Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/unnlvzIOD63onKIt9s67wPbb7OA.roa
File:                     unnlvzIOD63onKIt9s67wPbb7OA.roa (raw, json)
Hash identifier:          FUEYhKePyRLq5r2ubQCJVHWdTbddlMGgmH+NA1TJwR4=
Subject key identifier:   BA:79:E5:BF:32:0E:0F:AD:E8:9C:A2:2D:F6:CE:BB:C0:F6:DB:EC:E0
Certificate issuer:       /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial:       393BABBA
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/unnlvzIOD63onKIt9s67wPbb7OA.roa
Signing time:             Sat 01 Jan 2022 03:52:56 +0000
ROA not before:           Sat 01 Jan 2022 03:52:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8522
IP address blocks:        2001:648:2c30::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960211898 (0x393babba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
        Validity
            Not Before: Jan  1 03:52:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ba79e5bf320e0fade89ca22df6cebbc0f6dbece0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ec:78:14:5b:a8:f5:48:23:94:5c:8a:ab:e6:
                    f4:08:77:84:8c:bf:bb:6c:7f:b0:fa:ec:dc:7f:69:
                    50:da:82:08:53:7e:34:62:46:59:d3:d4:80:30:b7:
                    bb:48:73:d8:2f:30:07:c4:be:b1:39:2f:78:c8:36:
                    56:75:c7:5a:90:c0:98:d9:e5:15:9d:bb:50:24:bd:
                    10:7e:04:95:c5:59:fd:c9:95:47:07:37:d5:61:37:
                    e1:76:ab:32:48:34:12:60:84:a0:8b:77:bc:a8:26:
                    7f:ab:e7:b0:b5:95:55:51:a1:9d:ef:05:54:77:81:
                    51:e0:c7:50:f6:e6:3a:ec:7f:7e:9a:51:ef:d8:10:
                    f9:84:b4:46:e7:7d:3b:ee:eb:fa:c8:0d:e5:67:ea:
                    20:31:bc:a9:10:d8:64:a0:fc:c6:0f:78:1b:df:a7:
                    10:fd:6f:02:6a:0b:32:0c:25:81:c3:7f:8e:90:93:
                    5a:43:c4:f3:ca:47:c4:cb:14:19:5e:ac:16:e9:39:
                    8b:9c:b8:71:67:d8:0d:99:5a:fc:e4:48:9a:53:7d:
                    24:72:e7:c4:e5:fe:20:c5:85:61:4a:b8:0a:9c:a2:
                    6b:11:fe:74:a3:f2:9e:10:a7:c3:6c:3a:8c:31:2b:
                    73:99:67:41:32:d3:39:a1:a7:f3:77:9f:c0:9d:e6:
                    39:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:79:E5:BF:32:0E:0F:AD:E8:9C:A2:2D:F6:CE:BB:C0:F6:DB:EC:E0
            X509v3 Authority Key Identifier:
                keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/unnlvzIOD63onKIt9s67wPbb7OA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:648:2c30::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:1c:d4:2c:06:56:1b:4e:b4:3a:27:76:36:f0:7f:b1:67:cc:
         9b:d1:93:c6:9b:e6:64:65:f7:fe:0d:ce:ff:af:09:40:be:7f:
         a9:92:5f:2f:bd:82:3e:bc:c6:75:27:01:ec:fd:4b:76:67:92:
         27:37:63:e2:62:a9:c8:d7:dc:b8:74:2a:6b:cf:93:73:5b:50:
         20:13:c1:6f:32:55:8e:f0:bf:db:38:af:02:f1:e4:bb:c2:2f:
         ce:fe:60:88:c9:ec:45:6e:57:67:e7:6b:03:df:f5:fa:8e:ab:
         52:4a:87:8b:9d:33:28:95:6c:5d:09:db:4c:ae:5b:24:8b:f1:
         93:ae:26:a3:69:b6:14:93:91:37:24:b0:74:74:c6:fc:dc:b5:
         a3:63:33:08:34:39:17:0f:f8:b4:08:8b:00:a0:3c:47:5e:e4:
         89:1c:90:a3:a8:c4:00:33:58:60:6b:a8:06:63:a0:1d:68:a6:
         3d:e4:8a:3b:17:6a:1e:78:d5:31:1b:c5:4d:4b:82:56:37:0b:
         9d:2c:8d:32:99:d7:be:28:0d:89:2a:bc:12:24:4d:b8:70:f4:
         d0:39:f4:4d:fe:ba:99:94:9e:ad:7b:b7:16:e6:29:66:55:0c:
         77:97:78:ba:7a:fb:9e:d4:a4:52:5c:88:06:05:eb:4b:4e:47:
         a0:57:40:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----