Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/LllGSUB95vTKBq87e1er-sPv20g.roa
File:                     LllGSUB95vTKBq87e1er-sPv20g.roa (raw, json)
Hash identifier:          pZ6SQXqqSVzlzMZLpgzbXFbS6ewmK9fwtu0B16sazOI=
Subject key identifier:   2E:59:46:49:40:7D:E6:F4:CA:06:AF:3B:7B:57:AB:FA:C3:EF:DB:48
Certificate issuer:       /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial:       020664
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/LllGSUB95vTKBq87e1er-sPv20g.roa
Signing time:             Mon 31 Jan 2022 15:05:35 +0000
ROA not before:           Mon 31 Jan 2022 15:05:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50629
IP address blocks:        2a06:d1c0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132708 (0x20664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
        Validity
            Not Before: Jan 31 15:05:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2e594649407de6f4ca06af3b7b57abfac3efdb48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:fe:af:79:ef:09:9c:97:16:b1:b0:95:ac:
                    b9:f1:79:82:56:e8:e5:0c:86:65:57:6d:0a:98:c4:
                    c5:ea:6e:96:94:23:08:c2:86:4e:e4:96:67:ca:a8:
                    f7:fe:55:8f:3e:08:f2:5d:d9:fc:1e:38:4a:54:7b:
                    3f:25:5a:4e:18:1b:ce:33:74:df:18:8c:99:c0:98:
                    11:e4:7f:64:27:8f:e0:a4:3f:f6:0d:ee:eb:c8:06:
                    52:85:20:ed:41:0d:00:00:3c:ed:b4:f2:00:1f:7d:
                    05:c7:ae:92:70:09:2f:8b:4d:2d:77:27:7e:02:20:
                    f7:34:e5:06:5f:d3:8d:c5:49:16:e5:2e:c7:c7:8c:
                    3c:f0:e5:bb:f7:b0:c8:74:74:a3:e4:52:e9:a3:ad:
                    ee:65:2b:d3:9c:89:bd:92:84:26:d8:39:65:5b:32:
                    d7:fd:a9:0b:56:8a:e2:41:55:bb:94:5c:e3:65:c3:
                    b4:29:1b:de:4b:36:00:54:11:7a:19:ba:82:9a:ee:
                    b7:a4:eb:a1:a3:1a:fa:d5:76:ac:bb:f7:fc:a4:40:
                    ff:43:44:de:ea:1e:03:53:0e:f0:73:e6:6d:1c:29:
                    d1:1d:d6:94:1c:d0:80:8e:79:ba:16:af:a0:04:e9:
                    6c:01:ed:58:83:a3:5a:7d:be:cd:8d:66:c6:2f:0f:
                    65:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:59:46:49:40:7D:E6:F4:CA:06:AF:3B:7B:57:AB:FA:C3:EF:DB:48
            X509v3 Authority Key Identifier:
                keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/LllGSUB95vTKBq87e1er-sPv20g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:d1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:44:d7:db:ea:1a:05:a3:47:a9:07:c9:42:51:dd:3d:d1:
         58:e9:e4:81:bd:0b:3d:c3:b8:9c:38:d6:f5:72:51:7c:e2:e8:
         60:54:1e:de:b8:ca:88:dd:ed:eb:a1:e3:58:12:52:da:aa:74:
         45:30:61:ed:0d:bb:8a:1e:ed:88:16:61:4f:af:d0:0a:01:df:
         5b:70:74:2b:25:50:26:13:8a:c8:b2:9c:50:40:75:45:f1:71:
         2f:dd:6e:68:3c:3f:45:f4:1b:56:b4:4f:df:5f:d2:36:ea:24:
         72:b7:d6:40:c0:3d:cf:13:d7:20:12:21:83:1f:bf:94:28:62:
         98:36:43:8d:4f:b8:e6:f0:9a:1f:d9:39:1b:b8:a2:e4:3a:bb:
         38:ed:9c:f2:af:1d:0a:d7:1a:6d:42:9b:0e:f8:4a:2c:b9:e8:
         94:05:e4:e3:ed:32:a8:b8:e1:69:9d:c3:50:8e:d6:e6:1c:d5:
         51:9a:7d:e5:c3:21:1e:f1:c3:12:e0:15:60:91:5d:20:a5:49:
         4a:cc:92:f3:22:dc:4b:09:b8:e5:95:10:97:83:52:c0:11:a4:
         e8:9c:54:77:da:73:ce:96:66:43:79:6f:ad:b7:17:85:f7:79:
         80:13:6a:7d:70:25:1c:41:37:ac:a6:0a:7e:60:fe:4d:b4:92:
         1e:14:80:a7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIDAgZkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM2
NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWViZjQ3NWQwHhcNMjIwMTMx
MTUwNTM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygyZTU5NDY0OTQwN2Rl
NmY0Y2EwNmFmM2I3YjU3YWJmYWMzZWZkYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1A/+r3nvCZyXFrGwlay58XmCVujlDIZlV20KmMTF6m6WlCMI
woZO5JZnyqj3/lWPPgjyXdn8HjhKVHs/JVpOGBvOM3TfGIyZwJgR5H9kJ4/gpD/2
De7ryAZShSDtQQ0AADzttPIAH30Fx66ScAkvi00tdyd+AiD3NOUGX9ONxUkW5S7H
x4w88OW797DIdHSj5FLpo63uZSvTnIm9koQm2DllWzLX/akLVoriQVW7lFzjZcO0
KRveSzYAVBF6GbqCmu63pOuhoxr61Xasu/f8pED/Q0Te6h4DUw7wc+ZtHCnRHdaU
HNCAjnm6Fq+gBOlsAe1Yg6Nafb7NjWbGLw9lGwIDAQABo4ICCjCCAgYwHQYDVR0O
BBYEFC5ZRklAfeb0ygavO3tXq/rD79tIMB8GA1UdIwQYMBaAFMZPoK2JhxSfBVNH
JLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
eGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5MzlkLzEv
TGxsR1NVQjk1dlRLQnE4N2UxZXItc1B2MjBnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8y
NDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhG
VTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAG
CCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgbRwDANBgkqhkiG9w0BAQsFAAOC
AQEAYcxE19vqGgWjR6kHyUJR3T3RWOnkgb0LPcO4nDjW9XJRfOLoYFQe3rjKiN3t
66HjWBJS2qp0RTBh7Q27ih7tiBZhT6/QCgHfW3B0KyVQJhOKyLKcUEB1RfFxL91u
aDw/RfQbVrRP31/SNuokcrfWQMA9zxPXIBIhgx+/lChimDZDjU+45vCaH9k5G7ii
5Dq7OO2c8q8dCtcabUKbDvhKLLnolAXk4+0yqLjhaZ3DUI7W5hzVUZp95cMhHvHD
EuAVYJFdIKVJSsyS8yLcSwm45ZUQl4NSwBGk6JxUd9pzzpZmQ3lvrbcXhfd5gBNq
fXAlHEE3rKYKfmD+TbSSHhSApw==
-----END CERTIFICATE-----