Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/F-GiCh4KbhMj2YNXMIuuiejUSFs.roa
File:                     F-GiCh4KbhMj2YNXMIuuiejUSFs.roa (raw, json)
Hash identifier:          5q/sNiP10gSLREbcEbjcEML1APcoMWGqBnEtomLWTQA=
Subject key identifier:   17:E1:A2:0A:1E:0A:6E:13:23:D9:83:57:30:8B:AE:89:E8:D4:48:5B
Certificate issuer:       /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial:       059F2023
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/F-GiCh4KbhMj2YNXMIuuiejUSFs.roa
Signing time:             Sat 01 Jan 2022 11:03:06 +0000
ROA not before:           Sat 01 Jan 2022 11:03:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206477
IP address blocks:        2001:678:ccc::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94314531 (0x59f2023)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
        Validity
            Not Before: Jan  1 11:03:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17e1a20a1e0a6e1323d98357308bae89e8d4485b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:23:23:ec:b1:72:39:7f:fe:94:a2:09:1a:
                    64:65:51:87:27:d9:eb:6e:f8:c7:f5:8f:1d:6d:00:
                    dd:0e:8a:e5:dc:0f:a3:84:5d:95:43:fd:d5:c2:41:
                    3e:ff:13:3a:31:c7:00:12:18:68:1a:62:6d:64:27:
                    bd:9f:c9:fa:4e:2f:78:5a:50:f5:97:8d:02:56:fb:
                    44:f8:da:4c:d3:b5:15:cb:a5:1b:92:9c:0f:1c:5a:
                    ff:a9:eb:8d:98:00:75:02:84:6e:64:02:c0:ca:32:
                    d1:cb:a9:c6:c6:64:22:9d:43:3a:65:e4:9c:7d:3c:
                    7f:98:36:1e:8a:67:3a:be:e3:b2:22:6a:38:79:a2:
                    76:24:7c:79:19:17:e9:91:c0:ae:3b:2d:a7:11:5d:
                    eb:58:9a:d1:b7:c5:ae:23:a9:88:c2:36:a2:d5:69:
                    45:1f:3d:14:a7:5d:00:db:8b:f8:89:75:7e:2b:f2:
                    68:ea:fa:fb:72:34:99:87:f6:48:29:0f:ca:54:c6:
                    28:5b:a1:c9:69:bf:cc:7b:64:22:ea:1b:82:af:92:
                    47:3c:e8:d6:da:09:02:e0:b2:56:fd:b3:df:8a:e6:
                    4a:f6:d8:dc:31:42:fc:28:cf:04:79:45:be:0a:d7:
                    f5:26:2e:55:51:55:63:ef:67:34:ab:12:13:ad:32:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E1:A2:0A:1E:0A:6E:13:23:D9:83:57:30:8B:AE:89:E8:D4:48:5B
            X509v3 Authority Key Identifier:
                keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/F-GiCh4KbhMj2YNXMIuuiejUSFs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:ccc::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:a3:cb:70:37:ff:93:98:a1:f0:87:2e:51:a6:2f:0f:45:ed:
         fc:0f:ee:56:9e:97:b0:3c:77:92:24:a7:22:f3:07:11:92:00:
         b9:4d:3c:60:9e:80:eb:44:c1:22:08:95:8f:e2:2d:e9:8b:cd:
         34:5d:ae:92:6a:f8:ae:76:4b:ce:a3:32:b6:22:3c:c7:04:fb:
         cb:5a:33:0e:28:ab:c7:ee:56:cc:98:df:4b:ff:ae:3e:fe:4f:
         01:72:19:24:84:e5:0b:6c:c6:6e:9c:80:ad:90:1b:e9:81:80:
         c0:d6:23:4f:c3:35:17:66:ee:f9:73:99:2c:79:aa:06:5a:60:
         de:0b:d9:e2:97:d5:04:0e:15:d0:5a:97:e7:50:90:7d:e8:11:
         c5:4f:9f:02:b2:16:0d:e1:4e:fd:d7:93:b6:08:31:85:99:7e:
         d9:39:74:8c:a5:c6:a1:66:ce:c1:dd:c1:98:94:a9:37:ce:9f:
         e2:20:b2:e8:14:c9:66:91:f6:d0:cd:6b:8b:00:32:f6:dc:d6:
         7f:55:50:a9:12:b8:f8:90:2c:1a:9d:85:b8:30:44:41:03:9f:
         9c:ed:61:04:83:ae:67:19:40:32:e5:cb:6a:fb:bf:da:65:48:
         2c:20:71:54:77:cd:6b:08:5e:a4:76:a7:0e:e5:9a:b3:24:5f:
         97:7e:c9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----