Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d5d6e5-c60f-4479-9b52-960c266eca5d/1/L2v1-EAseNNov4o2ZvfGvHZCfwk.roa
File:                     L2v1-EAseNNov4o2ZvfGvHZCfwk.roa (raw, json)
Hash identifier:          /Ye6A6wjaWR/dfEAEltxCu6OJv+fhntlQvpbHwD3DHk=
Subject key identifier:   2F:6B:F5:F8:40:2C:78:D3:68:BF:8A:36:66:F7:C6:BC:76:42:7F:09
Certificate issuer:       /CN=8aaf2268d47e7cd5459d7a006ebc51d3eb9458c9
Certificate serial:       7A13
Authority key identifier: 8A:AF:22:68:D4:7E:7C:D5:45:9D:7A:00:6E:BC:51:D3:EB:94:58:C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iq8iaNR-fNVFnXoAbrxR0-uUWMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/d5d6e5-c60f-4479-9b52-960c266eca5d/1/L2v1-EAseNNov4o2ZvfGvHZCfwk.roa
Signing time:             Sun 06 Mar 2022 07:56:46 +0000
ROA not before:           Sun 06 Mar 2022 07:56:46 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50131
IP address blocks:        62.3.24.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31251 (0x7a13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aaf2268d47e7cd5459d7a006ebc51d3eb9458c9
        Validity
            Not Before: Mar  6 07:56:46 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2f6bf5f8402c78d368bf8a3666f7c6bc76427f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:86:68:74:97:e2:6f:36:73:c2:cf:83:7b:dc:
                    72:b1:3f:17:6f:c0:e8:c7:1d:50:eb:d0:49:af:52:
                    13:fe:26:8c:53:df:e6:01:85:e9:31:1d:05:de:4e:
                    9b:a7:3f:71:81:28:c3:b5:95:af:18:84:5e:23:b9:
                    49:23:b6:93:04:a5:94:c5:21:bb:1d:82:96:57:5c:
                    35:7a:1c:4e:54:d3:5b:9d:4c:b0:40:c3:df:6e:8b:
                    b2:0e:72:8e:3d:ee:d8:78:fc:cd:16:15:40:0d:73:
                    c1:00:f1:2c:c6:87:e1:7e:12:7b:96:15:b5:28:61:
                    0f:5d:fc:57:ed:b4:a8:66:25:37:7c:cd:e2:4d:77:
                    49:24:6b:b3:ba:e1:18:89:97:27:ae:1f:c0:a5:01:
                    c7:2d:f9:c0:c8:70:1d:7c:9c:77:42:0f:74:97:20:
                    c5:9f:bd:de:40:b4:83:17:42:29:b7:4d:ac:ca:cf:
                    2b:e0:0e:99:6a:2b:af:09:83:3e:26:51:63:27:84:
                    cb:fb:bb:a7:03:79:18:32:9e:1a:d2:f6:1a:ce:80:
                    75:ce:a6:ba:fa:9c:25:65:86:dc:c6:48:cd:25:cb:
                    bd:d0:f4:2d:14:b7:55:a9:0a:69:dd:e0:d2:51:5e:
                    05:29:c0:f1:a5:fb:9b:c1:a9:23:96:2f:12:42:04:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6B:F5:F8:40:2C:78:D3:68:BF:8A:36:66:F7:C6:BC:76:42:7F:09
            X509v3 Authority Key Identifier:
                keyid:8A:AF:22:68:D4:7E:7C:D5:45:9D:7A:00:6E:BC:51:D3:EB:94:58:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq8iaNR-fNVFnXoAbrxR0-uUWMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d5d6e5-c60f-4479-9b52-960c266eca5d/1/L2v1-EAseNNov4o2ZvfGvHZCfwk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d5d6e5-c60f-4479-9b52-960c266eca5d/1/iq8iaNR-fNVFnXoAbrxR0-uUWMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.3.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:12:ce:2d:52:8e:0b:f6:3f:9a:5e:df:4d:26:8a:4c:55:56:
         df:87:b3:db:52:c7:45:f4:c3:08:e1:3f:8a:c1:bd:16:5f:56:
         54:39:7c:f5:c3:8b:52:89:1d:f0:59:bf:dc:4e:8a:10:1f:9f:
         a0:a9:f4:82:70:f3:1d:2a:a9:0c:b9:62:4d:c1:41:b0:fc:36:
         0e:72:e5:73:22:19:32:1b:5d:6f:11:95:8b:6c:57:1d:ad:82:
         15:c6:30:f4:27:f8:d3:ed:a5:7d:92:4d:8b:e8:11:da:86:d7:
         ff:ef:e5:81:62:25:53:93:22:2c:eb:c2:c2:95:64:c3:66:88:
         4a:7e:ec:1d:bf:73:0b:de:b5:9d:ce:fe:79:34:57:a5:7d:ba:
         91:6c:7d:86:7c:5c:fd:5a:e8:94:e1:d9:bf:3b:3a:5c:a4:82:
         d1:ed:d0:5b:35:97:f5:f4:d3:e1:5d:a7:df:23:a2:66:d0:23:
         d6:c4:40:63:ee:e7:88:3f:b7:ec:9e:dd:c5:5f:a5:c7:46:14:
         c6:0b:07:47:fb:4d:9a:1e:26:23:7a:db:c5:5b:33:15:49:98:
         62:af:67:62:0e:b7:38:d6:02:80:c0:c8:ab:cc:69:bd:51:6a:
         2c:4b:13:48:dd:fc:30:a9:bb:3d:e0:65:51:af:b2:80:cc:59:
         b4:30:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----