Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/AfgZAiTxoXBtSka_1puZ-TOu8cc.roa
File:                     AfgZAiTxoXBtSka_1puZ-TOu8cc.roa (raw, json)
Hash identifier:          13ia5QvR/GBqfHW3BNbVvVfMTrsdnAiAbPXhQsp+elo=
Subject key identifier:   01:F8:19:02:24:F1:A1:70:6D:4A:46:BF:D6:9B:99:F9:33:AE:F1:C7
Certificate issuer:       /CN=544194f8249773d3cd6fb654b239de769c42e864
Certificate serial:       07A11798
Authority key identifier: 54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/AfgZAiTxoXBtSka_1puZ-TOu8cc.roa
Signing time:             Sat 01 Jan 2022 14:04:51 +0000
ROA not before:           Sat 01 Jan 2022 14:04:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47869
IP address blocks:        2001:678:730::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127997848 (0x7a11798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544194f8249773d3cd6fb654b239de769c42e864
        Validity
            Not Before: Jan  1 14:04:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=01f8190224f1a1706d4a46bfd69b99f933aef1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:cb:34:d2:f5:11:a6:b7:13:c9:57:86:e0:
                    e8:85:58:c7:30:f1:c3:60:c1:8b:50:b0:12:42:f6:
                    a7:31:76:47:de:90:07:4c:e1:37:cf:99:09:84:cc:
                    4d:4c:2f:70:6a:17:72:a9:74:ee:3b:d2:9e:6e:7d:
                    2b:80:44:d7:04:03:70:d5:26:a0:4b:f7:0c:73:d6:
                    3a:06:0c:33:d1:ae:5a:9c:53:8a:e0:33:1b:ee:aa:
                    fb:2c:bd:1c:ab:47:7c:93:05:94:f8:43:8e:b8:b2:
                    9f:e5:f4:e5:a9:f0:a3:03:cc:a0:f3:22:a1:ec:e9:
                    bf:e9:54:39:27:3c:56:44:45:9c:0a:eb:14:c6:a3:
                    3b:73:7a:f1:03:d6:19:23:e5:a3:94:35:2a:cf:a6:
                    b8:d2:76:c3:cc:42:66:8d:4c:b6:af:a9:e8:f3:f3:
                    94:07:be:7d:f5:7f:22:2f:e2:8b:c5:26:b8:25:25:
                    e9:e4:dd:ae:aa:2e:5b:70:ca:d5:99:86:d0:cf:8a:
                    66:7c:75:ab:86:28:36:73:dc:e5:73:aa:4d:4a:0a:
                    b9:1e:fa:1a:42:53:b6:4c:91:86:a7:09:36:d3:ce:
                    5a:9b:e8:e8:61:f4:cf:3e:59:6d:2a:81:82:bb:ae:
                    d0:24:f5:2c:5f:49:4b:25:71:74:d6:58:01:73:d0:
                    9f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F8:19:02:24:F1:A1:70:6D:4A:46:BF:D6:9B:99:F9:33:AE:F1:C7
            X509v3 Authority Key Identifier:
                keyid:54:41:94:F8:24:97:73:D3:CD:6F:B6:54:B2:39:DE:76:9C:42:E8:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/AfgZAiTxoXBtSka_1puZ-TOu8cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/dd1ea6-ccbf-4df1-92ef-d61df33c431b/1/VEGU-CSXc9PNb7ZUsjnedpxC6GQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:730::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:4e:31:b0:cb:bd:b5:5c:62:7e:ac:56:bc:a2:0b:ce:a1:75:
         46:41:ae:69:75:2f:db:b0:1c:71:69:07:07:65:81:f2:c0:8b:
         d7:76:33:a7:83:78:a1:91:e6:75:da:04:29:73:f9:0d:5b:f5:
         af:ba:52:d1:97:e9:c5:8f:dc:58:c4:3c:70:71:77:ee:d3:3c:
         81:28:36:98:7f:e4:8b:5f:a3:d6:4b:61:b6:90:3e:79:79:10:
         7e:10:d3:61:1b:84:7b:12:eb:60:89:21:ca:72:b2:d7:07:65:
         6a:5c:b8:7a:bd:fc:79:a0:e8:4f:28:da:90:42:12:c6:40:ad:
         f3:7f:20:fe:4a:13:d6:f4:1c:45:86:78:71:ee:c2:62:20:02:
         4f:de:6e:15:3a:13:9f:8c:5b:b8:96:9c:b1:60:c0:5f:41:1b:
         6c:38:0a:b7:46:e6:fe:53:76:8b:d7:d9:e5:e1:10:5d:e4:d2:
         d0:80:57:1f:81:c5:8d:22:c5:95:e8:48:27:49:78:d5:e0:0e:
         5d:b4:bc:c7:50:98:83:ef:ca:c7:8d:77:c3:40:97:5b:62:df:
         17:84:d4:15:b8:0a:4a:cd:76:53:65:28:7f:17:1e:54:58:fb:
         7f:ac:19:44:57:67:7c:f4:8d:c6:26:9d:d8:10:2e:61:eb:b9:
         0b:b6:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----