Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/zJPcpq2x2bA9pvUhV8aMqGEapqY.roa
File:                     zJPcpq2x2bA9pvUhV8aMqGEapqY.roa (raw, json)
Hash identifier:          IW3S09UIimz/e6m7AhRCGYMu0hU0QZhVCI3Hq1hrYwQ=
Subject key identifier:   CC:93:DC:A6:AD:B1:D9:B0:3D:A6:F5:21:57:C6:8C:A8:61:1A:A6:A6
Certificate issuer:       /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial:       07473783
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/zJPcpq2x2bA9pvUhV8aMqGEapqY.roa
Signing time:             Sat 01 Jan 2022 15:05:05 +0000
ROA not before:           Sat 01 Jan 2022 15:05:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25098
IP address blocks:        2001:678:b04::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122107779 (0x7473783)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
        Validity
            Not Before: Jan  1 15:05:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cc93dca6adb1d9b03da6f52157c68ca8611aa6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:d1:33:92:b6:c7:79:45:1e:28:cf:f6:4d:
                    d0:d7:65:5a:55:6f:e5:f1:79:85:de:f6:31:0f:2c:
                    b0:25:fb:8b:18:7f:fa:70:49:1c:74:11:f9:ae:ee:
                    d4:41:6c:1a:83:5b:d7:c2:90:92:d7:35:75:7a:31:
                    7f:28:9e:20:33:fb:3e:7c:a6:a4:92:04:1c:c7:56:
                    cf:8a:85:2e:1b:4a:6e:61:4b:d3:e1:60:c7:91:90:
                    1f:85:c6:00:20:7b:f6:4e:33:d1:5e:bc:5f:85:b0:
                    08:18:aa:e8:02:ee:7f:fb:91:8d:fb:6a:8b:95:c8:
                    13:31:b5:95:b1:5b:92:ae:df:48:2f:cf:83:26:e8:
                    39:27:0a:9d:c6:9d:00:76:e4:38:7b:db:2b:34:d4:
                    76:df:b8:80:80:6f:0d:7a:9b:86:b3:91:25:90:e2:
                    c5:10:d9:90:2e:62:00:3c:ce:ff:f6:20:59:d8:d6:
                    a0:85:e4:1f:6e:f1:f3:c8:b5:b1:27:19:12:07:42:
                    46:91:5d:46:81:9d:9b:d4:53:99:db:14:b1:f8:72:
                    93:c4:e6:a7:9e:f5:56:3b:c8:e0:74:aa:98:d7:39:
                    fa:c8:d8:bd:c9:01:82:f2:4f:65:49:9b:5b:68:92:
                    2e:f1:be:18:36:70:16:22:23:55:81:f9:33:76:10:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:93:DC:A6:AD:B1:D9:B0:3D:A6:F5:21:57:C6:8C:A8:61:1A:A6:A6
            X509v3 Authority Key Identifier:
                keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/zJPcpq2x2bA9pvUhV8aMqGEapqY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:b04::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:19:18:f6:ce:2d:ac:be:66:de:3b:3b:91:b5:ba:83:da:60:
         bd:b3:a5:92:e2:9c:48:b8:82:48:b8:c0:95:2c:9e:9f:62:4b:
         fc:90:ea:9a:65:54:11:4f:f7:de:33:b7:f8:0e:4d:c3:41:70:
         be:f6:83:e2:da:c1:0d:56:c8:7b:7b:0d:90:ef:f2:d3:a9:f9:
         d6:b8:6d:ff:92:5e:4e:f9:ed:bd:9e:6b:54:12:43:22:96:18:
         1f:74:0c:66:19:16:b8:d9:3f:ad:97:ca:b6:9b:c4:16:a8:41:
         97:ac:31:67:79:49:10:db:15:34:57:49:8c:64:05:23:12:56:
         78:12:3f:a0:fb:64:41:f9:7a:a7:aa:0b:b2:a6:aa:1d:97:60:
         f6:76:ac:66:7b:42:18:87:39:7f:d2:0c:2d:43:3d:40:9c:35:
         fa:6e:7d:ee:e6:fd:65:1b:c8:0d:7a:db:56:68:51:0b:88:ce:
         35:0d:35:33:f3:57:75:c4:4c:8d:54:8b:2c:fb:11:f0:95:c6:
         6f:ab:ef:3e:23:85:c2:bc:44:14:ed:a3:de:8e:80:08:13:3d:
         be:c2:5a:b3:ac:77:c1:a5:99:af:9c:c0:3c:62:85:ff:a2:45:
         e0:b6:03:0c:2d:fa:54:bd:69:6b:21:d2:19:ee:66:d6:5a:17:
         56:08:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----