Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1OsUex1sKN9LvXi7pxkVABFdIwU.roa
File:                     1OsUex1sKN9LvXi7pxkVABFdIwU.roa (raw, json)
Hash identifier:          +VEpms3myBs3Fp/BOTXqdhl9hJDNdpQCwoGwN5/pxps=
Subject key identifier:   D4:EB:14:7B:1D:6C:28:DF:4B:BD:78:BB:A7:19:15:00:11:5D:23:05
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0184C8BE3E3C1E1C0EA3F56131663830FD78
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1OsUex1sKN9LvXi7pxkVABFdIwU.roa
Signing time:             Wed 30 Nov 2022 13:33:41 +0000
ROA not before:           Wed 30 Nov 2022 13:33:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202256
IP address blocks:        2a10:cc44:800::/37 maxlen: 48
                          2a0e:97c1:800::/37 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:c8:be:3e:3c:1e:1c:0e:a3:f5:61:31:66:38:30:fd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 30 13:33:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d4eb147b1d6c28df4bbd78bba7191500115d2305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:fd:05:78:fc:16:49:87:2e:77:57:e1:59:
                    43:b1:18:16:32:cd:52:69:23:29:65:71:ec:48:64:
                    2c:88:3b:7b:2a:2a:64:90:e2:f3:dd:25:9a:03:2f:
                    6b:f1:a6:bb:68:ea:b3:5a:61:0d:52:8a:79:4b:fe:
                    c7:cf:75:af:ff:29:34:e5:6e:57:7d:0a:99:52:df:
                    7a:b6:99:11:8d:b9:00:d2:40:7a:31:d2:a3:ab:c8:
                    e2:c5:a6:68:0e:e3:f2:2d:cf:76:1f:dd:ad:07:50:
                    59:a3:01:d1:d7:bc:df:05:8e:05:75:4e:f7:c9:33:
                    6a:7e:5a:8f:ae:55:d4:b2:bc:d6:5b:e9:1e:6d:45:
                    5a:16:d4:6c:d7:4d:ba:77:7a:e9:33:c4:f9:5e:5b:
                    59:2a:22:99:ca:60:70:7b:60:f0:c8:67:74:8e:c0:
                    fb:39:c6:66:50:90:64:78:dd:fa:cd:fa:ef:4e:94:
                    08:26:0d:f7:dc:6b:89:f8:8c:59:44:ce:e0:9c:b2:
                    ff:c6:55:d9:ee:7b:26:cc:44:40:e3:48:08:5a:5e:
                    f2:07:67:72:c6:f8:5f:73:9b:ae:6d:9c:b3:8e:e2:
                    e5:9d:21:1c:98:3f:63:04:5b:5a:b8:ef:81:ce:8b:
                    e4:b6:69:19:db:05:e9:30:e4:97:06:7f:ea:44:03:
                    d1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EB:14:7B:1D:6C:28:DF:4B:BD:78:BB:A7:19:15:00:11:5D:23:05
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1OsUex1sKN9LvXi7pxkVABFdIwU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c1:800::/37
                  2a10:cc44:800::/37

    Signature Algorithm: sha256WithRSAEncryption
         3a:30:7a:bc:dd:09:09:8f:8e:e8:fa:03:be:d3:0c:d6:d5:6a:
         98:c0:40:73:28:63:74:0f:89:fe:ad:5c:18:45:65:aa:0e:ee:
         ec:63:a1:05:02:00:32:dc:9c:a4:71:41:67:1a:14:ae:ad:2e:
         bf:24:2a:c9:1d:9f:94:2e:61:1b:1f:b2:64:7b:5c:f6:69:d3:
         81:3e:6e:24:36:e5:4a:8b:84:a3:5a:3a:4c:da:26:69:2d:03:
         55:ca:2f:b4:ac:cd:2a:fa:8c:ed:23:06:e5:46:75:c8:33:88:
         f0:17:fe:ee:53:53:67:05:2a:97:04:ed:c7:ef:05:9d:f2:1a:
         c0:eb:09:a1:87:f1:38:f0:4b:b2:e7:45:42:2c:c7:12:dc:62:
         1d:5e:12:8f:3d:0c:fe:0a:fb:74:86:80:2f:5c:74:dc:64:24:
         8b:18:71:94:ba:f4:45:63:bc:c6:44:27:91:2c:1e:48:e3:92:
         bc:94:36:8c:e5:e8:67:ee:77:a6:cc:c5:12:c3:46:ed:68:3e:
         cc:36:03:c1:78:97:29:5b:42:e1:06:68:2c:b3:c7:73:f9:fb:
         b0:aa:94:c5:21:87:e8:f5:8a:bc:9a:5e:88:85:06:cb:a1:0e:
         a0:6f:b6:97:44:33:93:d6:cf:c0:0d:bc:d3:b6:86:51:e3:48:
         b8:47:96:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----