Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/ufkWASG2zO1Qcklzsi_ereLkdOY.roa
File:                     ufkWASG2zO1Qcklzsi_ereLkdOY.roa (raw, json)
Hash identifier:          oV6SVamatS5cPIIEwcN9FOUdy7Cm0wPII8VaIZBEbhU=
Subject key identifier:   B9:F9:16:01:21:B6:CC:ED:50:72:49:73:B2:2F:DE:AD:E2:E4:74:E6
Certificate issuer:       /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial:       0182F1AD9B3850E310AFD008EB4EB4A30B6C
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/ufkWASG2zO1Qcklzsi_ereLkdOY.roa
Signing time:             Wed 31 Aug 2022 02:14:22 +0000
ROA not before:           Wed 31 Aug 2022 02:14:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3573
IP address blocks:        2a02:ee80:4066::/48 maxlen: 48
                          2a02:ee80:4066::/47 maxlen: 47
                          2a02:ee80:4171::/48 maxlen: 48
                          2a02:ee80:415c::/47 maxlen: 47
                          2a02:ee80:4067::/48 maxlen: 48
                          2a02:ee80:404a::/48 maxlen: 48
                          2a02:ee80:404a::/47 maxlen: 47
                          2a02:ee80:4170::/48 maxlen: 48
                          2a02:ee80:41a8::/47 maxlen: 47
                          2a02:ee80:4170::/47 maxlen: 47
                          2a02:ee80:404b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:f1:ad:9b:38:50:e3:10:af:d0:08:eb:4e:b4:a3:0b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
        Validity
            Not Before: Aug 31 02:14:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b9f9160121b6cced50724973b22fdeade2e474e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:dc:b4:13:9e:ce:e3:c7:b3:f8:fa:96:28:
                    d0:e6:c6:76:d8:28:d1:41:02:8b:f3:01:f8:5d:39:
                    b9:94:f0:4f:96:79:4e:e7:db:bf:cc:15:d8:87:0d:
                    ba:56:f2:59:c0:c8:38:45:49:62:56:23:91:d4:6c:
                    a6:6f:bf:53:f6:7b:f6:69:98:60:37:15:2d:ab:d8:
                    5f:74:74:0d:b8:18:e5:70:fc:6c:bd:49:67:3d:fa:
                    68:f2:31:ed:91:9d:40:cf:29:db:68:a9:9b:0c:c4:
                    f7:28:ca:0a:8f:69:aa:ac:fd:18:e9:6a:8f:25:a2:
                    bd:9a:7c:66:86:3b:0c:03:ad:59:e0:26:f0:b4:26:
                    37:50:f0:af:05:8d:de:99:37:11:b7:bb:64:25:68:
                    48:6f:6f:6f:d7:bf:1e:33:cb:83:8b:e1:3a:26:be:
                    8d:a6:56:e1:ce:fb:60:ef:8d:9c:e6:8e:23:42:12:
                    ee:a6:2b:d6:df:1d:23:74:d8:84:c3:bb:a3:fb:4f:
                    eb:c2:5a:5d:07:e6:f1:ed:67:b7:e8:dc:98:8c:28:
                    74:df:c4:1e:85:4e:70:d0:27:0b:ec:ad:78:71:12:
                    b1:67:73:76:c8:54:c5:da:0c:38:81:63:ac:77:39:
                    e6:44:e1:49:61:9b:a9:f1:44:47:75:15:02:7b:8e:
                    bc:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F9:16:01:21:B6:CC:ED:50:72:49:73:B2:2F:DE:AD:E2:E4:74:E6
