Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/iyotq66R_fQ8Ig0b5NPvCX_reRk.roa
File:                     iyotq66R_fQ8Ig0b5NPvCX_reRk.roa (raw, json)
Hash identifier:          GyZ/qpG2vzAXkaQirYplgr669Q2OlY7tQd07bKXe5Ds=
Subject key identifier:   8B:2A:2D:AB:AE:91:FD:F4:3C:22:0D:1B:E4:D3:EF:09:7F:EB:79:19
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       09B7DB52
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/iyotq66R_fQ8Ig0b5NPvCX_reRk.roa
Signing time:             Wed 22 Jun 2022 12:05:33 +0000
ROA not before:           Wed 22 Jun 2022 12:05:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        2a0e:1b43::/32 maxlen: 32
                          2a0e:1b41::/32 maxlen: 32
                          2a0e:1b45::/32 maxlen: 32
                          2a0e:1b47::/32 maxlen: 32
                          2a0e:1b44::/32 maxlen: 32
                          2a0e:1b42::/32 maxlen: 32
                          2a0e:1b40::/32 maxlen: 32
                          2a0e:1b46::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163044178 (0x9b7db52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: Jun 22 12:05:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8b2a2dabae91fdf43c220d1be4d3ef097feb7919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:f0:03:eb:e6:75:38:25:8e:d5:fc:b4:a1:
                    f9:b4:f7:f5:8a:8d:09:57:50:06:b8:13:61:44:fa:
                    ce:d1:4a:93:61:55:b1:aa:e3:15:28:97:a6:c7:25:
                    98:4a:db:c8:2b:b6:d4:22:26:95:38:11:cb:09:44:
                    f8:75:54:a5:dd:96:9f:29:f5:aa:cb:ce:dc:d5:e6:
                    f7:47:6d:c8:74:1f:9a:f9:10:06:c7:05:fb:a9:77:
                    67:2a:10:5a:41:7e:33:c6:cc:e3:8d:a4:7b:bc:ab:
                    fe:a3:40:fe:28:60:a3:a0:99:c8:c6:97:ab:c4:60:
                    e6:8c:dc:b9:09:51:13:c5:fa:6f:6e:df:47:86:b0:
                    d9:0a:d4:fa:16:91:58:3c:63:fa:ce:e9:f4:91:46:
                    31:e8:d9:2d:df:43:88:a2:f2:4f:32:2e:3b:ec:55:
                    48:21:cb:6c:be:e7:9e:57:22:a5:61:2c:40:d8:54:
                    37:c6:0d:65:37:bc:26:f6:77:c4:d0:1f:47:18:29:
                    63:01:1e:29:7f:40:82:19:ab:35:cc:29:99:43:1a:
                    bb:6b:9f:79:4b:77:77:57:17:33:da:b7:60:e6:fa:
                    44:c0:75:3a:71:7d:e6:1b:6e:56:b8:b9:fe:d7:b1:
                    71:ad:1d:c8:b3:2b:c8:6c:7b:c2:de:88:60:fb:87:
                    60:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2A:2D:AB:AE:91:FD:F4:3C:22:0D:1B:E4:D3:EF:09:7F:EB:79:19
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/iyotq66R_fQ8Ig0b5NPvCX_reRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:1b40::/29

    Signature Algorithm: sha256WithRSAEncryption
         78:2c:e8:17:0f:fe:8d:c9:c6:49:f8:d4:35:44:79:e0:af:32:
         15:1c:19:a1:b8:c2:c2:70:3c:0a:e7:84:97:1e:f7:00:8c:35:
         68:76:cc:ca:3d:bf:38:77:ec:4b:5e:ca:f7:bf:2a:03:a4:1e:
         97:31:7a:47:e2:6a:c5:3a:2f:3d:15:77:ae:dd:11:89:45:11:
         47:45:c7:2c:61:5b:af:44:c6:d3:60:34:73:6a:02:b4:42:d6:
         5c:3e:a9:df:c4:91:6c:f9:08:02:1c:10:dd:f1:61:37:50:10:
         62:37:eb:ea:09:18:06:0d:9b:67:67:cc:1d:9c:86:16:24:cc:
         bc:bc:1e:44:cb:98:46:e3:05:4f:8d:34:8a:f5:ce:e6:c0:c7:
         05:50:49:68:49:4e:de:0e:f2:1f:b3:1c:46:e7:d3:88:5f:22:
         40:30:03:f2:14:16:72:02:4c:3c:1c:81:4d:fe:ce:49:bc:a4:
         54:be:13:ad:53:8a:07:ca:33:26:55:fb:c1:2c:a2:5d:95:31:
         aa:76:9f:f0:9b:41:57:98:48:ab:e6:5e:48:b0:6a:d2:89:6f:
         12:22:d1:f6:5d:56:71:22:02:ae:31:8a:73:ee:d0:70:e7:e5:
         5c:ef:f3:5a:eb:66:25:50:58:2f:0a:38:66:c8:09:ec:9f:5a:
         16:d5:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----