Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-PK3MqizoQ46jW5aaDFEJuLkxB0.roa
File:                     1-PK3MqizoQ46jW5aaDFEJuLkxB0.roa (raw, json)
Hash identifier:          VYXxLvHne0nzp1p+r19X3gCS/MzlOH6m702XRTU/G94=
Subject key identifier:   F8:F2:B7:32:A8:B3:A1:0E:3A:8D:6E:5A:68:31:44:26:E2:E4:C4:1D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01836E1A1FA447D8946126840BF080EF2C62
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-PK3MqizoQ46jW5aaDFEJuLkxB0.roa
Signing time:             Sat 24 Sep 2022 06:05:49 +0000
ROA not before:           Sat 24 Sep 2022 06:05:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202747
IP address blocks:        2a10:2f00:189::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:6e:1a:1f:a4:47:d8:94:61:26:84:0b:f0:80:ef:2c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep 24 06:05:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8f2b732a8b3a10e3a8d6e5a68314426e2e4c41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:4c:63:62:e1:a5:9d:07:6f:ec:98:94:25:
                    23:c1:47:02:ad:0b:cd:2b:73:64:66:89:d0:78:b5:
                    4a:b2:63:7c:36:f5:94:52:97:76:96:e8:6b:90:e9:
                    cd:a3:36:7e:76:05:ff:f6:3d:0f:de:2f:ea:ce:ec:
                    52:4e:f5:d1:1f:46:4e:7c:ff:5e:33:5e:9e:cd:fd:
                    fc:d2:da:2a:59:22:70:c1:c2:37:f0:2a:cb:b7:d3:
                    2f:53:32:d3:d8:6a:53:bf:fb:c5:89:3a:cf:2e:6b:
                    03:39:22:91:0f:79:4c:27:4c:5f:5f:ed:15:f0:67:
                    6f:5e:a6:82:e3:2d:14:11:df:61:34:4d:6b:de:b4:
                    4a:02:1b:c1:d8:38:57:8f:d6:85:a2:db:bd:18:90:
                    1b:2a:54:39:ef:21:bd:0a:12:a9:70:35:22:55:e4:
                    de:60:f9:33:7d:b0:13:57:9e:d1:ee:c6:6a:38:48:
                    4e:a4:a7:3e:bb:be:93:79:ad:dd:8c:00:76:74:3a:
                    fb:e0:b3:71:4c:6c:03:36:52:57:1b:8b:e5:35:49:
                    53:63:a4:08:3f:eb:04:9c:9d:17:a6:e9:7a:bf:a2:
                    17:c9:c4:ae:29:22:31:ed:33:ac:71:66:fd:bc:cc:
                    d3:aa:88:0d:85:31:ca:71:8a:36:3b:2d:45:1f:3c:
                    b3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F2:B7:32:A8:B3:A1:0E:3A:8D:6E:5A:68:31:44:26:E2:E4:C4:1D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-PK3MqizoQ46jW5aaDFEJuLkxB0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:189::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:dc:4f:36:b3:85:f0:1f:d0:bd:f9:03:6d:ee:7a:f9:81:50:
         cd:97:d3:5b:92:e7:ec:b4:35:4f:09:b0:19:fb:bd:4f:f0:85:
         e6:dd:66:cd:0c:db:f0:8b:0a:3c:5e:de:0c:b7:09:04:2e:a0:
         c4:53:a5:41:d8:3f:b5:70:a3:4b:33:e1:0b:13:60:1a:bc:ce:
         12:b5:e0:27:4c:e1:bb:4a:16:26:4d:a7:d8:d4:9b:db:ce:fa:
         e2:29:42:30:2e:e5:30:82:9c:d4:55:55:c8:d4:fe:04:ed:9a:
         23:db:ba:8f:97:2e:73:b0:73:28:f8:e3:b9:92:0c:20:73:6f:
         c7:96:1b:8d:9c:0e:79:5e:ee:47:f8:bb:30:5b:eb:1e:f5:ce:
         c8:3e:5a:06:69:b3:73:fb:4d:fe:4d:91:b7:0d:57:b5:4b:67:
         60:45:fd:9c:d6:77:99:5e:3e:1f:09:6e:cc:95:ab:2d:c9:ea:
         38:28:64:bb:a5:54:e0:93:9e:cf:1a:4f:b1:29:ce:1b:11:ef:
         5b:eb:ac:d8:e4:13:f5:59:41:79:f4:83:23:e1:e3:93:42:40:
         a0:3b:37:ee:33:20:af:0c:a7:62:fd:9f:69:57:96:91:24:05:
         6f:33:1a:93:4d:91:3f:d3:e3:da:06:a4:d6:27:7d:48:1e:cf:
         46:78:94:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----