Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/vXD7RXyhSCgs9Hjqgt0RrG4xr64.roa
File:                     vXD7RXyhSCgs9Hjqgt0RrG4xr64.roa (raw, json)
Hash identifier:          vmJHcjmMtN39wcBY1PLkeoIyttb+yvvdSNSmjOPPM6M=
Subject key identifier:   BD:70:FB:45:7C:A1:48:28:2C:F4:78:EA:82:DD:11:AC:6E:31:AF:AE
Certificate issuer:       /CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
Certificate serial:       01A4AE
Authority key identifier: 88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/vXD7RXyhSCgs9Hjqgt0RrG4xr64.roa
Signing time:             Wed 23 Feb 2022 14:43:03 +0000
ROA not before:           Wed 23 Feb 2022 14:43:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209431
IP address blocks:        2a06:a7c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107694 (0x1a4ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ebaa2f1769a3ddf65f873dc31f351ef078ad25
        Validity
            Not Before: Feb 23 14:43:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd70fb457ca148282cf478ea82dd11ac6e31afae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:3d:8a:f5:68:6d:2c:c2:11:32:56:d8:3c:
                    be:b4:d2:dc:9e:eb:1e:7c:bb:bf:74:61:fe:84:85:
                    fc:08:f0:8a:bf:0b:d1:5a:68:5c:0a:12:e2:4e:49:
                    d1:99:88:7f:2a:c3:3d:cf:06:25:59:3d:af:c2:8d:
                    4f:27:69:de:91:96:fb:61:e7:94:85:c2:70:c7:69:
                    2a:0d:f9:3e:77:33:06:1d:37:54:22:29:e7:22:55:
                    30:32:57:14:49:ce:22:fd:a7:38:f1:da:db:1b:fc:
                    08:6e:0a:4e:cc:cf:26:cf:56:dc:f6:0c:eb:6f:4d:
                    63:f4:51:46:43:41:1a:f3:e5:40:55:b1:df:d3:c6:
                    ae:6d:81:a3:da:51:69:76:47:a0:13:a8:f0:91:d7:
                    1f:9e:f1:2c:a3:bc:b0:ff:38:5d:1f:d3:80:73:20:
                    12:05:d6:cc:e2:2b:40:32:14:bd:d9:c1:93:33:1c:
                    0e:ab:71:57:3e:ea:aa:45:e2:eb:a3:51:f1:0b:12:
                    95:c3:cd:14:6b:67:95:32:e2:50:5a:1e:b5:90:42:
                    14:d5:04:a1:ac:a4:cd:b3:5c:bc:60:d9:b9:82:3b:
                    b3:d5:8c:36:df:57:59:45:5e:d3:ed:3c:52:c9:88:
                    1a:bf:4b:b8:f7:18:64:4e:c3:cb:73:2e:73:ce:ff:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:70:FB:45:7C:A1:48:28:2C:F4:78:EA:82:DD:11:AC:6E:31:AF:AE
            X509v3 Authority Key Identifier:
                keyid:88:EB:AA:2F:17:69:A3:DD:F6:5F:87:3D:C3:1F:35:1E:F0:78:AD:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOuqLxdpo932X4c9wx81HvB4rSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/vXD7RXyhSCgs9Hjqgt0RrG4xr64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8bfcc2-5def-44aa-87c1-2bbf46884585/1/iOuqLxdpo932X4c9wx81HvB4rSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a7c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         1d:66:f2:0e:95:5e:ce:91:b2:ab:c8:1c:8e:88:77:cc:31:2a:
