Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/SNGp62P-leXvRNK9x83oKGtrjmA.roa
File:                     SNGp62P-leXvRNK9x83oKGtrjmA.roa (raw, json)
Hash identifier:          7+qW08zsMm5GeAv8RpgCytmXpNZKKJilDEl/3BgPTnE=
Subject key identifier:   48:D1:A9:EB:63:FE:95:E5:EF:44:D2:BD:C7:CD:E8:28:6B:6B:8E:60
Certificate issuer:       /CN=cb335dc6feb385f6a23344056a13c2c595028e91
Certificate serial:       086C53E3
Authority key identifier: CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/SNGp62P-leXvRNK9x83oKGtrjmA.roa
Signing time:             Sat 01 Jan 2022 08:55:37 +0000
ROA not before:           Sat 01 Jan 2022 08:55:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206059
IP address blocks:        2a0e:3780:8150::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141317091 (0x86c53e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb335dc6feb385f6a23344056a13c2c595028e91
        Validity
            Not Before: Jan  1 08:55:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=48d1a9eb63fe95e5ef44d2bdc7cde8286b6b8e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:c5:e1:b1:8a:a4:14:3b:41:61:ad:08:91:
                    f6:0a:2b:24:b0:b6:3c:08:9e:8d:6a:cc:29:2a:9c:
                    40:90:cb:65:b8:91:34:0a:68:52:ff:01:96:c3:f4:
                    aa:01:92:f2:d5:e6:6d:0a:cd:f5:81:29:7d:9e:65:
                    aa:04:92:15:8d:c4:7e:33:58:e3:af:48:1c:20:40:
                    62:9f:82:d3:16:db:3d:5e:b3:da:16:5b:ce:4b:a5:
                    91:a8:2d:d8:a9:35:82:0c:72:4f:cb:24:d3:98:18:
                    ff:19:6f:f9:5b:9d:9a:7a:67:ce:9f:df:70:aa:dd:
                    7c:50:58:28:6f:12:06:d5:bb:cd:ea:85:db:ab:ad:
                    33:b6:41:84:aa:fc:35:5a:2d:97:a5:99:39:1a:37:
                    25:cf:04:8f:21:53:39:98:a8:64:0e:72:08:39:9e:
                    35:09:dc:0c:74:84:e0:7f:a6:cd:3d:dd:f6:e0:84:
                    84:7c:f3:31:16:59:a3:89:89:cd:71:0f:72:d7:7a:
                    7b:4d:48:99:4c:6b:d1:99:32:c2:b0:09:82:a0:d2:
                    53:b2:ed:c1:a0:f5:ef:25:04:5d:07:cd:f3:a7:04:
                    cd:e6:3e:60:b1:1e:5d:32:c2:0a:c4:79:85:8f:02:
                    67:86:a0:a0:0a:54:30:09:40:7f:7a:1c:fd:78:2a:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D1:A9:EB:63:FE:95:E5:EF:44:D2:BD:C7:CD:E8:28:6B:6B:8E:60
            X509v3 Authority Key Identifier:
                keyid:CB:33:5D:C6:FE:B3:85:F6:A2:33:44:05:6A:13:C2:C5:95:02:8E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yzNdxv6zhfaiM0QFahPCxZUCjpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/SNGp62P-leXvRNK9x83oKGtrjmA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa342e-b3bc-4373-8c6b-8854c82b545d/1/yzNdxv6zhfaiM0QFahPCxZUCjpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:3780:8150::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:00:06:6b:20:05:d7:9f:46:6b:94:07:4f:1a:ff:d8:46:f2:
