Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/JPdfl966XeEoY7XFN2pwl8ThbMg.roa
File:                     JPdfl966XeEoY7XFN2pwl8ThbMg.roa (raw, json)
Hash identifier:          LYhkcjyg4WTNudPaUhBtyMxW3SMIuMVcFZWfRnj22Cg=
Subject key identifier:   24:F7:5F:97:DE:BA:5D:E1:28:63:B5:C5:37:6A:70:97:C4:E1:6C:C8
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       018A4AEAEC50B73F88F9CB19374890521D14
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/JPdfl966XeEoY7XFN2pwl8ThbMg.roa
Signing time:             Thu 31 Aug 2023 09:27:04 +0000
ROA not before:           Thu 31 Aug 2023 09:27:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     38915
IP address blocks:        2a07:3502:1070::/48 maxlen: 48
                          2a07:3502:1040::/48 maxlen: 48
                          2a07:3500:19f8::/48 maxlen: 48
                          2a07:3500:19d8::/48 maxlen: 48
                          2a07:3500:1998::/48 maxlen: 48
                          2a07:3500:19e8::/48 maxlen: 48
                          2a07:3500:19a8::/48 maxlen: 48
                          2a07:3500:19a0::/48 maxlen: 48
                          2a07:3500:19e0::/48 maxlen: 48
                          2a07:3500:19f0::/48 maxlen: 48
                          2a07:3500:19b0::/48 maxlen: 48
                          2a07:3500:1200::/48 maxlen: 48
                          2a07:3500:1a00::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4a:ea:ec:50:b7:3f:88:f9:cb:19:37:48:90:52:1d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Aug 31 09:27:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=24f75f97deba5de12863b5c5376a7097c4e16cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3a:c1:a4:e2:7f:2d:07:8c:05:95:7e:53:3b:
                    0f:1a:a0:2f:e2:1d:a3:41:bd:11:bc:40:4c:b6:26:
                    3b:45:d5:2f:3e:78:ec:1f:20:d3:07:9d:2f:b1:29:
                    73:f4:55:2b:60:5c:91:14:2a:ff:77:43:39:67:3a:
                    df:cc:95:d6:c9:e5:bf:75:cc:54:a0:7d:18:e2:5b:
                    43:f6:a9:be:2d:ac:5c:60:22:6b:f3:03:09:59:0f:
                    bb:43:3a:0e:2b:5d:a6:3b:12:42:10:80:26:75:44:
                    be:1b:9d:4e:39:75:dc:d0:aa:53:2c:a4:3d:e9:78:
                    34:fb:05:86:a4:8e:be:20:71:fd:08:2e:82:1f:22:
                    d0:fe:c6:f4:6e:e3:6a:16:fb:40:c2:ab:c3:0a:9e:
                    a3:be:2d:fb:73:19:0a:0e:f5:d3:91:02:7a:b2:e3:
                    00:ca:60:39:ca:77:61:18:e2:97:13:79:3b:4a:1f:
                    11:26:c3:ad:23:02:b0:16:1d:51:78:84:8e:cf:6c:
                    de:ab:9a:d5:17:72:d8:29:89:18:4f:74:ab:b5:7b:
                    59:d1:d6:d3:b8:95:f6:c6:e9:f8:62:12:e6:7d:6a:
                    a4:78:03:76:a7:ff:72:71:10:07:a8:ff:51:fb:62:
                    8b:ed:05:20:e4:b1:5d:2b:39:20:a7:75:62:84:02:
                    12:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F7:5F:97:DE:BA:5D:E1:28:63:B5:C5:37:6A:70:97:C4:E1:6C:C8
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/JPdfl966XeEoY7XFN2pwl8ThbMg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:3500:1200::/48
                  2a07:3500:1998::/48
                  2a07:3500:19a0::/48
                  2a07:3500:19a8::/48
                  2a07:3500:19b0::/48
                  2a07:3500:19d8::/48
                  2a07:3500:19e0::/48
                  2a07:3500:19e8::/48
                  2a07:3500:19f0::/48
                  2a07:3500:19f8::/48
                  2a07:3500:1a00::/48
                  2a07:3502:1040::/48
                  2a07:3502:1070::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:cf:1d:b8:45:94:67:45:80:60:38:48:fd:fe:d1:0f:ed:65:
         a2:34:e1:00:76:68:4c:41:e1:8a:20:91:c6:37:77:b0:3f:71:
         5a:a4:24:1d:b1:61:c8:57:0e:93:aa:50:df:ae:06:23:77:cf:
         ec:e6:16:b8:6f:01:7c:0d:5b:e2:94:5e:d7:59:f4:ae:56:de:
         40:47:22:2d:48:03:8b:7c:7a:df:04:3f:7d:c3:27:7a:14:43:
         7f:97:f7:6d:60:91:11:e9:11:ce:29:42:de:dc:8b:86:9b:79:
         d2:14:76:b0:31:77:81:e7:89:23:fb:c3:f1:ee:25:22:e2:68:
         fd:11:47:84:6b:04:f9:ea:f7:cd:cf:38:61:bf:5d:ff:be:2e:
         ed:15:45:d0:93:7e:cc:2e:1e:2c:f8:76:b1:5e:cb:f1:6e:d6:
         bf:d4:28:57:88:53:2c:70:95:a7:b4:33:16:2b:95:99:60:b8:
         8e:3b:0c:87:de:8a:e4:1f:c7:44:95:f4:69:2a:3b:65:62:93:
         59:40:9c:e4:b3:aa:d7:35:f6:54:dc:03:87:ea:13:5b:39:6c:
         b1:96:c6:2a:7e:1b:c3:79:9c:37:c2:01:bd:9e:23:eb:62:0e:
         4d:ab:43:8b:01:0e:df:34:e1:dd:85:c4:9b:0d:f6:1a:e6:18:
         98:c2:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----