Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/mH8UHH0OGX_XKctuOYCXK2Akdpk.roa
File:                     mH8UHH0OGX_XKctuOYCXK2Akdpk.roa (raw, json)
Hash identifier:          +z9iA5VfIqbpTh5H/NtdcYU3MKrBQnrVBPLbYo+fiC8=
Subject key identifier:   98:7F:14:1C:7D:0E:19:7F:D7:29:CB:6E:39:80:97:2B:60:24:76:99
Certificate issuer:       /CN=4a1d20be77e12232323c1422fb5198fea0086034
Certificate serial:       0B386E65
Authority key identifier: 4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/mH8UHH0OGX_XKctuOYCXK2Akdpk.roa
Signing time:             Sat 01 Jan 2022 04:02:00 +0000
ROA not before:           Sat 01 Jan 2022 04:02:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62167
IP address blocks:        2a0f:ecc0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188247653 (0xb386e65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a1d20be77e12232323c1422fb5198fea0086034
        Validity
            Not Before: Jan  1 04:02:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=987f141c7d0e197fd729cb6e3980972b60247699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:71:00:f3:a5:da:02:a9:df:c2:b8:b1:22:24:
                    29:7d:11:a1:2d:f6:2a:93:36:dd:f1:32:49:58:b8:
                    bc:d4:7c:9b:06:a1:d6:c0:bb:a0:32:e8:f7:fd:95:
                    07:d8:e9:64:53:25:89:e1:be:c3:cd:7a:4c:e0:94:
                    ab:7a:3d:60:b4:4a:6a:c8:2e:0e:78:88:3f:15:cc:
                    46:01:a1:f7:36:3f:56:63:9b:ad:d3:2f:68:ee:99:
                    d7:91:ad:47:13:8e:60:11:a7:09:93:c8:ef:05:06:
                    5e:16:5b:7d:12:e2:d8:e1:57:c0:06:e3:6a:51:ec:
                    f5:19:60:e0:c2:00:46:35:8a:d1:26:a7:77:6d:04:
                    eb:c7:da:20:dd:37:a8:b2:5d:8e:68:f8:65:4e:76:
                    7a:97:4c:82:ab:af:43:c2:a9:d5:2b:e5:be:34:74:
                    ad:87:45:24:00:4c:f3:5e:b3:b6:42:a4:56:eb:31:
                    6d:34:7a:2d:da:e6:48:1a:7e:41:00:f6:b4:ab:d4:
                    74:c7:1f:ee:e4:33:8e:1a:81:79:4e:2e:da:da:02:
                    c6:38:dd:09:f4:71:ea:b1:32:cf:b0:fc:0f:da:9b:
                    b4:0d:f3:53:99:77:bc:b2:52:4a:c3:fc:9a:2b:a0:
                    8a:65:62:d4:72:76:54:a3:2d:49:66:0d:1f:d0:5f:
                    d1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7F:14:1C:7D:0E:19:7F:D7:29:CB:6E:39:80:97:2B:60:24:76:99
            X509v3 Authority Key Identifier:
                keyid:4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/mH8UHH0OGX_XKctuOYCXK2Akdpk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:ecc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6f:9e:44:d6:a6:f6:10:c6:9e:ef:5f:6e:e1:10:3d:32:c9:cb:
         0a:ad:94:21:95:b9:5e:04:34:21:74:b7:96:4e:f6:de:d8:44:
         5c:86:ac:be:83:9d:49:4a:67:cf:93:94:ba:ee:2a:4b:72:f2:
         5d:69:d9:cc:f8:9d:5b:4f:33:98:c8:f0:e9:82:85:e3:25:e4:
         72:c0:20:75:86:48:88:e3:7f:dc:fe:3f:c8:da:3f:56:b4:44:
         0d:f5:0b:9c:4e:78:c2:03:80:dd:6d:12:b4:c9:86:ec:d5:d0:
         06:23:c9:06:ee:42:57:86:48:bf:07:83:68:41:ec:51:97:7f:
         2f:c0:78:71:21:b0:45:ac:af:8f:aa:52:15:ba:d3:25:bf:a7:
         79:fb:27:29:40:7f:b3:bf:af:66:b8:3f:1b:7c:40:0e:ec:15:
         66:e8:26:e2:db:30:2f:11:37:c1:56:68:a9:b8:98:15:61:35:
         50:c3:6a:c2:56:62:1d:e3:75:2c:dd:2e:af:50:94:83:4a:e8:
         ae:9f:88:d6:aa:1d:53:a2:62:2e:e9:70:b6:34:9b:48:ab:62:
         5d:e1:3b:79:99:c6:7b:79:f5:34:e6:f5:13:90:56:ea:0d:6c:
         71:80:92:8d:b6:1e:14:3a:8f:4d:9f:9a:6d:ff:e3:44:d6:d4:
         d6:2e:55:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----