Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/Elqn3ZqSEIWc4YVAnviUTq6nmdQ.roa
File:                     Elqn3ZqSEIWc4YVAnviUTq6nmdQ.roa (raw, json)
Hash identifier:          S/LZsWYyFXEjWpmU+MueU18KLUIAwGUtJtMur9lnn2M=
Subject key identifier:   12:5A:A7:DD:9A:92:10:85:9C:E1:85:40:9E:F8:94:4E:AE:A7:99:D4
Certificate issuer:       /CN=ee0581767af4579e44da977b1082d94b3c7b9298
Certificate serial:       01F7A1
Authority key identifier: EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/Elqn3ZqSEIWc4YVAnviUTq6nmdQ.roa
Signing time:             Tue 08 Feb 2022 14:48:17 +0000
ROA not before:           Tue 08 Feb 2022 14:48:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29684
IP address blocks:        2001:678:39c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128929 (0x1f7a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0581767af4579e44da977b1082d94b3c7b9298
        Validity
            Not Before: Feb  8 14:48:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=125aa7dd9a9210859ce185409ef8944eaea799d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fb:7d:eb:cf:5e:8d:91:0d:2e:05:0c:cb:5d:
                    3b:7a:62:b3:bf:89:b8:4b:6f:ca:37:bd:e8:e5:f8:
                    03:e1:94:6e:69:06:d7:d8:87:35:df:8f:4d:be:d7:
                    93:1f:c0:4c:66:de:16:26:64:01:c5:46:58:7a:c1:
                    67:68:74:5b:18:26:5a:be:77:1d:16:df:55:61:08:
                    3f:72:2e:75:93:ed:f0:05:59:57:6a:da:3e:27:3d:
                    c5:1f:da:6f:ee:a2:1b:ab:5d:0d:e1:ff:94:4a:9d:
                    ad:02:ba:a7:90:7c:13:cc:e8:eb:55:f9:07:3d:48:
                    66:98:f5:54:e8:a1:93:bb:12:39:af:85:e1:0f:26:
                    b4:16:2a:03:f4:a8:33:9d:04:53:32:23:c8:f7:3a:
                    c2:3e:6f:a2:d6:f9:95:fc:ca:04:10:b3:a5:52:48:
                    11:be:6e:23:48:9c:65:6d:f4:ad:70:40:82:ec:40:
                    54:cd:78:b4:b2:a5:de:5d:fe:fb:75:1e:7a:d7:7e:
                    df:e9:5f:9f:54:38:86:9b:72:fc:b3:64:f8:5f:cd:
                    9b:84:f0:94:4d:a7:fb:a0:c9:8a:fa:00:28:b5:86:
                    33:7a:41:0f:6e:ba:5d:d7:c1:d7:bd:50:74:81:6b:
                    03:f6:08:f9:d5:a9:91:bb:7d:d0:cc:c1:c1:18:7a:
                    c7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5A:A7:DD:9A:92:10:85:9C:E1:85:40:9E:F8:94:4E:AE:A7:99:D4
            X509v3 Authority Key Identifier:
                keyid:EE:05:81:76:7A:F4:57:9E:44:DA:97:7B:10:82:D9:4B:3C:7B:92:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gWBdnr0V55E2pd7EILZSzx7kpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/Elqn3ZqSEIWc4YVAnviUTq6nmdQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0b8f11-a011-4764-bcf3-6dbba2b1dca7/1/7gWBdnr0V55E2pd7EILZSzx7kpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:39c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:83:30:17:97:14:c6:21:b5:29:97:1c:cc:77:7e:28:2b:b3:
