Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/V-_yOvXuggY050O4RlLOPF73gpw.roa
File:                     V-_yOvXuggY050O4RlLOPF73gpw.roa (raw, json)
Hash identifier:          3TNEiEVh1moHJ6Uo96JGoXoIZSTruMsBnuAOL+vQVHo=
Subject key identifier:   57:EF:F2:3A:F5:EE:82:06:34:E7:43:B8:46:52:CE:3C:5E:F7:82:9C
Certificate issuer:       /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial:       018432FCA93B13C0FC4B6CFE3FB92EFD519F
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/V-_yOvXuggY050O4RlLOPF73gpw.roa
Signing time:             Tue 01 Nov 2022 11:38:49 +0000
ROA not before:           Tue 01 Nov 2022 11:38:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     42675
IP address blocks:        2a13:7c80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:32:fc:a9:3b:13:c0:fc:4b:6c:fe:3f:b9:2e:fd:51:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
        Validity
            Not Before: Nov  1 11:38:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57eff23af5ee820634e743b84652ce3c5ef7829c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:ad:e4:d2:61:13:a8:10:23:43:bd:ce:9d:
                    b3:48:b2:e1:75:89:99:b8:48:ab:45:dc:3c:e4:52:
                    75:24:4d:de:7f:d3:5b:38:a0:8d:07:69:c8:97:46:
                    b8:91:14:d3:b8:bd:19:fa:03:d4:fd:74:d5:d8:a0:
                    9f:aa:82:a4:46:5e:70:fb:d7:54:ef:97:9f:e3:fd:
                    ba:9a:7f:13:1c:7d:6b:c3:a0:aa:4e:cb:42:d9:5d:
                    c6:8b:21:07:3d:b7:ce:d3:f3:32:e9:4f:88:40:80:
                    2b:26:a6:86:82:1d:37:83:f6:49:d1:a1:ac:5f:ad:
                    84:11:0c:4c:22:e7:46:a5:80:37:41:81:73:76:3d:
                    3b:6a:bb:b9:27:28:e1:5e:11:71:b9:3e:ef:11:03:
                    91:92:ea:2b:61:00:70:67:8a:85:b7:7a:c1:9a:a2:
                    44:94:74:db:ff:5f:c7:00:92:2a:41:0c:87:36:c7:
                    2a:00:34:f7:e9:cf:ca:82:bb:0d:d9:46:0e:bb:58:
                    9f:7d:ec:c0:22:d8:27:fb:83:01:aa:11:cf:86:0e:
                    7f:30:42:69:83:30:34:81:f6:1e:50:9c:5a:cd:9e:
                    76:89:f1:76:40:1f:64:24:77:2b:95:37:67:8e:19:
                    8b:4a:c7:b1:09:f4:b0:64:3c:ba:5d:f0:75:ae:db:
                    1f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EF:F2:3A:F5:EE:82:06:34:E7:43:B8:46:52:CE:3C:5E:F7:82:9C
            X509v3 Authority Key Identifier:
                keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/V-_yOvXuggY050O4RlLOPF73gpw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:7c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:2a:1e:a5:91:82:4f:b4:5b:5a:c0:fa:11:3c:1e:93:b3:61:
         85:03:b7:4c:f0:34:f5:e5:89:7a:4f:d9:0c:d2:8a:58:f3:6e:
         c2:0a:15:d7:63:87:5d:27:15:c2:55:9e:c3:25:9d:84:09:1f:
         49:45:d4:fc:ee:24:cc:ce:e9:fd:88:ce:00:11:2d:54:f9:e8:
         9d:9f:58:72:2e:ee:54:47:90:4f:e2:2c:f3:6b:9c:a8:ef:03:
         6c:9e:12:56:48:0c:61:b6:07:d5:6a:d3:17:60:f1:bd:56:e0:
         dd:b3:34:c4:b9:30:a4:d0:d8:be:39:a4:9d:c9:27:31:7f:f9:
         d4:a9:6f:d6:be:07:e4:8a:ce:f8:91:97:81:96:8d:65:a0:82:
         bb:51:e6:2a:86:52:18:ac:38:db:1d:49:74:10:26:e2:e4:18:
         c2:dd:61:29:07:8d:71:02:5e:29:b3:4e:b1:af:e6:3f:ce:ed:
         d1:0c:6e:e8:69:e0:98:e9:aa:97:a2:88:08:10:02:6b:27:25:
         93:d9:29:ae:54:5c:f3:86:17:4f:92:7f:d4:5a:77:67:fe:79:
         07:40:9c:8d:47:e2:e2:73:27:b0:32:86:15:9b:75:1d:3f:d5:
         09:62:2f:dc:fc:8c:08:19:39:05:73:13:96:d8:39:04:87:93:
         60:57:10:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----