Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/57u0sl95As4WcPHrx7RdutbI3Ss.roa
File:                     57u0sl95As4WcPHrx7RdutbI3Ss.roa (raw, json)
Hash identifier:          5lQzCjP3ZxjOY1iqy07LA9S8IlLvC+Xqt7lkDidLrm8=
Subject key identifier:   E7:BB:B4:B2:5F:79:02:CE:16:70:F1:EB:C7:B4:5D:BA:D6:C8:DD:2B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018404C6429DCCB43425F67F70D9EAA1EB54
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/57u0sl95As4WcPHrx7RdutbI3Ss.roa
Signing time:             Sun 23 Oct 2022 12:16:52 +0000
ROA not before:           Sun 23 Oct 2022 12:16:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202000
IP address blocks:        2a0e:97c0:c50::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:04:c6:42:9d:cc:b4:34:25:f6:7f:70:d9:ea:a1:eb:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 23 12:16:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e7bbb4b25f7902ce1670f1ebc7b45dbad6c8dd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:50:3a:80:a0:0b:e8:73:28:42:c0:62:b8:
                    25:79:26:6f:11:61:4a:7a:0f:9e:6c:93:a3:64:1c:
                    a6:1b:81:8f:fb:2d:17:85:81:ea:bb:63:f5:ab:58:
                    b4:f6:57:df:17:6e:37:92:76:bc:fd:c1:03:ea:ab:
                    1a:9b:4a:34:52:aa:4a:8d:ee:c1:3a:fb:0a:58:b9:
                    a3:06:21:6c:59:8e:91:ed:a3:ab:e1:94:fb:6e:dc:
                    ff:79:f6:60:19:86:4f:4b:69:9d:68:99:96:19:92:
                    5a:2c:d7:7b:bb:22:9f:7b:0e:cf:57:27:0c:8a:db:
                    0a:09:6d:57:0a:77:87:e8:1f:27:fb:83:61:dd:f5:
                    27:2b:ae:84:63:62:4e:0e:53:4f:ab:0b:66:eb:ee:
                    b9:8c:8a:c4:e5:94:6b:7c:51:4f:75:e1:8e:92:de:
                    22:ab:45:94:13:95:c3:ee:84:3a:af:69:3c:34:67:
                    e8:4b:52:fc:be:24:7d:af:23:c2:1b:9a:8f:c0:af:
                    38:88:3e:e0:2c:61:81:9c:23:54:3d:0c:ec:01:9c:
                    01:e2:82:3a:21:6d:68:23:91:e3:8c:02:0e:66:0e:
                    6e:51:49:1f:35:ad:e2:ab:68:9e:f6:08:6c:4b:0a:
                    fa:16:fc:17:19:f7:28:a6:0f:2b:fc:24:92:0a:38:
                    55:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BB:B4:B2:5F:79:02:CE:16:70:F1:EB:C7:B4:5D:BA:D6:C8:DD:2B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/57u0sl95As4WcPHrx7RdutbI3Ss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:c50::/44

    Signature Algorithm: sha256WithRSAEncryption
         55:a1:52:90:09:ee:31:f7:d5:df:2d:5a:98:60:b4:cc:ba:9c:
         14:a1:39:f6:85:47:38:69:25:c0:a6:1a:24:c0:a5:40:dd:0d:
         22:44:13:20:a0:54:ed:a2:06:0d:e9:b7:50:13:ab:8d:be:2b:
         57:bc:09:54:23:05:57:f9:31:e3:72:62:30:c5:e2:a3:d1:c0:
         21:c6:fd:04:6f:c1:3d:4d:0c:71:66:39:44:ee:73:a1:d1:48:
         89:e7:9f:82:b2:3c:ec:79:dd:8c:ff:41:a8:09:99:56:a4:2c:
         c7:c7:58:77:ee:38:96:03:30:2c:88:2c:ef:d2:26:0b:1a:96:
         7b:bd:0f:00:ae:d0:17:3c:3f:3b:99:22:c7:fd:fd:3d:fe:10:
         3f:c4:68:67:4d:8c:a9:00:61:4a:4a:96:24:6b:03:a0:4f:ca:
         cc:ab:a3:5a:d9:68:d1:50:bf:47:65:6b:22:f1:f2:70:27:77:
         55:a6:94:df:9a:8c:bb:b6:cb:16:89:b6:a9:21:5d:88:c2:c8:
         04:a5:43:d0:7a:09:6c:29:1b:39:98:0f:1b:e5:ca:d6:90:d8:
         db:97:2b:6a:89:01:20:b8:f5:e6:84:c9:5b:bd:ec:26:17:92:
         9b:02:f6:2c:77:c5:46:76:f6:3f:e1:97:48:d8:8e:cb:0b:f3:
         1d:cb:53:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----