Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/6pRvuesbiBC8si2hK-EIsskbyCE.roa
File:                     6pRvuesbiBC8si2hK-EIsskbyCE.roa (raw, json)
Hash identifier:          9Do/FT9HiKQnCVbpQbh24iJf8iOB2pzjj4oToMrs4mo=
Subject key identifier:   EA:94:6F:B9:EB:1B:88:10:BC:B2:2D:A1:2B:E1:08:B2:C9:1B:C8:21
Certificate issuer:       /CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Certificate serial:       027D360D
Authority key identifier: 3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/6pRvuesbiBC8si2hK-EIsskbyCE.roa
Signing time:             Wed 01 Jun 2022 19:42:20 +0000
ROA not before:           Wed 01 Jun 2022 19:42:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42831
IP address blocks:        2a11:1680:6::/48 maxlen: 48
                          2a11:1680:9::/48 maxlen: 48
                          2a11:1680:7::/48 maxlen: 48
                          2a11:1680:10::/48 maxlen: 48
                          2a11:1680:8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41760269 (0x27d360d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
        Validity
            Not Before: Jun  1 19:42:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea946fb9eb1b8810bcb22da12be108b2c91bc821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:eb:82:9a:79:44:87:b5:da:7e:ac:45:9a:1b:
                    88:2b:b2:97:b1:ff:49:d1:06:e6:97:29:ff:d6:4b:
                    6b:5c:da:63:ee:2c:5d:3f:c6:b5:f0:09:cd:e7:ab:
                    fc:d7:fb:53:21:99:99:ca:bf:fc:1e:f7:60:9a:11:
                    58:11:0d:23:69:5e:b5:4d:47:39:ab:4d:b0:29:54:
                    79:53:76:60:f2:4f:4c:a9:63:55:ed:ff:14:e0:94:
                    e3:ba:d4:85:9d:dd:6d:8d:08:b6:81:57:98:32:46:
                    c8:db:1f:7a:89:de:c5:d9:6d:d4:35:d3:d0:00:cf:
                    b6:c8:db:8e:a2:c7:dd:de:37:a7:52:c6:a3:36:f1:
                    2b:66:37:c0:42:e4:4e:c2:c6:63:da:77:96:d9:c0:
                    0b:35:24:97:5a:e8:5b:37:84:46:cb:36:ac:3c:91:
                    9f:0c:9a:14:44:4f:fc:63:5a:bd:59:a9:71:c6:b6:
                    3f:5b:d5:10:25:b1:75:96:13:76:a9:cd:82:c2:53:
                    3c:8e:35:6d:ce:d2:a4:85:83:b1:ec:35:c5:e7:ad:
                    f1:33:7f:b5:85:83:40:e5:5c:70:1b:1c:06:60:a4:
                    ca:00:fc:75:a2:93:95:5d:85:ab:0f:d5:44:a6:73:
                    88:ff:70:24:ad:db:43:4a:c0:a1:b9:88:17:98:f3:
                    e8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:94:6F:B9:EB:1B:88:10:BC:B2:2D:A1:2B:E1:08:B2:C9:1B:C8:21
            X509v3 Authority Key Identifier:
                keyid:3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/6pRvuesbiBC8si2hK-EIsskbyCE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:1680:6::-2a11:1680:9:ffff:ffff:ffff:ffff:ffff
                  2a11:1680:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:c6:59:f6:7e:b2:d1:3e:de:f1:49:46:9d:d6:63:0a:99:a0:
         84:b8:2b:8c:d8:21:0f:04:9b:44:d1:ac:02:97:c1:f8:aa:0c:
         b2:81:65:6a:b4:24:44:2e:ec:2a:2b:9e:94:5b:d2:e3:9a:6b:
         38:b5:1f:33:7d:42:d4:0d:ac:78:58:f0:82:b7:3d:1c:ef:5c:
         ab:26:17:f3:24:1d:35:ff:ef:37:06:fd:02:61:34:7a:a1:a1:
         6c:45:7e:b8:ed:6e:ff:50:13:28:3c:4f:71:8a:f8:a7:3f:df:
         ea:4e:e2:4c:53:22:a7:f5:84:ae:3d:97:9e:7b:69:e7:8d:f8:
         b5:21:2f:03:01:17:69:fb:98:04:72:75:9c:d4:25:fe:01:14:
         43:24:ce:4e:20:34:b3:50:a1:17:19:f1:ff:1f:1a:e4:39:a2:
         67:6e:4b:66:5f:c5:50:f6:b6:72:08:05:8c:c3:d8:9e:03:70:
         35:6a:60:1c:6c:a4:a9:de:20:98:4b:ab:a3:ff:1d:b4:91:f2:
         c6:a0:31:9e:cb:ef:d5:3b:db:c9:cf:7a:c1:f6:fb:ff:68:04:
         93:0a:3c:c8:5a:9b:a8:16:4e:2a:89:7a:ed:4d:60:b0:3e:92:
         b3:4a:3e:ba:a7:97:8e:aa:ff:93:97:2e:a2:2a:7d:e4:cc:85:
         dc:df:fc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----