Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/6lSspVkSY_r1oRtyAxCsuPbkxwg.roa
File:                     6lSspVkSY_r1oRtyAxCsuPbkxwg.roa (raw, json)
Hash identifier:          O62stww/XeAuqn+HeX2gzkAW6dhnPxb/3XlpmYZXNAo=
Subject key identifier:   EA:54:AC:A5:59:12:63:FA:F5:A1:1B:72:03:10:AC:B8:F6:E4:C7:08
Certificate issuer:       /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial:       08E55C1A
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/6lSspVkSY_r1oRtyAxCsuPbkxwg.roa
Signing time:             Sat 01 Jan 2022 09:06:40 +0000
ROA not before:           Sat 01 Jan 2022 09:06:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     378
IP address blocks:        132.68.0.0/15 maxlen: 15

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149249050 (0x8e55c1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
        Validity
            Not Before: Jan  1 09:06:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ea54aca5591263faf5a11b720310acb8f6e4c708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:26:3e:7e:89:d0:11:5b:25:e0:94:b0:7a:52:
                    85:99:3f:0e:e0:39:6d:4b:8b:4d:a6:c5:07:dd:fd:
                    be:60:26:03:42:1f:c5:f3:04:8d:ac:6c:b7:af:21:
                    81:7c:33:bf:0a:98:9b:3a:23:13:92:60:50:da:50:
                    fa:4e:20:68:73:15:a5:3f:92:8f:bb:63:ef:c4:3e:
                    89:91:f5:73:4d:39:c8:73:e2:41:bc:cc:b8:1a:18:
                    72:a3:7d:f9:f6:0f:14:06:bd:74:eb:b1:5f:57:f5:
                    46:46:66:ac:e3:4e:85:66:da:87:5c:c9:b1:19:eb:
                    db:83:c0:82:25:bc:07:96:75:4a:cc:b6:e9:73:d7:
                    54:ab:b9:e1:1e:40:5d:15:6a:f4:9b:b2:60:5b:f8:
                    11:f9:4f:ff:88:89:23:e7:73:84:92:8e:86:84:8f:
                    36:dd:b3:40:3a:ae:ef:ce:7a:51:15:86:86:6f:c4:
                    a1:ef:11:98:c4:da:9f:83:40:07:df:b9:62:69:3e:
                    1c:9c:90:15:de:8d:d0:95:6f:07:1e:b0:42:65:1b:
                    00:31:37:a2:ac:b8:1e:9c:9e:b1:fb:2d:44:74:e3:
                    67:24:61:f6:9c:24:d5:b0:21:ea:a7:84:c6:a7:e1:
                    b0:09:83:1d:47:f8:45:35:8f:b8:7c:8a:b1:f1:08:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:54:AC:A5:59:12:63:FA:F5:A1:1B:72:03:10:AC:B8:F6:E4:C7:08
            X509v3 Authority Key Identifier:
                keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/6lSspVkSY_r1oRtyAxCsuPbkxwg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.68.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         82:c7:92:00:be:08:60:eb:a3:15:c7:96:a1:06:5d:2e:4d:88:
         7a:73:50:d6:62:cf:11:79:3a:9f:e8:d8:54:d7:a9:3b:02:f4:
         9d:7e:0a:07:2c:4f:ab:44:c4:64:66:57:da:f1:55:84:01:ce:
         03:f9:f6:3d:1d:6e:77:71:4a:40:f1:98:9e:64:2c:b9:25:b7:
         b6:aa:36:15:d0:1d:d1:6d:ba:be:83:4d:9f:44:75:e9:7e:f3:
         9e:94:7a:2a:96:13:5d:38:2d:e0:ef:7e:f6:05:09:82:78:c3:
         1d:db:62:6d:c7:73:e5:15:33:43:22:4e:57:f4:b4:fa:b4:cf:
         44:a4:f7:f7:f9:9b:af:cb:d1:d3:a5:7d:f1:76:04:b5:7f:77:
         30:72:b8:39:e1:4e:d8:2b:17:a9:02:d4:31:44:32:ef:f9:25:
         01:bc:bb:ae:72:be:22:d3:b3:53:96:be:47:31:fb:d0:aa:6f:
         54:83:ff:80:ff:7b:39:55:34:92:db:1a:f9:33:42:96:dc:d5:
         a8:5b:44:d8:a9:c0:4c:3b:06:36:6b:3d:95:fa:c9:38:2a:b1:
         16:f9:4b:25:8a:a5:82:95:aa:67:5d:cb:9c:b5:2e:f0:d5:e3:
         74:95:17:5b:32:e3:e7:f4:18:44:1c:6c:13:6c:c9:52:ef:92:
         59:bf:3e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----