Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1x0dc_NGwZzgNypU0G18mkZjP4w.roa
File:                     1x0dc_NGwZzgNypU0G18mkZjP4w.roa (raw, json)
Hash identifier:          EAIH3KnIWJP/ow5cUXPXN80YET2mb7nWI8hrN0gp6ck=
Subject key identifier:   D7:1D:1D:73:F3:46:C1:9C:E0:37:2A:54:D0:6D:7C:9A:46:63:3F:8C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       11E62977
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1x0dc_NGwZzgNypU0G18mkZjP4w.roa
Signing time:             Thu 10 Feb 2022 17:32:49 +0000
ROA not before:           Thu 10 Feb 2022 17:32:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0e:b107:1870::/48 maxlen: 48
                          2a0e:b107:5d0::/44 maxlen: 48
                          2a0e:b107:5e0::/44 maxlen: 48
                          2a0e:b107:900::/44 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a10:cc42:1000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300296567 (0x11e62977)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 10 17:32:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d71d1d73f346c19ce0372a54d06d7c9a46633f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:22:86:28:7b:b9:64:6c:54:0c:47:66:fd:
                    ee:25:31:1c:6a:7f:3e:28:17:78:94:3e:5b:07:44:
                    be:fe:ab:73:78:75:e8:2c:68:39:ae:25:6c:8e:c1:
                    54:46:42:18:3b:f3:49:5a:70:68:c8:93:5f:a7:1c:
                    4e:3f:3e:ec:c3:de:e7:e0:d4:49:f8:aa:3b:84:78:
                    fd:71:49:fd:fd:f0:60:ab:f8:5c:7e:62:77:a9:7a:
                    4a:68:9f:e7:fd:80:17:ff:15:26:d9:e3:3a:4e:57:
                    2f:07:fa:dc:32:0d:43:c6:19:d5:a7:41:08:1f:a7:
                    fa:fd:37:f2:c9:f4:3f:bf:74:e6:21:ac:28:19:1f:
                    46:ad:5f:af:ca:6d:22:ae:0c:5c:2f:b3:0a:ad:11:
                    14:48:b4:f0:2a:45:70:8a:f0:b4:29:3b:f4:65:cd:
                    64:87:f3:58:0e:06:af:49:35:be:0c:01:99:d5:20:
                    e4:a3:c9:89:a6:ee:6c:77:ff:64:4c:b0:47:d1:8d:
                    78:dd:fa:fd:07:bc:4e:66:91:3d:5a:22:e4:04:e9:
                    d6:58:66:54:ff:0c:3f:f1:d6:12:46:6c:50:c3:b8:
                    9c:b3:b2:8f:75:25:11:cf:ad:96:ee:6f:32:57:cf:
                    d2:c4:6f:95:f3:4d:03:17:cd:e0:c8:c5:cc:45:34:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1D:1D:73:F3:46:C1:9C:E0:37:2A:54:D0:6D:7C:9A:46:63:3F:8C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1x0dc_NGwZzgNypU0G18mkZjP4w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:5d0::-2a0e:b107:5ef:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:900::/44
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1870::/48
                  2a10:cc42:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         78:b0:dd:9f:63:b3:89:aa:e0:ac:74:f6:7e:ea:13:06:42:7f:
         c2:a7:6f:e4:07:ff:22:92:69:4c:9a:b3:b4:a3:33:3b:c8:3e:
         0e:b2:4e:63:cf:c5:ed:76:bd:ad:c6:ae:cf:bb:18:8e:ad:76:
         24:a7:40:aa:c7:cb:81:20:c1:a4:16:a0:d9:37:74:28:e8:27:
         e0:91:a9:7b:94:6f:07:f1:80:55:f8:04:49:f3:dc:82:a7:2d:
         a9:18:83:e4:6c:92:1b:6b:46:25:a6:7f:ea:8c:40:6a:87:54:
         c0:30:13:40:dd:41:f5:70:f7:43:2b:50:43:43:1b:16:d4:19:
         39:9e:db:e9:1a:61:3b:93:78:7d:ae:1f:80:bc:54:7c:86:29:
         8f:a4:80:50:41:d9:40:21:00:46:f4:c0:c8:f1:0f:43:0b:37:
         e7:1a:a3:a7:33:94:c3:d7:0e:c8:89:39:5f:b8:36:58:34:7e:
         76:6d:db:1f:6f:27:bf:8c:27:bf:be:35:64:41:84:eb:75:68:
         79:76:d4:d3:66:d2:10:7d:56:7d:0e:8e:20:cd:84:5e:8d:6d:
         c5:81:37:a3:c7:d2:5b:39:50:ca:a0:0e:13:a1:c9:e8:fb:71:
         82:73:75:b4:e9:60:2c:cb:9c:06:de:0f:c9:e0:f0:fe:bd:62:
         e2:26:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----