Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/UX680xOeTwGHRRgTNzpmxzNxh1A.roa
File:                     UX680xOeTwGHRRgTNzpmxzNxh1A.roa (raw, json)
Hash identifier:          KWmTCfX3k62tgSQBZF6mgdzABm6d+88CLGtkjkszUlU=
Subject key identifier:   51:7E:BC:D3:13:9E:4F:01:87:45:18:13:37:3A:66:C7:33:71:87:50
Certificate issuer:       /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial:       1B1B90B2
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/UX680xOeTwGHRRgTNzpmxzNxh1A.roa
Signing time:             Sat 01 Jan 2022 02:58:21 +0000
ROA not before:           Sat 01 Jan 2022 02:58:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2116
IP address blocks:        2a02:d60::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454791346 (0x1b1b90b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
        Validity
            Not Before: Jan  1 02:58:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=517ebcd3139e4f0187451813373a66c733718750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:ff:81:57:5f:9b:f4:d7:58:cb:a0:f2:ca:
                    06:36:e4:c9:18:a2:fb:8d:b6:8e:6f:f0:4d:e4:a3:
                    69:ad:93:9a:02:d3:09:e2:0f:40:4d:9c:c0:33:fd:
                    02:bb:9b:cc:e5:0f:a4:38:b2:ce:48:d3:b1:8f:33:
                    51:76:dd:85:20:3b:ac:65:e4:3c:fd:a2:cd:f3:f5:
                    b1:b5:b0:7f:24:dc:80:19:7d:e9:89:72:21:71:c2:
                    43:1b:de:cb:38:cc:fa:40:48:93:68:08:79:9c:cc:
                    94:8a:e5:04:b4:06:42:1f:00:2f:b0:42:19:18:97:
                    8f:c8:23:e6:69:60:48:b2:25:8b:51:6d:ec:4a:54:
                    69:b0:20:2d:19:88:30:d6:c2:86:b6:be:f1:8f:65:
                    b7:59:e4:a3:bf:ae:55:79:42:15:0b:b7:50:d8:0c:
                    f3:b4:26:8e:3e:30:80:96:3a:d3:50:bc:04:6e:ef:
                    02:5c:6b:77:a5:47:9f:f1:8d:fe:97:51:66:03:7d:
                    96:5e:02:1b:3c:61:e3:e0:c5:a5:5f:68:b7:83:a0:
                    d5:60:78:b5:8a:38:14:d2:ac:ea:81:67:03:43:07:
                    6c:c7:8a:99:cd:4b:89:77:c3:02:32:40:91:06:14:
                    20:0c:f8:a0:68:de:50:a2:d0:3f:74:15:70:5d:97:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7E:BC:D3:13:9E:4F:01:87:45:18:13:37:3A:66:C7:33:71:87:50
            X509v3 Authority Key Identifier:
                keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/UX680xOeTwGHRRgTNzpmxzNxh1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:a0:88:3a:7c:b5:da:db:96:e3:29:4e:47:f0:a3:ae:a4:af:
         27:06:d0:ae:41:9d:12:5f:56:97:c3:fd:db:c3:f5:31:a6:0f:
         4f:a5:92:5b:48:d7:81:9d:da:e3:3b:a6:1a:f1:41:88:b4:57:
         3e:1d:34:89:29:87:d5:51:b0:8d:d0:b2:38:59:3c:0b:57:ba:
         5e:f9:93:e6:9c:ca:33:6b:62:57:91:4e:60:29:f4:52:8b:e5:
         24:b8:aa:8c:67:3d:b6:71:5b:2c:ce:67:ee:19:e5:a1:7f:6e:
         13:ee:f2:17:6c:35:47:45:e9:6c:16:8b:61:b6:e3:bb:58:bb:
         e3:cf:b0:7d:a3:1b:96:23:85:b8:90:60:b9:ba:97:ed:63:a2:
         b0:9e:55:48:08:36:d3:7c:bc:c4:e7:72:46:aa:9e:47:22:14:
         bc:d7:73:07:33:ce:22:78:9d:dd:e4:e1:1a:15:89:52:f1:f6:
         aa:84:2c:f7:09:be:07:89:94:d1:00:9d:1a:fb:63:e3:f1:6e:
         dc:b7:26:14:bd:34:61:62:63:6c:38:da:0c:3f:73:59:2b:a9:
         8a:b1:07:9a:73:30:21:e2:dc:e1:09:d3:2b:49:4b:e1:80:cf:
         18:14:12:22:a6:29:4c:39:39:65:f2:74:7b:d4:3c:cc:08:97:
         00:e3:7f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----