Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/EPOzL0U-YCF3AIipKvSjrkfjIDM.roa
File:                     EPOzL0U-YCF3AIipKvSjrkfjIDM.roa (raw, json)
Hash identifier:          YnVg+xIjqd23vPHKpggjv2cY9oQCN9omgKHhavZUlno=
Subject key identifier:   10:F3:B3:2F:45:3E:60:21:77:00:88:A9:2A:F4:A3:AE:47:E3:20:33
Certificate issuer:       /CN=34b419fa4a0a1605188318cdf4a2044992853b95
Certificate serial:       6AB326
Authority key identifier: 34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/EPOzL0U-YCF3AIipKvSjrkfjIDM.roa
Signing time:             Sat 01 Jan 2022 01:52:42 +0000
ROA not before:           Sat 01 Jan 2022 01:52:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13030
IP address blocks:        2a00:adc0:1a00::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6992678 (0x6ab326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b419fa4a0a1605188318cdf4a2044992853b95
        Validity
            Not Before: Jan  1 01:52:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=10f3b32f453e6021770088a92af4a3ae47e32033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:2a:a2:e1:1d:00:d6:f7:b1:13:c0:8b:07:
                    c7:02:19:6e:94:e0:95:12:2f:2a:11:31:bf:7c:60:
                    7a:81:08:86:3b:ef:56:5a:a9:a7:71:c7:82:ae:aa:
                    cf:18:22:b6:87:8a:a2:20:71:e7:03:ca:07:13:f1:
                    87:33:93:8c:e2:7b:55:46:e0:a0:3b:b5:bf:56:1f:
                    5d:a8:be:de:93:d4:76:07:79:e9:b1:d7:b1:4b:56:
                    03:92:c6:ab:0f:e1:eb:16:ac:de:4f:fb:14:3e:d9:
                    d7:0e:ae:30:fe:cb:73:fc:3c:50:d6:59:c8:4d:eb:
                    2d:ac:21:35:a9:d3:22:e8:06:dc:80:ea:a1:c5:75:
                    0e:c2:64:2a:e1:a0:7d:63:6f:5c:e9:e1:6e:e0:66:
                    f4:69:20:f5:73:c9:98:b0:0b:c4:19:7b:da:8c:8e:
                    8e:10:3a:68:c8:b0:c6:c7:51:24:58:d0:e2:6b:1f:
                    0f:be:09:3a:3d:5d:f8:c8:6c:01:b9:c0:9f:55:b2:
                    ab:4c:4d:99:8e:51:6c:bc:5b:7a:c3:d1:4b:c8:32:
                    6e:13:67:a3:ef:a4:48:01:f6:2f:e4:1c:6a:77:c2:
                    d0:84:af:9a:7c:7b:63:1b:ba:b4:7a:11:02:6b:c6:
                    19:0c:d5:6f:01:27:b1:41:fc:10:9a:d5:1e:af:ef:
                    84:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F3:B3:2F:45:3E:60:21:77:00:88:A9:2A:F4:A3:AE:47:E3:20:33
            X509v3 Authority Key Identifier:
                keyid:34:B4:19:FA:4A:0A:16:05:18:83:18:CD:F4:A2:04:49:92:85:3B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLQZ-koKFgUYgxjN9KIESZKFO5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/EPOzL0U-YCF3AIipKvSjrkfjIDM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8c79fb-7a57-429d-9c33-8777544c9275/1/NLQZ-koKFgUYgxjN9KIESZKFO5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:adc0:1a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:50:e1:d7:0e:2e:d6:03:01:fd:ad:f4:9c:4d:6b:cd:15:fd:
         d3:2d:2c:48:03:26:0c:20:6e:2f:00:7c:07:dc:e4:8f:2f:17:
         e8:0b:18:4d:d9:22:3f:0f:63:d2:28:4f:4a:1d:c8:dd:c8:83:
         cc:b0:5a:69:47:1c:d7:d0:19:5e:26:b2:9e:90:d5:f7:b7:b3:
         1c:37:2f:4b:42:61:a3:25:ac:05:5b:b8:5b:0b:ba:2d:27:03:
         f4:18:8e:f1:37:e5:98:3e:c0:84:03:bc:49:9d:1d:27:54:38:
         37:42:b7:f9:3a:a5:dc:c1:f7:a0:b6:f7:b7:55:67:39:5f:34:
         7d:0b:6d:69:84:f2:20:f3:2a:b9:95:7c:2c:04:f2:47:dc:c9:
         31:cc:36:63:fe:00:13:fb:ea:7a:8f:03:da:66:4f:0d:74:c3:
         9b:04:67:2e:e1:8e:d6:74:02:c9:1b:9e:9a:ab:8b:eb:b0:ed:
         1e:61:f1:86:dd:dd:f2:68:67:f3:a5:4d:68:37:a0:7a:4a:36:
         18:90:2d:1c:f4:3f:41:c9:3b:2d:9c:12:4c:f2:ac:71:cc:d3:
         ea:85:85:d1:57:f2:1b:52:13:14:24:98:fd:52:66:45:0f:97:
         6b:3e:7b:a3:af:20:de:25:00:6a:14:37:68:67:0a:df:99:4b:
         e6:2a:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----