Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/515SPybhn7QxK8chKuPqhskg4us.roa
File:                     515SPybhn7QxK8chKuPqhskg4us.roa (raw, json)
Hash identifier:          wz79bMSt4Sly8Iw0RHCZZ6hwd6s5Wmv4GkEuMfmVoOc=
Subject key identifier:   E7:5E:52:3F:26:E1:9F:B4:31:2B:C7:21:2A:E3:EA:86:C9:20:E2:EB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       12EFCF14
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/515SPybhn7QxK8chKuPqhskg4us.roa
Signing time:             Wed 16 Mar 2022 13:07:29 +0000
ROA not before:           Wed 16 Mar 2022 13:07:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     270014
IP address blocks:        2a0e:97c0:7ed::/48 maxlen: 48
                          2a0e:97c0:7ec::/48 maxlen: 48
                          2a0e:97c0:7ef::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317706004 (0x12efcf14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar 16 13:07:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e75e523f26e19fb4312bc7212ae3ea86c920e2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cf:94:fa:48:bd:39:ab:31:a0:8d:a3:f6:b8:
                    7d:d6:9b:17:5d:f8:0d:7c:5a:46:5f:c8:32:cb:d5:
                    b4:da:2e:f0:58:60:12:6b:45:e8:ea:15:5d:62:e3:
                    20:f2:87:27:78:e9:65:82:a2:46:b6:f9:77:d5:f3:
                    9a:68:6b:1c:2f:52:69:20:2d:75:b1:23:ae:ee:aa:
                    69:dc:7b:c0:ba:0c:36:3e:b6:0e:bc:26:69:17:33:
                    ab:f6:68:ab:d1:d8:d9:c6:6d:db:18:c6:a7:f9:08:
                    85:03:09:97:37:04:15:1d:7f:54:84:07:86:7b:e1:
                    3b:9f:59:88:23:0a:06:43:5d:0a:ef:fc:c5:3a:67:
                    b2:d8:d8:e3:54:08:4a:c6:03:8a:3d:82:2e:a6:5e:
                    91:a0:57:27:d0:33:ae:32:70:08:af:1d:14:5c:ee:
                    e6:45:b8:ae:2c:aa:ae:e8:30:04:60:9f:a2:c1:ff:
                    15:5b:4f:04:88:6d:1b:69:d2:84:5d:9f:4e:b7:f3:
                    6c:67:c0:97:38:87:90:61:14:c9:1f:e0:fa:5a:e9:
                    53:fc:9e:53:1a:d0:dc:79:35:aa:86:33:03:34:37:
                    8c:c6:49:b3:6e:c3:e4:8c:0e:c8:f0:bf:8e:f9:39:
                    2f:6d:ec:95:39:e4:c1:ba:b7:06:54:9f:e2:99:95:
                    c9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5E:52:3F:26:E1:9F:B4:31:2B:C7:21:2A:E3:EA:86:C9:20:E2:EB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/515SPybhn7QxK8chKuPqhskg4us.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:7ec::/47
                  2a0e:97c0:7ef::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:00:c1:8c:49:b2:5f:c0:47:c2:e6:3b:b9:d9:a7:ab:23:57:
         a4:a2:e6:7c:ec:9e:28:b0:a9:bd:45:ff:e3:dc:7c:2b:7a:90:
         04:3e:bd:58:fa:f7:17:55:d2:3f:19:f3:85:18:65:99:df:1b:
         ec:e5:06:27:93:ed:78:2b:6a:4f:50:65:ca:1a:e8:f4:22:79:
         67:4e:38:de:0f:ef:c5:04:32:ac:e8:54:96:1c:f8:17:73:0a:
         13:42:64:fa:58:e2:9b:cd:0d:49:bf:ed:ca:02:59:aa:10:33:
         91:88:fa:f6:a9:3e:70:74:3e:a3:17:a7:10:12:7b:c9:37:80:
         07:d8:66:85:c8:c5:08:d0:c0:77:49:56:cc:95:be:2b:03:ef:
         cf:91:f3:23:56:f4:fa:c6:c6:9f:d4:23:67:15:90:4d:6f:b6:
         c7:d7:0b:2d:aa:64:2c:4d:08:d0:d8:1a:b8:74:0c:32:c6:ff:
         b2:3b:b4:02:e3:d5:26:b9:e2:96:59:40:01:48:8c:ff:38:36:
         6f:57:b3:ce:a0:5a:76:db:0f:37:bf:4d:ed:4b:aa:63:6e:7c:
         32:a0:08:61:b0:2c:da:05:1d:6c:bc:9e:43:48:b2:ce:9a:3c:
         0e:cb:39:5c:48:63:4a:9b:6d:62:96:b7:81:bc:f0:f5:23:5d:
         e0:67:32:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----