Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383430303a3a2f34302d3438203d3e20323033303639.roa
File:                     326131323a646434373a383430303a3a2f34302d3438203d3e20323033303639.roa (raw, json)
Hash identifier:          ZYTFbcOTzuX+EUGqCZvPumEaL43Z1dXUJkPl1U0MvYU=
Subject key identifier:   7B:A3:33:4A:AE:85:A7:67:0F:F2:AE:8E:5C:49:18:19:62:3D:C6:12
Certificate issuer:       /CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Certificate serial:       59FF7D5945E0B11919FCB24CF8CDA836C3F84BC8
Authority key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Authority info access:    rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383430303a3a2f34302d3438203d3e20323033303639.roa
Signing time:             Tue 11 Apr 2023 01:14:09 +0000
ROA not before:           Tue 11 Apr 2023 01:09:09 +0000
ROA not after:            Tue 09 Apr 2024 01:14:09 +0000
asID:                     203069
IP address blocks:        2a12:dd47:8400::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ff:7d:59:45:e0:b1:19:19:fc:b2:4c:f8:cd:a8:36:c3:f8:4b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
        Validity
            Not Before: Apr 11 01:09:09 2023 GMT
            Not After : Apr  9 01:14:09 2024 GMT
        Subject: CN=7BA3334AAE85A7670FF2AE8E5C491819623DC612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:e7:cc:a8:69:6a:6f:3b:9c:07:95:35:a3:
                    0f:a2:40:00:94:ab:83:0b:12:6f:18:e5:7b:30:c9:
                    41:3b:0a:14:e2:16:09:c3:a0:40:75:7f:5b:43:7e:
                    66:fa:c1:b5:b8:b1:43:7f:6d:0c:78:01:f3:a0:1b:
                    b0:ec:cd:90:e7:23:85:32:64:59:02:25:18:76:33:
                    4d:2d:e9:3b:51:3a:7a:fc:79:d6:82:73:34:a1:ea:
                    d1:0d:e7:91:df:f0:63:10:ea:08:33:21:36:be:0d:
                    06:63:39:b4:77:b4:56:0f:7d:4d:d4:de:08:93:37:
                    5a:18:d2:32:10:59:76:bf:1f:4c:20:8b:c7:61:62:
                    e5:3b:30:ed:fe:71:83:ea:e4:06:14:88:d1:73:06:
                    41:b9:7b:82:31:62:87:d9:c1:65:e4:ed:7d:58:56:
                    8a:3e:87:cf:af:42:05:0c:ba:c4:84:c8:79:dd:37:
                    11:f4:c6:19:d6:7a:c4:55:5e:4a:ee:97:f4:db:ae:
                    4c:1e:dd:23:68:22:65:d0:0d:7f:99:3a:8c:cb:a1:
                    5a:7d:2c:98:1e:06:d7:41:12:24:3e:cb:5f:4d:fc:
                    61:93:f0:57:58:a9:93:a1:6e:07:a0:72:12:75:08:
                    b2:34:3d:2d:da:7f:bf:19:0b:b6:11:ec:f2:79:f2:
                    92:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A3:33:4A:AE:85:A7:67:0F:F2:AE:8E:5C:49:18:19:62:3D:C6:12
            X509v3 Authority Key Identifier:
                keyid:34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383430303a3a2f34302d3438203d3e20323033303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:7f:b5:6c:2f:89:61:e5:a5:12:17:ca:57:07:c7:cc:d1:5d:
         5a:cc:ad:e7:1f:85:88:4e:d1:de:cf:73:db:4a:cf:7c:7a:e4:
         39:1c:b8:6e:d9:b0:ca:01:48:f7:b6:80:2b:98:51:56:10:c7:
         74:43:9e:e6:b0:18:81:3d:89:9e:67:ca:f7:97:d8:03:8b:e2:
         46:b0:f5:ce:2d:6e:ee:3f:b7:84:3c:73:c4:31:2e:7d:7d:bf:
         e7:9a:ce:24:dc:a8:c0:12:19:ec:0b:db:08:fc:f4:7b:81:82:
         4c:27:e5:82:f8:8e:77:e9:a6:0b:8d:9a:26:dd:79:62:9d:c1:
         33:49:5b:93:70:bf:bb:8c:50:19:85:a2:ed:6f:be:1e:23:8f:
         cc:26:ab:00:e7:0d:9b:99:81:0f:3b:55:9c:b8:bc:67:87:25:
         4a:96:c9:42:9a:31:b7:1a:1e:d4:29:63:07:af:24:e1:2a:e2:
         4c:56:88:2b:11:c9:36:aa:0f:5c:a8:ae:ac:6c:6b:18:14:42:
         b0:e8:9e:78:29:08:38:7f:75:a0:17:a7:c0:e1:f0:83:a0:a0:
         d5:c4:35:28:82:bf:47:75:70:5a:cd:e2:99:59:5e:fa:92:3d:
         2d:99:6c:de:88:ec:f5:da:43:39:71:29:76:a3:12:01:7f:f0:
         69:8e:d4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----