Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/dRh7yhPxzu-W0nTXfCKdQ6srDI8.roa
File:                     dRh7yhPxzu-W0nTXfCKdQ6srDI8.roa (raw, json)
Hash identifier:          gZqSlNsbn3/zq/IlK16ywjDGrKi336RHHYnz4lWXDG8=
Subject key identifier:   75:18:7B:CA:13:F1:CE:EF:96:D2:74:D7:7C:22:9D:43:AB:2B:0C:8F
Certificate issuer:       /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial:       080A90ED
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/dRh7yhPxzu-W0nTXfCKdQ6srDI8.roa
Signing time:             Sat 01 Jan 2022 06:55:50 +0000
ROA not before:           Sat 01 Jan 2022 06:55:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207306
IP address blocks:        2a0f:5707:aa30::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134910189 (0x80a90ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
        Validity
            Not Before: Jan  1 06:55:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75187bca13f1ceef96d274d77c229d43ab2b0c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:bb:66:b4:f7:ff:9c:97:4e:0e:85:fc:d4:
                    29:1f:41:ef:22:0c:a5:7d:86:31:21:55:d9:97:23:
                    71:54:69:ac:1d:7c:ff:2b:2b:f1:b3:a8:a5:97:b6:
                    f9:d9:ab:71:e0:25:e9:4a:88:11:2a:93:07:f0:60:
                    ed:8b:85:b5:3d:bd:ff:a4:f8:2a:77:fd:79:09:32:
                    29:82:29:2e:fb:21:5a:c8:13:ff:63:0d:00:6e:26:
                    00:68:bd:b3:4c:c3:0e:fc:39:ed:f5:35:6c:26:cc:
                    11:ee:f4:e6:d3:20:8d:30:3f:94:9d:b1:29:bf:d0:
                    04:9e:d7:01:7e:0f:69:d5:ea:eb:97:aa:a1:af:4e:
                    c3:01:02:3a:b0:f8:5b:8b:0c:a1:e9:0b:cf:f3:ee:
                    e2:a7:cc:1a:be:ba:b3:11:6c:af:fe:c2:3e:4d:3f:
                    f2:0f:b0:8e:c1:61:5f:c9:c7:af:56:9f:9e:39:78:
                    c2:9b:30:78:38:84:6d:b1:9f:1c:f8:83:3b:63:49:
                    48:35:67:ed:b4:f4:d1:c0:30:7d:27:8c:ce:d0:5f:
                    0f:98:cc:86:0e:a7:4a:4b:6c:19:2d:6e:2d:af:aa:
                    7b:f5:b1:03:c3:c7:4f:10:5d:e3:b2:69:21:fd:a0:
                    65:60:a2:27:f6:db:a8:a8:26:51:44:44:e7:e6:a1:
                    83:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:18:7B:CA:13:F1:CE:EF:96:D2:74:D7:7C:22:9D:43:AB:2B:0C:8F
            X509v3 Authority Key Identifier:
                keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/dRh7yhPxzu-W0nTXfCKdQ6srDI8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:5707:aa30::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:6f:b5:34:e6:d1:06:da:da:20:1e:30:62:f6:95:8f:15:5a:
         1b:84:69:ed:40:da:9b:0f:25:78:1f:2b:c9:f3:86:7a:5a:d5:
         00:06:0f:be:dd:9d:0d:08:44:0e:a4:75:ed:ad:3f:06:8a:51:
         9b:b2:48:e9:a2:8b:61:01:2f:de:ed:df:9a:5f:1f:da:39:d2:
         81:2a:a3:d8:bf:09:e5:34:f7:91:de:eb:64:c2:76:03:41:13:
         21:ca:83:66:7f:6e:19:f2:62:30:65:76:89:68:2f:c7:3d:b5:
         8f:1b:cc:d3:90:3c:ec:cd:89:4e:c5:1b:5f:6d:b4:49:6a:fe:
         bf:ae:e3:6a:7d:5b:d9:5c:f6:7c:d4:93:16:7c:aa:4c:00:6b:
         f4:14:e7:95:a3:e5:00:cd:6a:7d:c9:b1:5a:d2:40:27:31:86:
         b6:55:f3:80:07:6e:52:f5:22:db:0c:7b:8a:a3:b2:3a:0f:c3:
         db:1c:88:b1:f4:f0:e3:71:c0:2c:c1:2d:82:91:11:9f:07:27:
         31:0c:14:c3:a3:d0:1e:1b:f3:da:ce:78:b2:66:95:3b:9f:d1:
         c2:6a:79:8d:10:14:5a:38:02:66:c9:e2:7e:0e:96:af:f3:56:
         c0:72:2d:62:b8:a0:48:77:2b:c6:0e:bb:f0:85:97:0f:b1:91:
         6d:44:be:3d
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECAqQ7TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YTY0NGMxMTU2ODUxODAzZjM3YWRlZWMwODc2Y2NmOTg5ZDVhZWYwMB4XDTIyMDEw
MTA2NTU1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzUxODdiY2ExM2Yx
Y2VlZjk2ZDI3NGQ3N2MyMjlkNDNhYjJiMGM4ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANBGu2a09/+cl04OhfzUKR9B7yIMpX2GMSFV2ZcjcVRprB18
/ysr8bOopZe2+dmrceAl6UqIESqTB/Bg7YuFtT29/6T4Knf9eQkyKYIpLvshWsgT
/2MNAG4mAGi9s0zDDvw57fU1bCbMEe705tMgjTA/lJ2xKb/QBJ7XAX4PadXq65eq
oa9OwwECOrD4W4sMoekLz/Pu4qfMGr66sxFsr/7CPk0/8g+wjsFhX8nHr1afnjl4
wpsweDiEbbGfHPiDO2NJSDVn7bT00cAwfSeMztBfD5jMhg6nSktsGS1uLa+qe/Wx
A8PHTxBd47JpIf2gZWCiJ/bbqKgmUURE5+ahg80CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBR1GHvKE/HO75bSdNd8Ip1DqysMjzAfBgNVHSMEGDAWgBRKZEwRVoUYA/N6
3uwIdsz5idWu8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1NtUk1FVmFGR0FQemV0N3NDSGJNLVluVnJ2QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTkvNmIwNzk4LTNkNGYtNDBlNi1iNzM5LWNjMWM5YjVmNjY0MC8x
L2RSaDd5aFB4enUtVzBuVFhmQ0tkUTZzckRJOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkv
NmIwNzk4LTNkNGYtNDBlNi1iNzM5LWNjMWM5YjVmNjY0MC8xL1NtUk1FVmFGR0FQ
emV0N3NDSGJNLVluVnJ2QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCoPVweqMDANBgkqhkiG9w0BAQsF
AAOCAQEAIW+1NObRBtraIB4wYvaVjxVaG4Rp7UDamw8leB8ryfOGelrVAAYPvt2d
DQhEDqR17a0/BopRm7JI6aKLYQEv3u3fml8f2jnSgSqj2L8J5TT3kd7rZMJ2A0ET
IcqDZn9uGfJiMGV2iWgvxz21jxvM05A87M2JTsUbX220SWr+v67jan1b2Vz2fNST
FnyqTABr9BTnlaPlAM1qfcmxWtJAJzGGtlXzgAduUvUi2wx7iqOyOg/D2xyIsfTw
43HALMEtgpERnwcnMQwUw6PQHhvz2s54smaVO5/Rwmp5jRAUWjgCZsnifg6Wr/NW
wHItYrigSHcrxg678IWXD7GRbUS+PQ==
-----END CERTIFICATE-----