Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466643a3a2f34382d3438203d3e20323038353438.roa
File:                     326131323a646434373a383466643a3a2f34382d3438203d3e20323038353438.roa (raw, json)
Hash identifier:          z4su1sebH3eo4gLEgUhTUftwavShwCW0gv0ZtNZ/nOM=
Subject key identifier:   BB:52:0F:10:AF:77:AB:09:20:3D:C8:BF:4F:2A:3E:32:13:22:55:74
Certificate issuer:       /CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
Certificate serial:       2A280A2A529ECBE0F35FE700AED8DD0874BE9223
Authority key identifier: 34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51
Authority info access:    rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466643a3a2f34382d3438203d3e20323038353438.roa
Signing time:             Tue 11 Apr 2023 01:13:56 +0000
ROA not before:           Tue 11 Apr 2023 01:08:56 +0000
ROA not after:            Tue 09 Apr 2024 01:13:56 +0000
asID:                     208548
IP address blocks:        2a12:dd47:84fd::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:28:0a:2a:52:9e:cb:e0:f3:5f:e7:00:ae:d8:dd:08:74:be:92:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34E6AAC74193FE34C57CB5F562608EE1E50DAD51
        Validity
            Not Before: Apr 11 01:08:56 2023 GMT
            Not After : Apr  9 01:13:56 2024 GMT
        Subject: CN=BB520F10AF77AB09203DC8BF4F2A3E3213225574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:e1:8a:15:b9:28:36:f2:ee:7f:a5:a2:56:
                    0c:df:f2:d3:6f:33:7d:b2:6f:40:62:90:b0:65:63:
                    9d:92:e4:74:83:e3:86:f9:ef:53:98:3f:bc:e8:f4:
                    01:ee:ce:06:f5:a6:3e:54:d8:61:24:11:f5:f1:2d:
                    99:a0:09:5a:63:d1:30:c6:dd:52:69:ab:e2:97:ae:
                    72:9c:8a:49:90:de:f5:4b:85:3a:19:18:5a:84:13:
                    92:1a:d9:b7:98:d1:b4:f5:6d:a3:55:10:be:c1:5c:
                    ec:5e:19:99:11:7f:57:88:64:ec:32:b8:ad:f4:aa:
                    e3:19:73:b1:92:64:34:74:fa:3f:84:75:7d:58:2a:
                    c6:1b:ee:16:65:df:0a:ec:0c:d0:c7:67:c1:78:60:
                    c3:e0:85:f5:0a:b9:c3:4e:dc:0c:87:df:c7:0c:ef:
                    58:42:25:fd:8a:6c:01:e6:2c:fb:e2:b2:ee:1d:c2:
                    f9:e7:ce:3f:c7:db:07:0b:19:8c:4f:e1:87:eb:7d:
                    c2:ef:21:88:c5:56:da:35:2f:d6:28:11:c1:c3:cf:
                    89:28:f7:b6:76:70:81:5c:bc:17:a0:33:2b:14:96:
                    6c:cf:c0:7d:d1:bd:64:11:0e:5b:d9:e7:20:7b:de:
                    39:5f:86:da:6c:02:bd:b3:5c:5a:f5:0c:92:f8:c5:
                    09:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:52:0F:10:AF:77:AB:09:20:3D:C8:BF:4F:2A:3E:32:13:22:55:74
            X509v3 Authority Key Identifier:
                keyid:34:E6:AA:C7:41:93:FE:34:C5:7C:B5:F5:62:60:8E:E1:E5:0D:AD:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/326131323a646434373a383466643a3a2f34382d3438203d3e20323038353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:84fd::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:cd:39:ab:0c:3c:4f:12:a5:4f:bf:f8:b8:3d:b7:dd:79:f2:
         d6:00:24:6b:2c:bb:32:fc:4a:37:4a:99:f9:ad:60:51:e2:64:
         f7:9b:03:d3:24:c5:9a:ae:1a:7f:59:11:13:89:a6:d4:3d:3c:
         cb:0d:f7:29:83:00:3c:7d:0f:10:34:be:e9:23:c1:b7:ce:6e:
         4e:53:ce:87:9f:9e:84:e7:90:e1:a4:b5:02:97:15:c3:81:92:
         c9:c4:96:f9:b7:40:24:a4:88:71:b8:2d:c8:7c:50:e3:b6:57:
         5e:0c:8b:f9:ad:8c:89:6e:d2:12:89:2f:3c:7a:92:d8:c3:7b:
         1c:93:13:bf:71:4d:83:99:aa:fe:09:4c:4c:87:2a:e5:fd:d0:
         17:7d:11:00:68:dc:10:98:f8:07:d5:9a:63:bc:60:c7:38:d8:
         e9:36:0d:fd:b9:ab:a3:17:fe:f3:3c:22:57:3b:11:9a:0b:b6:
         d5:78:fe:3d:69:cd:70:dd:f6:06:1b:8d:47:02:dd:65:20:f2:
         07:e2:9d:1c:3d:fb:d5:58:d2:01:1b:8c:fd:b7:47:81:5f:c3:
         24:db:05:ac:1b:de:6a:e1:3b:5b:b3:5a:a5:bd:09:1d:fe:cf:
         7f:a3:e7:4a:6a:cd:77:24:d2:45:2a:e0:46:bf:87:16:a5:46:
         f1:e8:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----