Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/LNFiNM126V6Z45YddXRtlj8uFfs.roa
File:                     LNFiNM126V6Z45YddXRtlj8uFfs.roa (raw, json)
Hash identifier:          rzPxFcTNlJnRTFo0Vq25VbbbJJKETf6EveDhJ5woaU8=
Subject key identifier:   2C:D1:62:34:CD:76:E9:5E:99:E3:96:1D:75:74:6D:96:3F:2E:15:FB
Certificate issuer:       /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial:       38934CE2
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/LNFiNM126V6Z45YddXRtlj8uFfs.roa
Signing time:             Thu 03 Feb 2022 11:13:27 +0000
ROA not before:           Thu 03 Feb 2022 11:13:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197305
IP address blocks:        2a03:6dc0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949177570 (0x38934ce2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
        Validity
            Not Before: Feb  3 11:13:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2cd16234cd76e95e99e3961d75746d963f2e15fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f2:45:f6:94:b5:0c:8c:cd:de:18:6e:2a:8c:
                    91:a9:10:38:09:ed:12:47:54:e2:5b:c5:50:aa:ae:
                    67:d2:2b:5c:88:6a:df:62:e4:ae:5b:4b:4d:d9:a4:
                    e3:f8:5e:2d:02:08:5a:c7:de:e9:e6:45:ce:96:6f:
                    d7:6f:33:33:07:b3:de:02:22:af:04:f5:b3:e9:49:
                    e0:99:5a:41:36:f5:34:b9:0b:a3:4b:0b:b1:09:d0:
                    e7:86:d3:5d:f4:9d:0e:99:09:7f:c9:91:33:d4:4e:
                    bf:fb:73:c8:58:f7:3d:e3:57:0c:69:78:db:8c:8c:
                    3e:11:6d:ba:fc:d6:3c:3f:bd:94:a9:26:19:ed:87:
                    25:60:9e:02:b1:a5:d1:c4:28:2a:ac:37:df:b6:61:
                    65:69:05:9a:41:a4:98:4b:34:a7:53:9c:86:1e:54:
                    84:7e:80:21:0c:dc:75:f6:2c:3f:8b:91:59:48:4b:
                    42:f9:4d:98:92:90:d4:a7:97:36:c2:8b:b6:29:86:
                    56:c0:25:48:7e:a8:da:cd:f9:29:00:bd:a0:84:11:
                    86:ff:54:f1:f2:ea:ea:9a:69:57:92:cb:30:a1:dd:
                    8f:08:d8:e5:78:fa:c6:9f:c2:44:02:1e:50:cb:c4:
                    38:8f:00:1b:54:0a:68:f3:fe:38:e4:95:85:38:10:
                    a7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D1:62:34:CD:76:E9:5E:99:E3:96:1D:75:74:6D:96:3F:2E:15:FB
            X509v3 Authority Key Identifier:
                keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/LNFiNM126V6Z45YddXRtlj8uFfs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:6dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:09:43:9d:cb:8e:f5:8c:43:2f:2a:83:d2:b1:69:c8:17:a3:
         3e:0e:60:44:8a:86:c2:7a:34:45:5f:d6:00:bc:45:9d:70:b2:
         f0:b3:f4:8a:f7:a6:e4:55:62:6f:02:5b:69:a4:c5:4c:39:3e:
         f2:5d:d8:a5:19:54:ad:b5:e5:32:85:f6:12:70:f6:70:0c:23:
         43:58:a2:42:24:c8:76:22:ce:02:a8:b8:7e:57:b7:36:2f:55:
         34:07:00:0e:95:8f:01:11:ff:d2:a0:2c:b0:ee:69:c2:69:6a:
         4f:9d:e9:b3:a8:5e:d8:ec:ca:f2:2e:8e:2c:b1:3d:64:a9:41:
         7e:bb:fc:15:2b:8c:f0:8e:a0:76:39:5d:ba:e7:ff:8b:ca:aa:
         ee:2b:62:c8:25:33:5f:7d:94:d3:1a:48:6d:ba:ef:89:20:b3:
         7d:a4:b2:d3:b8:f6:e6:a6:1c:cf:c4:0a:cb:6a:d6:94:60:f4:
         20:6e:fe:d3:eb:85:db:aa:aa:4c:d9:01:b3:03:d1:29:c2:05:
         9c:0d:4d:bc:2b:ff:71:9c:38:d9:74:ac:be:bb:f4:b6:55:8c:
         a0:9f:5f:00:36:fd:6c:1b:7a:ab:b0:98:fe:07:b1:65:fe:42:
         94:3c:7a:7d:9e:d3:e6:f0:4b:dd:32:a2:bf:d4:d9:68:fb:16:
         b2:7f:8c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----