Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/44UxnaIQelFzoPIfhO-uhMTBQiI.roa
File:                     44UxnaIQelFzoPIfhO-uhMTBQiI.roa (raw, json)
Hash identifier:          qJgggvdjcaZirMi8DwbPkEYFD9d6ysm650LlqReTQEM=
Subject key identifier:   E3:85:31:9D:A2:10:7A:51:73:A0:F2:1F:84:EF:AE:84:C4:C1:42:22
Certificate issuer:       /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial:       0184C2451F0B8565B5777CD7309D6E70A704
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/44UxnaIQelFzoPIfhO-uhMTBQiI.roa
Signing time:             Tue 29 Nov 2022 07:23:40 +0000
ROA not before:           Tue 29 Nov 2022 07:23:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     29156
IP address blocks:        2a01:5440::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c2:45:1f:0b:85:65:b5:77:7c:d7:30:9d:6e:70:a7:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
        Validity
            Not Before: Nov 29 07:23:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e385319da2107a5173a0f21f84efae84c4c14222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:a1:7d:20:15:3c:a1:db:27:72:a9:71:4e:
                    97:c5:6f:06:aa:0b:2c:4f:55:a3:00:f3:e3:ab:dc:
                    b0:8b:6d:a9:55:9c:c0:e4:4d:e5:63:36:86:5b:b1:
                    65:a1:93:eb:ed:8c:61:df:45:af:0e:78:76:4c:26:
                    54:9b:a1:58:01:34:cf:49:f1:81:51:4d:7f:dc:58:
                    4c:1a:e9:e7:8d:09:88:56:c7:da:04:f0:75:7b:3b:
                    57:d9:12:5a:d5:4d:af:69:e5:ad:ab:de:d6:d8:9c:
                    99:3b:da:d3:2b:c3:cd:a4:76:db:20:69:5e:fd:85:
                    b4:d1:62:e9:bf:31:ba:92:96:dc:b9:f1:18:99:af:
                    56:55:78:5a:76:b2:41:f4:b0:af:df:e3:98:71:06:
                    e2:f5:16:de:a3:51:8e:93:00:31:ff:74:3e:ae:ec:
                    8d:ec:a0:84:27:32:d1:2a:7f:63:48:ac:97:e4:87:
                    95:17:46:b0:a0:21:65:7b:e3:c1:b7:38:8b:11:46:
                    ab:f7:93:45:48:dc:da:23:68:e8:22:66:90:1e:65:
                    3e:77:e2:fd:81:df:84:97:c4:6f:9b:12:f7:3f:81:
                    50:93:96:a7:d4:e6:d5:61:df:1f:56:da:2d:c4:2d:
                    d7:f6:7b:84:9d:80:e6:29:25:1e:69:f3:05:53:de:
                    86:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:85:31:9D:A2:10:7A:51:73:A0:F2:1F:84:EF:AE:84:C4:C1:42:22
            X509v3 Authority Key Identifier:
                keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/44UxnaIQelFzoPIfhO-uhMTBQiI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:5440::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:bb:f0:f5:06:02:ad:bb:b8:9d:5d:5c:03:c2:1b:b8:a4:f6:
         58:20:b4:15:fe:17:77:c5:60:e6:d7:a9:c8:ae:9c:07:7e:e9:
         56:04:e3:2a:7a:22:b5:36:73:56:23:c6:e8:40:17:da:a4:fc:
         dd:74:1f:a6:9e:40:a1:f4:84:e2:5a:1f:64:6b:bf:c4:0a:21:
         a0:f7:dd:54:57:65:ba:1e:8e:8e:93:5e:e0:fc:69:59:05:99:
         8f:4c:40:52:19:97:03:67:02:fe:2b:49:38:de:1f:6a:ec:f8:
         3b:ac:ad:98:4e:dc:7d:d4:4b:22:7b:cc:08:1a:2c:04:a5:1d:
         a4:2b:bd:d3:18:ee:d3:65:9c:22:9b:2d:4d:36:65:85:cc:53:
         70:2b:d8:96:f7:e9:ee:e1:62:24:3a:3a:20:1b:b9:c3:73:64:
         b0:03:1d:35:7a:cb:8a:96:45:e2:41:19:7d:b2:c7:be:36:be:
         93:ce:7a:49:fc:e2:06:69:03:1e:cb:7d:09:d7:31:1a:20:23:
         a5:d9:74:2e:7f:c2:7e:44:29:68:85:2a:4b:35:d4:38:37:6a:
         4b:5f:f6:57:3a:4e:c8:26:3f:8e:84:fb:9e:8f:c7:1c:4a:ea:
         d7:98:36:a2:d4:a3:bc:94:a2:23:9a:34:c8:d7:c6:27:4b:69:
         9e:bf:ed:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----