         6d:8a:86:62:ba:d4:23:78:7f:30:c1:ee:0f:d1:b4:d9:0d:10:
         19:bc:c6:2d:b2:0c:51:b3:2e:53:3f:27:5e:62:ad:8d:71:34:
         b3:90:2a:c7:4d:a7:ea:33:d0:60:20:d4:e3:d9:b8:f5:1a:ff:
         dd:d4:e2:05:a3:9e:ce:ca:7d:b9:f7:f6:6b:67:ce:6b:a2:0a:
         e4:5a:6f:83:03:30:63:94:25:2e:41:ac:6d:ab:83:af:2e:4b:
         de:ab:76:0f:f1:06:46:fc:a2:3a:57:7d:6f:87:a7:cc:25:c5:
         ea:0b:f7:b0:16:48:72:20:5e:51:ea:ea:de:0d:ab:cc:03:7f:
         dc:72:89:0b:32:70:43:81:18:c5:51:29:bc:dc:48:a0:59:df:
         a3:ec:b2:d4:9c:16:c0:5f:d0:a5:02:65:15:22:1d:4a:fa:8d:
         f5:b8:86:72:11:d4:65:e4:ae:95:fe:2d:b3:27:fe:e2:c2:72:
         37:b3:51:b6:c1:02:51:8b:c1:08:fe:ab:21:f8:db:5d:d5:aa:
         3e:19:ef:87:0f:0d:29:ee:18:47:fe:e7:8b:51:8f:0c:10:32:
         27:e2:bf:e1:67:f5:d1:cf:af:06:1c:62:ea:fa:ce:ca:a1:92:
         a7:50:55:64
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDAaSuMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDg4
ZWJhYTJmMTc2OWEzZGRmNjVmODczZGMzMWYzNTFlZjA3OGFkMjUwHhcNMjIwMjIz
MTQ0MzAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiZDcwZmI0NTdjYTE0
ODI4MmNmNDc4ZWE4MmRkMTFhYzZlMzFhZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsNM9ivVobSzCETJW2Dy+tNLcnusefLu/dGH+hIX8CPCKvwvR
WmhcChLiTknRmYh/KsM9zwYlWT2vwo1PJ2nekZb7YeeUhcJwx2kqDfk+dzMGHTdU
IinnIlUwMlcUSc4i/ac48drbG/wIbgpOzM8mz1bc9gzrb01j9FFGQ0Ea8+VAVbHf
08aubYGj2lFpdkegE6jwkdcfnvEso7yw/zhdH9OAcyASBdbM4itAMhS92cGTMxwO
q3FXPuqqReLro1HxCxKVw80Ua2eVMuJQWh61kEIU1QShrKTNs1y8YNm5gjuz1Yw2
31dZRV7T7TxSyYgav0u49xhkTsPLcy5zzv8kEwIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFL1w+0V8oUgoLPR46oLdEaxuMa+uMB8GA1UdIwQYMBaAFIjrqi8XaaPd9l+H
PcMfNR7weK0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
aU91cUx4ZHBvOTMyWDRjOXd4ODFIdkI0clNVLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xYy84YmZjYzItNWRlZi00NGFhLTg3YzEtMmJiZjQ2ODg0NTg1LzEv
dlhEN1JYeWhTQ2dzOUhqcWd0MFJyRzR4cjY0LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84
YmZjYzItNWRlZi00NGFhLTg3YzEtMmJiZjQ2ODg0NTg1LzEvaU91cUx4ZHBvOTMy
WDRjOXd4ODFIdkI0clNVLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAG
CCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKganwDANBgkqhkiG9w0BAQsFAAOC
AQEAHWbyDpVezpGyq8gcjoh3zDEqbYqGYrrUI3h/MMHuD9G02Q0QGbzGLbIMUbMu
Uz8nXmKtjXE0s5Aqx02n6jPQYCDU49m49Rr/3dTiBaOezsp9uff2a2fOa6IK5Fpv
gwMwY5QlLkGsbauDry5L3qt2D/EGRvyiOld9b4enzCXF6gv3sBZIciBeUerq3g2r
zAN/3HKJCzJwQ4EYxVEpvNxIoFnfo+yy1JwWwF/QpQJlFSIdSvqN9biGchHUZeSu
lf4tsyf+4sJyN7NRtsECUYvBCP6rIfjbXdWqPhnvhw8NKe4YR/7ni1GPDBAyJ+K/
4Wf10c+vBhxi6vrOyqGSp1BVZA==
-----END CERTIFICATE-----