         24:fc:22:75:7b:6e:13:9e:a9:9d:b5:88:c2:5e:4a:3f:73:fe:
         0d:61:8e:63:ca:4c:42:a7:20:ec:dc:7e:78:b1:a2:c0:2e:96:
         b7:fa:fd:1c:f7:4f:db:1e:fc:9d:2e:53:75:62:88:11:06:9e:
         1c:ef:b0:ba:5a:81:31:7b:1f:4b:a7:df:75:09:31:ea:5c:92:
         9f:8f:a5:de:d4:7e:e5:9b:70:67:4d:3f:59:e5:fb:b3:d3:73:
         06:da:22:b2:bb:67:80:d8:42:87:54:fc:e6:da:b7:74:13:b2:
         f3:a5:46:33:70:71:3a:a8:8d:2e:25:58:d7:8c:53:ed:66:e6:
         3e:1c:bd:f8:7c:6b:e9:6c:d6:91:73:01:07:ea:a7:45:40:79:
         28:3b:e3:2b:b1:3d:ef:94:2d:77:27:bf:e3:e1:a1:aa:a8:b8:
         eb:07:cb:90:d3:bb:78:92:41:43:c4:3d:85:f9:55:c6:8d:13:
         a5:50:b6:b2:01:f5:95:9b:cc:af:52:09:90:cb:58:62:c9:31:
         a6:4a:bc:5c:9b:9c:0f:70:b6:ca:a5:b1:cd:af:da:85:8f:d2:
         9a:e8:76:ce:7d:56:a7:05:2a:20:d8:ce:80:77:4e:82:fc:28:
         dd:21:85:d3
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIDAfehMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGVl
MDU4MTc2N2FmNDU3OWU0NGRhOTc3YjEwODJkOTRiM2M3YjkyOTgwHhcNMjIwMjA4
MTQ0ODE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygxMjVhYTdkZDlhOTIx
MDg1OWNlMTg1NDA5ZWY4OTQ0ZWFlYTc5OWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAo/t9689ejZENLgUMy107emKzv4m4S2/KN73o5fgD4ZRuaQbX
2Ic1349NvteTH8BMZt4WJmQBxUZYesFnaHRbGCZavncdFt9VYQg/ci51k+3wBVlX
ato+Jz3FH9pv7qIbq10N4f+USp2tArqnkHwTzOjrVfkHPUhmmPVU6KGTuxI5r4Xh
Dya0FioD9KgznQRTMiPI9zrCPm+i1vmV/MoEELOlUkgRvm4jSJxlbfStcECC7EBU
zXi0sqXeXf77dR56137f6V+fVDiGm3L8s2T4X82bhPCUTaf7oMmK+gAotYYzekEP
brpd18HXvVB0gWsD9gj51amRu33QzMHBGHrHLQIDAQABo4ICDDCCAggwHQYDVR0O
BBYEFBJap92akhCFnOGFQJ74lE6up5nUMB8GA1UdIwQYMBaAFO4FgXZ69FeeRNqX
exCC2Us8e5KYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
N2dXQmRucjBWNTVFMnBkN0VJTFpTeng3a3BnLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9jZi8wYjhmMTEtYTAxMS00NzY0LWJjZjMtNmRiYmEyYjFkY2E3LzEv
RWxxbjNacVNFSVdjNFlWQW52aVVUcTZubWRRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8w
YjhmMTEtYTAxMS00NzY0LWJjZjMtNmRiYmEyYjFkY2E3LzEvN2dXQmRucjBWNTVF
MnBkN0VJTFpTeng3a3BnLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAOcMA0GCSqGSIb3DQEBCwUA
A4IBAQCbgzAXlxTGIbUplxzMd34oK7Mk/CJ1e24TnqmdtYjCXko/c/4NYY5jykxC
pyDs3H54saLALpa3+v0c90/bHvydLlN1YogRBp4c77C6WoExex9Lp991CTHqXJKf
j6Xe1H7lm3BnTT9Z5fuz03MG2iKyu2eA2EKHVPzm2rd0E7LzpUYzcHE6qI0uJVjX
jFPtZuY+HL34fGvpbNaRcwEH6qdFQHkoO+MrsT3vlC13J7/j4aGqqLjrB8uQ07t4
kkFDxD2F+VXGjROlULayAfWVm8yvUgmQy1hiyTGmSrxcm5wPcLbKpbHNr9qFj9Ka
6HbOfVanBSog2M6Ad06C/CjdIYXT
-----END CERTIFICATE-----