Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/FcX-1Vh0GrQ3izhf8sxgjyWcNpY.roa
File:                     FcX-1Vh0GrQ3izhf8sxgjyWcNpY.roa (raw, json)
Hash identifier:          MP8QtSwbtEurMWtREipwzm4YgRzEwwkzZ9ZZHEmF+ig=
Subject key identifier:   15:C5:FE:D5:58:74:1A:B4:37:8B:38:5F:F2:CC:60:8F:25:9C:36:96
Certificate issuer:       /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial:       1D17CF06
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/FcX-1Vh0GrQ3izhf8sxgjyWcNpY.roa
Signing time:             Fri 10 Jun 2022 02:09:05 +0000
ROA not before:           Fri 10 Jun 2022 02:09:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8708
IP address blocks:        2a04:1240::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488099590 (0x1d17cf06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
        Validity
            Not Before: Jun 10 02:09:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=15c5fed558741ab4378b385ff2cc608f259c3696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4a:86:87:04:1a:61:5b:63:22:ef:7b:31:98:
                    1a:e4:b5:b0:7a:4c:7d:9e:e9:13:99:65:0a:9e:9f:
                    50:e0:34:8b:4e:7c:be:2b:5c:f4:7d:17:0c:c0:e2:
                    68:36:40:8a:af:2f:95:c3:e1:16:23:a9:d8:5b:ea:
                    2e:ae:01:10:2c:0c:88:b9:bb:81:fc:ee:87:df:30:
                    70:cb:8a:23:2d:8f:44:ba:bf:3c:4f:ec:5c:07:84:
                    07:85:68:08:0f:df:93:0f:6d:1a:b6:a9:b0:e8:7a:
                    6a:6a:f5:c7:7e:e1:1b:e0:c9:15:3d:4a:a6:f6:81:
                    f4:b6:46:f5:6a:ca:b5:15:e4:02:a4:a3:a9:fa:16:
                    99:65:13:92:29:20:30:e9:29:9d:f9:90:4c:41:8d:
                    3d:a7:b2:e2:50:c6:81:55:fe:52:3b:f3:88:a2:78:
                    c9:c9:68:5f:af:fd:01:4c:06:17:7f:61:b2:a2:f7:
                    75:5e:3b:8c:6a:49:6d:94:3e:b2:f7:57:82:21:a0:
                    f4:77:ba:67:18:d2:9e:2b:f5:c1:8c:4f:b4:59:73:
                    0b:5c:1b:a2:5f:d3:8b:99:3a:1d:0f:68:fb:08:ca:
                    94:82:f3:4c:28:05:dc:2d:89:2b:e1:71:1a:f8:61:
                    89:b5:0d:d1:a9:05:26:c2:3a:c9:7a:9e:a2:40:47:
                    cb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C5:FE:D5:58:74:1A:B4:37:8B:38:5F:F2:CC:60:8F:25:9C:36:96
            X509v3 Authority Key Identifier:
                keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/FcX-1Vh0GrQ3izhf8sxgjyWcNpY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:1240::/29

    Signature Algorithm: sha256WithRSAEncryption
         90:26:db:0e:d2:86:14:c8:81:2b:2b:59:f6:62:e2:9b:7a:2a:
         98:b4:bb:cd:0c:b3:b2:e5:ca:c2:2e:c2:78:62:c1:12:45:ac:
         c3:b3:74:40:18:3c:15:20:7e:49:56:00:54:37:ad:06:53:f7:
         50:ed:fe:ee:84:87:12:e5:dd:e1:c9:62:0e:38:53:39:33:1b:
         bd:df:87:70:b0:91:f9:7a:01:68:b0:f3:f6:be:2f:94:9d:9a:
         69:65:e6:6c:15:34:f2:04:e4:e2:b1:bd:cf:a5:ef:57:f0:3b:
         c0:0e:bb:1b:98:ef:10:fa:7b:a1:92:d9:9b:09:0f:d8:97:a0:
         ec:63:9b:f3:d5:4c:a8:5f:63:6f:c8:b6:7c:bf:e4:df:44:6b:
         8e:9c:ae:95:4b:70:9f:33:72:5c:12:b2:51:62:d2:44:45:9b:
         f1:56:40:18:16:b1:c1:f2:e0:a2:f2:da:ac:9a:89:89:9a:81:
         bf:93:85:5f:e0:21:e9:98:11:7e:6b:80:c6:04:d0:9b:48:8b:
         e0:59:74:ff:18:c9:50:f2:e5:0e:9f:bd:44:ea:20:9c:66:bf:
         48:36:14:90:b7:19:14:dc:30:e1:48:dd:ab:3f:55:d5:96:7d:
         d1:53:4e:e8:b0:d8:14:76:4b:1a:8f:5e:c8:fb:f0:b3:68:e2:
         3f:e6:83:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----