:dd:8d:4d:69:
         1b:96:f7:16:0d:39:6d:48:ac:c9:38:9f:aa:3c:81:57:f4:6a:
         9f:df:f4:22:98:f9:cf:e8:cf:6f:63:c8:6c:ec:93:87:0e:df:
         3f:81:d6:ee:89:46:98:89:2f:51:b7:02:5b:34:88:16:9c:62:
         8e:04:5e:8e:2d:1e:f2:61:34:61:8c:dd:06:bc:8f:c7:5e:af:
         64:4e:1f:d7:59:98:01:a6:86:5f:02:52:80:da:4f:5a:65:86:
         68:6d:92:04:c4:87:79:c4:b7:11:11:a6:4f:b1:d5:b8:07:e4:
         f5:1d:73:aa:0a:2e:0a:f0:f3:51:64:28:59:ce:6f:6a:0a:d9:
         92:44:14:5f:a1:b5:40:9b:ba:ff:5c:2d:82:88:4a:7d:93:86:
         23:19:11:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----