            X509v3 Authority Key Identifier:
                keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/ufkWASG2zO1Qcklzsi_ereLkdOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:ee80:404a::/47
                  2a02:ee80:4066::/47
                  2a02:ee80:415c::/47
                  2a02:ee80:4170::/47
                  2a02:ee80:41a8::/47

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:e4:cb:12:ef:14:db:de:cf:af:0b:cb:2a:94:4b:a7:66:
         88:0c:22:ba:7c:17:ef:75:f1:70:df:ed:af:55:ac:97:f2:cf:
         ce:2d:0a:56:f6:b2:9a:80:1e:13:2c:d3:c5:21:66:86:7d:77:
         3d:5d:7d:c1:ba:75:32:bf:66:99:a7:08:a2:3c:e7:e5:a5:70:
         5c:d4:fd:75:64:b6:d8:f3:24:2c:e3:2f:4e:03:47:89:ec:e7:
         f6:4f:08:34:2a:47:79:3d:99:29:0d:0f:43:e1:7a:93:74:26:
         93:b6:d4:84:5e:a5:43:3b:ab:5b:99:3f:e7:35:a0:23:7c:4a:
         22:d1:dc:15:39:74:5a:dc:60:95:fe:05:b2:91:98:50:04:e9:
         e2:63:c7:fe:ac:8a:6e:f9:03:03:7e:8b:61:54:72:10:fa:a9:
         07:26:b0:3b:33:09:74:53:e6:95:e2:02:83:47:2d:e4:3b:6a:
         60:12:d3:6d:ce:bd:ac:a2:13:45:ba:15:a4:95:2e:b3:8b:40:
         f7:37:11:d6:90:12:03:7c:b6:1f:b2:36:ae:fb:cd:dc:c6:11:
         5c:89:b4:53:46:9c:4b:06:3c:c8:f1:9b:ff:ef:00:b6:b8:93:
         e9:80:ce:a8:e4:6e:9c:7a:1a:09:7d:9b:21:4b:78:30:b5:2e:
         c6:06:5a:22
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYLxrZs4UOMQr9AI6060owtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5
M2MzNjQwHhcNMjIwODMxMDIxNDIyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWY5MTYwMTIxYjZjY2VkNTA3MjQ5NzNiMjJmZGVhZGUyZTQ3NGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg/ctBOezuPHs/j6lijQ5sZ22CjR
QQKL8wH4XTm5lPBPlnlO59u/zBXYhw26VvJZwMg4RUliViOR1Gymb79T9nv2aZhg
NxUtq9hfdHQNuBjlcPxsvUlnPfpo8jHtkZ1AzynbaKmbDMT3KMoKj2mqrP0Y6WqP
JaK9mnxmhjsMA61Z4CbwtCY3UPCvBY3emTcRt7tkJWhIb29v178eM8uDi+E6Jr6N
plbhzvtg742c5o4jQhLupivW3x0jdNiEw7uj+0/rwlpdB+bx7We36NyYjCh038Qe
hU5w0CcL7K14cRKxZ3N2yFTF2gw4gWOsdznmROFJYZup8URHdRUCe468HwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFLn5FgEhtsztUHJJc7Iv3q3i5HTmMB8GA1UdIwQY
MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct
MWY0YmVhMjNlNGM3LzEvdWZrV0FTRzJ6TzFRY2tsenNpX2VyZUxrZE9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3
LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcBKgLugEBK
AwcBKgLugEBmAwcBKgLugEFcAwcBKgLugEFwAwcBKgLugEGoMA0GCSqGSIb3DQEB
CwUAA4IBAQBRL+TLEu8U297PrwvLKpRLp2aIDCK6fBfvdfFw3+2vVayX8s/OLQpW
9rKagB4TLNPFIWaGfXc9XX3BunUyv2aZpwiiPOflpXBc1P11ZLbY8yQs4y9OA0eJ
7Of2Twg0Kkd5PZkpDQ9D4XqTdCaTttSEXqVDO6tbmT/nNaAjfEoi0dwVOXRa3GCV
/gWykZhQBOniY8f+rIpu+QMDfothVHIQ+qkHJrA7Mwl0U+aV4gKDRy3kO2pgEtNt
zr2sohNFuhWklS6zi0D3NxHWkBIDfLYfsjau+83cxhFcibRTRpxLBjzI8Zv/7wC2
uJPpgM6o5G6cehoJfZshS3gwtS7GBloi
-----END CERTIFICATE-----