Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3gSChPQS4ojWgzsn2fVjKwBdktE.roa
File:                     3gSChPQS4ojWgzsn2fVjKwBdktE.roa (raw, json)
Hash identifier:          JlunuE3APOGyUzYegKB4fWaeOZ/aTid9T3WfblPXXZw=
Subject key identifier:   DE:04:82:84:F4:12:E2:88:D6:83:3B:27:D9:F5:63:2B:00:5D:92:D1
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       13FD78AD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3gSChPQS4ojWgzsn2fVjKwBdktE.roa
Signing time:             Sun 24 Apr 2022 19:52:55 +0000
ROA not before:           Sun 24 Apr 2022 19:52:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207317
IP address blocks:        2a0e:b107:550::/48 maxlen: 48
                          2a10:2f00:11a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335378605 (0x13fd78ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 24 19:52:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=de048284f412e288d6833b27d9f5632b005d92d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:fa:d4:f9:92:a8:81:7d:99:e3:7b:79:f3:
                    dd:65:87:66:32:cd:7f:43:02:3c:1c:32:b3:8a:b3:
                    79:46:68:58:f3:99:03:a7:a6:8a:4b:5d:4d:b1:55:
                    e6:e4:d2:e8:6d:c0:71:50:b3:64:ac:be:32:73:29:
                    b0:de:ab:f6:6e:6d:09:2f:4f:0a:e1:c9:f0:e6:6d:
                    8e:dc:b0:a0:d2:55:49:b0:3a:09:a1:43:af:76:3c:
                    12:85:a6:9d:88:ff:f0:18:f7:98:78:fd:c9:41:fa:
                    1c:21:ef:ed:77:85:1c:38:85:8b:52:2f:3b:d3:3d:
                    97:67:30:dc:55:b8:5d:68:dc:c2:f3:23:ba:a2:ab:
                    81:d1:e5:78:06:44:c5:5a:16:22:83:9c:f4:dc:ac:
                    fb:f9:96:cb:4f:07:bf:c8:64:62:9b:77:7a:72:0b:
                    ba:54:6f:68:49:39:21:93:22:82:75:a8:4a:c0:fa:
                    1b:b6:f5:0f:83:ef:76:f8:b4:85:95:2b:6e:bb:d7:
                    32:f9:d9:5c:84:40:92:2c:4b:f4:7b:ad:1e:5d:a0:
                    ea:ef:23:04:b0:18:0a:4e:85:d6:ac:77:03:47:f6:
                    02:80:fb:bf:76:cb:67:e8:ab:f4:59:0d:d0:8e:a3:
                    b7:f3:76:bd:16:c2:21:70:de:29:ac:47:ff:8e:48:
                    32:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:04:82:84:F4:12:E2:88:D6:83:3B:27:D9:F5:63:2B:00:5D:92:D1
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3gSChPQS4ojWgzsn2fVjKwBdktE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:550::/48
                  2a10:2f00:11a::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:19:14:76:bc:e4:36:e2:b3:bb:6e:f3:36:58:90:43:a3:0d:
         9e:64:7e:3b:3f:5c:7e:38:cd:94:a5:83:67:d8:e4:c6:e9:53:
         e0:a7:b4:85:bb:aa:5b:d7:aa:2e:cb:ad:0f:7a:47:f5:ab:c1:
         dd:db:16:67:b1:2e:9c:fa:0e:72:90:db:2c:77:1e:d8:f4:4e:
         09:cc:e1:cf:93:98:99:89:8b:34:ac:c4:3b:f8:cd:9a:eb:e8:
         2c:f4:e2:de:80:41:d4:be:78:00:1b:ce:fa:10:e1:5b:99:13:
         f0:db:c0:84:91:dc:4a:7c:ef:8b:c8:82:dd:9b:7e:06:85:fe:
         41:4b:9d:b2:be:07:21:05:a4:9e:86:69:80:ee:24:38:f5:27:
         9e:e1:8f:72:7d:80:4c:6d:45:44:0e:1f:05:3b:cf:b6:ba:16:
         ef:ea:14:50:45:db:e0:50:67:3e:32:1f:b0:85:95:a7:86:90:
         5b:5e:91:3e:6e:ba:c3:b4:c2:8b:6c:8b:e3:91:70:ca:57:14:
         99:89:c8:7b:ef:e9:9d:83:e2:15:fd:51:c5:7c:4f:bb:0d:d9:
         d3:b4:a6:eb:41:05:2e:17:0d:27:1b:60:70:5a:84:b3:22:d6:
         10:3c:a7:80:d1:c3:a3:87:2b:f4:db:37:ae:b7:79:8f:ec:0f:
         d1:c1:ca:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----