Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/G8fwnC8TN6eo-1_Z4e_GH7FAYLk.roa
File:                     G8fwnC8TN6eo-1_Z4e_GH7FAYLk.roa (raw, json)
Hash identifier:          06Ko5xV8ZxK7b88cWs3OpRcT5C0KUuSiV0O4R/m5RsQ=
Subject key identifier:   1B:C7:F0:9C:2F:13:37:A7:A8:FB:5F:D9:E1:EF:C6:1F:B1:40:60:B9
Certificate issuer:       /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial:       0A81F602
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/G8fwnC8TN6eo-1_Z4e_GH7FAYLk.roa
Signing time:             Sat 01 Jan 2022 02:54:17 +0000
ROA not before:           Sat 01 Jan 2022 02:54:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43474
IP address blocks:        2a00:ece1:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176289282 (0xa81f602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
        Validity
            Not Before: Jan  1 02:54:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1bc7f09c2f1337a7a8fb5fd9e1efc61fb14060b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:6b:44:5e:0c:81:f4:28:49:98:7c:90:d3:
                    62:a0:0e:8a:3a:6f:91:a7:49:ea:f8:fa:42:65:d3:
                    7e:bb:7f:62:ba:3b:f1:ff:b0:bf:26:6b:b9:4d:d3:
                    0d:29:3e:9a:e8:83:37:98:4c:dc:67:3f:4e:d0:fa:
                    06:bf:5c:a7:9b:39:2a:4b:38:91:65:22:58:43:08:
                    39:f8:c7:ed:bd:7a:56:4f:de:5a:aa:b9:ec:53:78:
                    a4:19:88:44:d8:dd:b3:58:74:cc:85:bc:09:b5:95:
                    d6:ec:23:f9:d9:14:37:45:b9:31:ef:bd:eb:0c:21:
                    e2:5a:d5:36:80:c2:81:13:34:54:d5:f6:fc:5e:f0:
                    1a:51:ef:a4:a9:66:43:98:cc:d2:26:d5:71:81:55:
                    8c:a6:8d:da:c3:2a:3c:f3:90:14:9f:98:b0:41:c7:
                    27:bc:5f:53:9c:56:15:09:5f:01:92:75:a7:0e:25:
                    28:07:16:41:a4:95:d9:ee:fa:1e:bc:ab:6a:3e:a2:
                    0b:97:fa:a9:f9:8a:22:28:71:a5:66:eb:d3:6a:aa:
                    76:fe:c7:a6:4b:9a:af:54:55:1e:1f:87:86:fa:c6:
                    6a:83:2b:ce:6b:bb:cf:be:35:64:e1:ce:5a:6d:13:
                    6e:8a:d2:53:69:5e:df:b6:31:21:fb:2e:23:fb:18:
                    88:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C7:F0:9C:2F:13:37:A7:A8:FB:5F:D9:E1:EF:C6:1F:B1:40:60:B9
            X509v3 Authority Key Identifier:
                keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/G8fwnC8TN6eo-1_Z4e_GH7FAYLk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:ece1:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:54:f6:4c:f6:94:48:39:93:e5:7d:73:e3:5e:cb:76:8c:5b:
         6e:ce:bb:30:16:93:a7:ff:ba:30:dc:b0:59:40:ac:2b:64:2d:
         f1:75:2a:da:81:73:c7:b2:93:38:31:44:e6:a5:0f:3f:76:1e:
         a9:89:ad:9d:b8:3d:f8:91:2e:ea:03:11:90:c6:a3:3f:05:49:
         d4:88:41:3e:7c:ce:1d:86:76:f7:33:ed:c6:ad:bc:63:44:bd:
         ec:16:46:46:d1:62:da:fa:67:16:aa:4d:88:30:0d:9b:2a:19:
         5d:46:3c:7e:4a:49:14:46:18:15:74:94:75:b0:42:c6:57:86:
         4d:b1:cc:80:20:2d:ba:14:af:4c:52:06:39:88:f0:a7:7b:9e:
         55:f9:9d:65:3b:a7:5e:ff:31:88:9b:5f:7b:00:57:2f:df:dc:
         80:a7:55:fd:a7:26:8a:fe:bb:59:ff:3a:44:ca:05:af:20:a4:
         44:3d:52:d9:92:0d:2f:9b:28:81:18:dc:c8:d8:89:f3:70:3e:
         c1:e2:74:20:44:09:8e:ae:4a:41:d7:ab:89:6c:6a:2f:2c:b9:
         2f:2f:e5:bc:ee:da:a7:2a:48:1b:a9:35:88:51:c5:ae:7f:b7:
         b2:f1:5d:eb:b3:94:b8:c3:ff:18:3c:b9:2d:91:25:26:ce:90:
         0f:00:a7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----