Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/6lYb5l8xCovOoMyji7Zcth0XM6Y.roa
File:                     6lYb5l8xCovOoMyji7Zcth0XM6Y.roa (raw, json)
Hash identifier:          86pNwy4g5robfNauRNqWuhekczabWXIfckQdXaiDpt4=
Subject key identifier:   EA:56:1B:E6:5F:31:0A:8B:CE:A0:CC:A3:8B:B6:5C:B6:1D:17:33:A6
Certificate issuer:       /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial:       018A4AD05F93D3CD5CF47C4F503822E639D2
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/6lYb5l8xCovOoMyji7Zcth0XM6Y.roa
Signing time:             Thu 31 Aug 2023 08:58:04 +0000
ROA not before:           Thu 31 Aug 2023 08:58:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     38915
IP address blocks:        2a07:3500:19f8::/48 maxlen: 48
                          2a07:3500:19d8::/48 maxlen: 48
                          2a07:3500:1998::/48 maxlen: 48
                          2a07:3500:19e8::/48 maxlen: 48
                          2a07:3500:19a8::/48 maxlen: 48
                          2a07:3500:19a0::/48 maxlen: 48
                          2a07:3500:19e0::/48 maxlen: 48
                          2a07:3500:19f0::/48 maxlen: 48
                          2a07:3500:19b0::/48 maxlen: 48
                          2a07:3500:1200::/48 maxlen: 48
                          2a07:3500:1a00::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4a:d0:5f:93:d3:cd:5c:f4:7c:4f:50:38:22:e6:39:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
        Validity
            Not Before: Aug 31 08:58:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea561be65f310a8bcea0cca38bb65cb61d1733a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:6e:ed:01:a1:3f:1a:eb:fd:b2:20:fe:33:
                    03:93:51:aa:c4:fc:4a:06:49:92:5b:02:0e:ea:86:
                    1a:ed:e6:47:c1:b7:70:36:07:f2:83:24:08:d3:00:
                    fa:89:e5:89:22:ae:07:2c:3b:9b:06:ee:43:05:3d:
                    66:bf:e1:24:ce:dc:b8:9d:ee:cd:60:c7:51:86:77:
                    3a:d7:1f:f7:eb:c4:45:c2:65:f8:bf:49:5d:17:5e:
                    da:1f:59:0f:1f:e5:82:2b:01:55:84:44:53:72:9c:
                    ae:4a:0d:b9:85:f2:68:11:3c:88:cf:a8:cb:18:0d:
                    68:8d:35:c3:21:d7:bd:e2:41:cc:08:74:e2:87:67:
                    98:10:0e:f4:3b:b7:b0:67:69:4b:0f:0b:6e:2b:bd:
                    44:75:4b:15:fb:38:dc:d6:5a:8d:13:68:65:f7:8b:
                    64:46:b8:0a:1f:54:31:43:48:1f:4d:68:bd:75:27:
                    ce:0f:e6:bf:f3:dd:94:1f:8c:59:8d:00:37:57:65:
                    d4:46:10:10:4a:e9:87:16:a4:7f:f7:32:4c:ef:a1:
                    f5:ab:43:18:65:69:25:98:dd:28:20:68:09:2e:bb:
                    87:5f:86:bf:04:57:d0:4f:89:b1:45:60:f0:3d:73:
                    4a:39:66:1b:b6:10:c2:ce:ca:3f:b0:ce:71:34:13:
                    09:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:56:1B:E6:5F:31:0A:8B:CE:A0:CC:A3:8B:B6:5C:B6:1D:17:33:A6
            X509v3 Authority Key Identifier:
                keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/6lYb5l8xCovOoMyji7Zcth0XM6Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:3500:1200::/48
                  2a07:3500:1998::/48
                  2a07:3500:19a0::/48
                  2a07:3500:19a8::/48
                  2a07:3500:19b0::/48
                  2a07:3500:19d8::/48
                  2a07:3500:19e0::/48
                  2a07:3500:19e8::/48
                  2a07:3500:19f0::/48
                  2a07:3500:19f8::/48
                  2a07:3500:1a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:36:5a:dc:7e:8e:92:1d:33:5c:4c:85:07:01:0d:b7:f9:fb:
         32:4b:9b:a1:1c:05:1d:02:72:43:7a:47:4d:bc:d7:b1:69:cb:
         bd:f7:d4:d9:41:21:34:b3:f0:16:89:39:e6:e2:74:f6:10:f4:
         7c:1b:9d:a8:b8:77:06:02:6b:43:4d:0c:79:3f:08:13:16:97:
         a6:b0:6a:85:83:32:13:07:9e:d0:7d:3d:2a:77:30:2f:39:eb:
         a8:d6:7c:aa:85:20:f6:09:04:0b:b9:d1:bb:6b:4e:2d:7d:6d:
         06:89:d6:42:04:5b:d1:9f:d4:50:fc:df:5d:88:54:f8:26:83:
         15:5b:f2:b7:37:a8:6a:2d:75:b6:0f:6a:ab:b2:1a:ce:b6:ec:
         3b:26:c5:c0:e1:44:26:12:a0:cd:ea:32:ad:bf:a8:92:77:3e:
         9e:aa:3c:1c:ec:46:01:51:9d:3c:50:a1:0f:a7:01:bc:ec:f1:
         c6:9c:ef:82:5e:9e:99:ae:bb:2b:67:49:6b:69:3b:a8:b2:4d:
         45:72:81:13:d6:f8:43:78:bf:bf:9a:aa:3a:59:47:84:a2:07:
         2e:e8:78:f8:95:cf:4e:13:0c:54:0d:4a:10:f4:fe:70:e2:de:
         fe:6a:43:ee:8a:97:df:95:51:0b:d7:aa:99:81:66:0f:a8:75:
         4b:9c:77:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----