Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6-uUPezo50AdGMmylq4soTB6LEg.roa
File:                     6-uUPezo50AdGMmylq4soTB6LEg.roa (raw, json)
Hash identifier:          +zG4IjvzJ3OscG5LM+8hQPhvydzHPKDOO+pm/JsaLIE=
Subject key identifier:   EB:EB:94:3D:EC:E8:E7:40:1D:18:C9:B2:96:AE:2C:A1:30:7A:2C:48
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018429E56B5866DB23460850B79F4CE12286
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6-uUPezo50AdGMmylq4soTB6LEg.roa
Signing time:             Sun 30 Oct 2022 17:16:51 +0000
ROA not before:           Sun 30 Oct 2022 17:16:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203458
IP address blocks:        2a0e:b107:1c80::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:29:e5:6b:58:66:db:23:46:08:50:b7:9f:4c:e1:22:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 30 17:16:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ebeb943dece8e7401d18c9b296ae2ca1307a2c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:76:f8:96:a5:3a:ae:54:1d:1c:58:01:f5:45:
                    a4:66:59:15:6b:3d:a7:11:f3:76:6f:f7:a3:b3:44:
                    77:a1:0f:78:f1:73:d8:92:ff:c5:be:cf:41:53:8d:
                    d9:8c:85:39:c2:24:79:36:9b:8b:7b:c4:12:07:c0:
                    ff:f2:66:b0:7a:6f:ba:4d:f8:55:a1:10:2f:53:19:
                    35:74:d3:1e:cf:1c:4f:6b:29:0f:77:28:ba:eb:33:
                    3e:39:8a:b8:36:fd:0c:a0:39:ae:3a:25:a0:a9:27:
                    ac:a3:17:e8:26:c7:92:e5:c1:6d:7d:f0:e0:80:2c:
                    f6:b8:d1:83:b7:ef:de:b4:1d:10:e8:2d:40:68:e4:
                    00:94:ef:51:3b:fd:92:72:72:72:d6:75:62:f6:cc:
                    24:14:2e:23:1d:b7:7a:bb:a5:9d:26:0b:ee:1f:1d:
                    c4:3a:ce:75:e7:58:2a:d8:eb:69:6c:f5:b2:3b:5d:
                    9f:98:ba:15:9d:55:2f:96:7f:f2:e9:11:59:3f:9a:
                    a4:be:1c:a0:c4:b7:e3:3d:70:7c:97:e5:18:7f:cd:
                    8e:51:8e:93:ca:27:2e:67:43:5d:5f:56:c3:05:e1:
                    2f:5d:17:b4:c5:f9:fa:ed:a4:1e:a1:f9:4b:9a:2c:
                    f1:76:02:1e:46:38:f3:83:dc:63:ed:1d:cc:90:f6:
                    68:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EB:94:3D:EC:E8:E7:40:1D:18:C9:B2:96:AE:2C:A1:30:7A:2C:48
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6-uUPezo50AdGMmylq4soTB6LEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1c80::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:cf:14:5a:08:e3:fb:88:92:49:dc:e1:53:cd:e8:38:3d:c3:
         73:a3:96:24:cc:24:6d:99:d2:6f:08:a2:0b:52:0b:dd:0b:a5:
         0c:4c:a0:59:89:82:fc:15:18:b6:24:55:76:82:73:e2:3f:c6:
         04:73:9d:1b:e2:80:09:ea:35:7e:4f:ff:88:f9:0a:12:74:1e:
         fe:88:e7:ff:e1:eb:ab:7b:8b:7f:e7:66:16:c6:af:87:78:b4:
         3c:5c:99:ee:2a:b6:c5:94:22:40:3a:9c:00:9f:5d:47:1e:4e:
         bf:ef:da:6c:88:3a:be:f7:a4:e6:16:98:42:f6:bc:e3:99:16:
         c9:80:4d:f8:c5:67:fb:ce:74:12:6d:0d:6c:76:75:8a:4b:b4:
         04:29:c4:ee:ac:f8:37:1f:fd:8e:b6:2a:fe:9d:e4:1b:35:3f:
         29:71:6a:78:ad:68:2a:9e:57:82:3b:1e:ae:44:de:6e:68:f2:
         d0:de:ac:cc:cc:4d:5e:37:93:86:34:55:5d:af:d3:7f:4b:dc:
         44:d4:8c:af:81:5c:12:83:a4:e6:93:68:cd:b5:d2:80:3e:93:
         77:b4:86:42:2d:2d:e6:97:de:42:62:00:d0:c3:ac:5f:0a:e9:
         dc:6b:07:5f:b6:9f:12:a8:41:4d:4b:a8:65:83:3e:01:70:1c:
         69:69:72:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----