         7d:25:3c:2f:5e:cf:5d:95:5c:2e:08:af:bb:90:20:ca:bd:51:
         2d:d9:24:67:f8:e7:2f:0e:23:b8:0f:9e:1b:df:c9:63:83:7c:
         28:d5:05:f9:f4:60:71:f9:a3:a6:4b:30:95:4c:22:04:cd:74:
         b6:d2:aa:90:1c:1b:b0:2b:81:40:53:fb:73:c7:30:9c:6a:d0:
         89:98:a1:a5:be:c3:3d:80:a4:ab:36:80:9d:71:be:1d:04:74:
         25:28:61:51:58:13:e2:50:93:e3:68:d2:ff:83:45:9c:92:c1:
         74:11:0f:e7:09:58:73:f3:c6:c3:27:d8:29:5f:0a:0c:b9:7e:
         aa:87:ed:ae:5d:a6:04:ab:be:9c:bd:d1:78:4e:d0:da:22:0e:
         8f:f2:f8:a7:4b:1b:a8:1d:ff:a3:99:97:3c:77:8d:c4:e9:39:
         f4:65:ab:ca:77:ad:dc:38:35:50:ba:19:f9:e7:ad:ca:75:30:
         88:62:5b:18:cb:15:d2:5f:2f:23:70:24:b5:bb:53:c5:2b:fb:
         00:f4:4b:9c:ee:99:6b:05:bb:8a:8f:35:92:4d:7f:f4:b1:64:
         d8:91:8b:6c:b8:e7:c7:a5:2f:ce:ca:6d:4b:a9:a5:04:1f:b1:
         18:20:5d:41
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIECGxT4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YjMzNWRjNmZlYjM4NWY2YTIzMzQ0MDU2YTEzYzJjNTk1MDI4ZTkxMB4XDTIyMDEw
MTA4NTUzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDhkMWE5ZWI2M2Zl
OTVlNWVmNDRkMmJkYzdjZGU4Mjg2YjZiOGU2MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ2uxeGxiqQUO0FhrQiR9gorJLC2PAiejWrMKSqcQJDLZbiR
NApoUv8BlsP0qgGS8tXmbQrN9YEpfZ5lqgSSFY3EfjNY469IHCBAYp+C0xbbPV6z
2hZbzkulkagt2Kk1ggxyT8sk05gY/xlv+Vudmnpnzp/fcKrdfFBYKG8SBtW7zeqF
26utM7ZBhKr8NVotl6WZORo3Jc8EjyFTOZioZA5yCDmeNQncDHSE4H+mzT3d9uCE
hHzzMRZZo4mJzXEPctd6e01ImUxr0ZkywrAJgqDSU7LtwaD17yUEXQfN86cEzeY+
YLEeXTLCCsR5hY8CZ4agoApUMAlAf3oc/XgqeG8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBRI0anrY/6V5e9E0r3Hzegoa2uOYDAfBgNVHSMEGDAWgBTLM13G/rOF9qIz
RAVqE8LFlQKOkTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3l6TmR4djZ6aGZhaU0wUUZhaFBDeFpVQ2pwRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTAvZmEzNDJlLWIzYmMtNDM3My04YzZiLTg4NTRjODJiNTQ1ZC8x
L1NOR3A2MlAtbGVYdlJOSzl4ODNvS0d0cmptQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTAv
ZmEzNDJlLWIzYmMtNDM3My04YzZiLTg4NTRjODJiNTQ1ZC8xL3l6TmR4djZ6aGZh
aU0wUUZhaFBDeFpVQ2pwRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoON4CBUDANBgkqhkiG9w0BAQsF
AAOCAQEAhAAGayAF159Ga5QHTxr/2EbyfSU8L17PXZVcLgivu5Agyr1RLdkkZ/jn
Lw4juA+eG9/JY4N8KNUF+fRgcfmjpkswlUwiBM10ttKqkBwbsCuBQFP7c8cwnGrQ
iZihpb7DPYCkqzaAnXG+HQR0JShhUVgT4lCT42jS/4NFnJLBdBEP5wlYc/PGwyfY
KV8KDLl+qoftrl2mBKu+nL3ReE7Q2iIOj/L4p0sbqB3/o5mXPHeNxOk59GWrynet
3Dg1ULoZ+eetynUwiGJbGMsV0l8vI3AktbtTxSv7APRLnO6ZawW7io81kk1/9LFk
2JGLbLjnx6UvzsptS6mlBB+xGCBdQQ==
-----END CERTIFICATE-----