Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5LKz1vDJX1vdnkKEJnU1Mh6TdM4.roa
File:                     5LKz1vDJX1vdnkKEJnU1Mh6TdM4.roa (raw, json)
Hash identifier:          kmpMz3suXYy4qa7zJwA11i1lEkSF2WlsCA67Wyo67kY=
Subject key identifier:   E4:B2:B3:D6:F0:C9:5F:5B:DD:9E:42:84:26:75:35:32:1E:93:74:CE
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0181D91F6DC239BE7B0891B56DDE0A8CFB2D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5LKz1vDJX1vdnkKEJnU1Mh6TdM4.roa
Signing time:             Thu 07 Jul 2022 14:45:24 +0000
ROA not before:           Thu 07 Jul 2022 14:45:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204051
IP address blocks:        2a0e:97c0:b90::/44 maxlen: 48
                          2a10:2f00:186::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d9:1f:6d:c2:39:be:7b:08:91:b5:6d:de:0a:8c:fb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul  7 14:45:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e4b2b3d6f0c95f5bdd9e4284267535321e9374ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:4b:76:ff:02:27:00:66:b0:78:93:5c:c1:
                    b3:a1:b9:8e:b9:df:b2:a5:77:cb:5e:6a:f9:42:3e:
                    4d:20:54:54:d3:2c:3e:74:a7:cd:7e:49:bf:cb:9a:
                    ab:c8:ce:67:4b:b1:c7:0f:8b:89:8b:86:fb:23:02:
                    ca:a3:c3:ed:21:5e:74:42:24:01:f6:a0:86:3e:3d:
                    d4:c4:ba:39:b0:59:2c:c9:20:9c:80:3e:ed:dc:28:
                    f1:ef:63:36:f3:39:68:e3:3e:24:4c:6f:d5:86:df:
                    8b:bd:25:be:aa:e1:0d:3c:7c:73:66:5c:28:b1:a3:
                    3f:f3:99:e3:0a:09:86:cf:68:b4:5d:01:d0:b2:86:
                    0a:2e:46:ff:ec:b8:ca:b4:c8:7b:68:81:0d:5a:29:
                    5a:4f:2a:87:99:98:47:eb:0b:fc:11:d5:f5:08:b3:
                    32:41:ca:5d:da:84:60:01:04:7d:cd:fe:f0:15:30:
                    4a:54:35:e8:da:c6:da:0c:1b:87:4e:58:83:98:b3:
                    6c:d2:a4:f1:13:df:eb:cb:36:b5:ec:2a:10:f8:33:
                    1c:5d:02:88:90:35:b5:8b:c5:6b:c7:ce:e9:a7:9f:
                    a2:d9:9b:11:2b:b0:eb:7a:9c:4f:bf:61:3e:86:6c:
                    bf:8a:d1:c2:52:ad:ca:f1:1d:96:45:51:be:ea:0c:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B2:B3:D6:F0:C9:5F:5B:DD:9E:42:84:26:75:35:32:1E:93:74:CE
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/5LKz1vDJX1vdnkKEJnU1Mh6TdM4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:b90::/44
                  2a10:2f00:186::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:ff:b4:5b:4e:65:05:6d:df:ed:6a:07:3b:cd:63:d9:b2:d7:
         ea:a6:e8:6b:a3:6e:7f:e7:f3:8a:d0:ea:63:f0:58:c3:c2:d1:
         73:47:05:1f:62:af:bb:d9:75:b3:de:7f:94:2b:3e:af:a1:2b:
         7a:b2:60:17:fc:7b:05:ad:18:35:e3:ca:d0:61:b0:05:c2:3f:
         2b:01:cc:9a:9b:f6:bf:8d:89:30:09:9e:aa:48:39:6b:bf:64:
         af:b4:75:c7:24:78:35:97:d5:61:e8:a8:0f:22:bc:b0:d1:13:
         7b:2a:79:93:1f:73:ff:71:99:12:fb:ed:31:9d:23:4c:16:60:
         b8:b6:df:86:f1:6e:40:92:e5:29:fa:d2:4c:19:3c:e6:f9:fc:
         2c:61:44:a7:71:67:90:5d:db:44:bb:8b:8b:35:92:d5:61:36:
         d8:07:fa:eb:b6:8c:26:50:da:bd:27:c5:7a:ab:f8:ac:30:ab:
         be:44:76:c6:74:a2:b1:8b:0f:97:65:d4:68:77:9f:f3:53:bc:
         bb:b6:51:36:55:55:3c:58:61:69:1a:76:7c:0a:70:b9:06:30:
         d6:5d:f7:c1:57:5c:0e:d9:27:94:4e:68:34:71:d5:d5:29:dd:
         03:ad:85:77:6f:16:85:34:9e:00:59:71:4f:51:48:76:54:90:
         9e:57:4c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----