Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/a5li9RiKka1Wh3W13rITk0pJsAQ.roa
File:                     a5li9RiKka1Wh3W13rITk0pJsAQ.roa (raw, json)
Hash identifier:          Fuda/SNKGrxwc5ACDf8gMbiTxfi2c1mmBQLwdJdq6LQ=
Subject key identifier:   6B:99:62:F5:18:8A:91:AD:56:87:75:B5:DE:B2:13:93:4A:49:B0:04
Certificate issuer:       /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial:       01949D82
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/a5li9RiKka1Wh3W13rITk0pJsAQ.roa
Signing time:             Thu 19 May 2022 11:52:01 +0000
ROA not before:           Thu 19 May 2022 11:52:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     48976
IP address blocks:        2a12:e100:4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26516866 (0x1949d82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
        Validity
            Not Before: May 19 11:52:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6b9962f5188a91ad568775b5deb213934a49b004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:65:dc:f1:ab:8a:8e:b6:06:84:4e:ca:56:
                    dd:6c:8f:19:e3:44:d0:05:21:60:b4:96:5a:fb:b1:
                    43:aa:0a:b5:48:7c:0f:cd:72:c2:db:7b:bd:b0:ef:
                    88:07:c2:0c:6d:48:74:3d:0a:60:ce:f6:40:e5:19:
                    d7:79:81:0c:ae:b6:c9:ee:01:30:c3:16:17:18:7b:
                    24:02:b9:a8:2f:c6:40:1b:fa:96:8b:e0:f3:a7:2f:
                    5d:aa:a5:94:49:dd:87:79:b0:75:96:0f:6a:59:e0:
                    02:d7:c8:bf:cd:54:f5:46:4b:03:25:45:11:6c:c5:
                    8e:c0:8a:43:a2:0c:b4:05:9f:bf:09:0f:7d:af:88:
                    8c:80:4b:02:cb:03:68:af:91:7e:44:0c:21:eb:65:
                    82:df:28:dd:38:49:7d:45:98:bf:1e:4c:aa:a5:a1:
                    51:58:22:dc:f1:22:41:67:5e:cd:c7:35:9c:62:39:
                    3f:3a:23:25:dd:dc:88:a1:62:12:20:35:e2:a2:37:
                    ec:a6:35:d7:80:8e:07:8e:9d:32:31:bc:48:0d:93:
                    25:d9:ae:c7:a2:f8:8b:c0:e2:a0:7c:5d:02:63:4f:
                    37:d0:c7:c7:72:fa:b2:ae:f2:f5:43:e7:f9:1d:37:
                    11:10:05:88:68:21:c2:ca:ed:a6:02:11:e1:61:12:
                    50:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:99:62:F5:18:8A:91:AD:56:87:75:B5:DE:B2:13:93:4A:49:B0:04
            X509v3 Authority Key Identifier:
                keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/a5li9RiKka1Wh3W13rITk0pJsAQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:e100:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:d0:de:84:d4:f6:a4:8b:79:7d:bb:f4:d3:06:13:1d:f9:91:
         8d:6f:32:c8:2e:d1:22:44:36:a6:f0:09:97:5c:b2:47:a3:2d:
         20:f3:e9:a9:06:1e:ff:5e:fa:49:6d:07:ed:a9:b0:20:b8:33:
         cb:c3:66:dc:94:96:72:ed:6c:cd:c3:8d:2d:29:10:b3:8b:0b:
         64:35:65:f3:76:a9:47:17:9d:d7:69:6a:58:0e:b2:4e:09:ba:
         36:1a:86:6f:9b:2c:b8:50:e2:11:79:f4:1c:46:f9:60:9d:0e:
         41:cb:70:e7:ed:dc:dd:1f:f0:02:bc:ec:41:6c:00:8c:c5:d6:
         dd:4f:5f:66:9a:89:06:0d:25:0f:8b:5c:73:0f:db:b7:cd:9f:
         4e:88:87:d4:c6:4a:f8:44:31:5d:54:dc:7e:de:cc:35:c4:3c:
         9f:e1:98:79:64:39:6e:1b:f6:0e:cb:70:51:47:a9:06:d0:a4:
         05:d4:9c:98:d9:db:6a:d9:97:d2:49:a4:eb:c5:3d:81:75:a0:
         d2:e5:d0:2b:53:07:17:e9:d8:e5:f5:ef:aa:70:c9:92:bc:32:
         f9:12:3a:6c:c1:ac:17:1b:7d:f1:7f:2c:6f:f7:0d:72:12:cb:
         06:03:52:2f:fb:15:32:d7:b1:5f:b4:fd:c7:55:4d:6a:b4:a6:
         33:d5:95:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----