Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/69t6XCGNV8ybZNQEg7neAldVb1Y.roa
File:                     69t6XCGNV8ybZNQEg7neAldVb1Y.roa (raw, json)
Hash identifier:          /mZ28NusFwmupTzJvDoX78OXcu3Z3LT23FUw4JPkXsc=
Subject key identifier:   EB:DB:7A:5C:21:8D:57:CC:9B:64:D4:04:83:B9:DE:02:57:55:6F:56
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01853A13541984AD9C2421DA5F50293EDC56
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/69t6XCGNV8ybZNQEg7neAldVb1Y.roa
Signing time:             Thu 22 Dec 2022 13:43:43 +0000
ROA not before:           Thu 22 Dec 2022 13:43:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200529
IP address blocks:        2a0e:b107:1d30::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:3a:13:54:19:84:ad:9c:24:21:da:5f:50:29:3e:dc:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec 22 13:43:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ebdb7a5c218d57cc9b64d40483b9de0257556f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:0a:35:12:b1:e9:05:41:4c:ea:86:51:56:
                    df:a9:94:19:34:10:19:da:98:36:81:b8:50:9e:c0:
                    55:1e:ec:50:00:fe:5f:b0:4e:2e:5c:5a:84:95:30:
                    38:a3:1c:51:17:72:bd:65:56:5e:4d:15:ef:e9:4d:
                    82:37:96:7f:2b:63:4d:0a:d8:93:8a:8a:dc:52:a2:
                    d3:41:3f:08:c7:36:94:7e:8c:c6:39:b0:45:d9:5f:
                    1a:f2:75:1e:82:b4:53:a3:d3:5f:27:f4:9a:da:3f:
                    cf:e3:58:f1:13:10:10:c7:81:54:24:d0:ce:2d:9a:
                    ef:91:4b:cb:3d:9e:82:76:30:86:6b:ee:1a:94:ce:
                    a3:68:cb:56:4f:30:17:df:4a:d2:c4:ec:04:dc:af:
                    bc:12:e3:9b:41:67:78:fb:3d:7e:ae:0e:38:fe:11:
                    95:47:77:3d:1e:94:9a:28:43:67:cf:44:97:49:75:
                    4d:ff:67:bd:46:61:40:ed:99:87:6e:1a:01:90:00:
                    26:28:3a:02:71:87:af:bd:aa:9c:68:c9:e6:d9:9c:
                    dc:63:a3:1a:f8:37:ab:0e:e3:0b:54:08:8c:f3:29:
                    aa:5f:96:cf:31:f4:52:be:f7:a0:2c:f4:5b:ee:dd:
                    7b:ab:f0:75:dc:82:50:ca:f3:54:ac:f7:f0:74:92:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DB:7A:5C:21:8D:57:CC:9B:64:D4:04:83:B9:DE:02:57:55:6F:56
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/69t6XCGNV8ybZNQEg7neAldVb1Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1d30::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:8b:23:50:7e:4b:66:a1:9d:ae:07:3a:60:a6:44:a6:76:c8:
         4f:25:bc:f8:41:89:aa:e3:b7:ef:72:7f:f9:67:f0:08:ec:54:
         ec:54:f7:96:8d:ac:b5:fa:a2:90:34:5d:18:2c:59:4d:b2:35:
         45:4d:b6:27:f7:1a:26:34:1d:a7:07:e3:4b:14:f6:da:ec:3a:
         e3:b2:e2:43:6d:37:3c:5a:df:c5:47:41:9f:20:ab:7e:27:16:
         94:d9:64:ab:cc:73:24:72:f4:f3:d7:89:81:c9:89:c5:77:d0:
         4e:c9:6f:0f:36:1e:fc:95:7e:a7:8c:1e:3a:ca:6c:0d:65:53:
         8d:2d:07:48:de:a1:f6:ba:5b:ab:13:9b:e5:29:cb:cc:44:3b:
         1e:87:d5:82:2f:60:0d:62:83:8b:2b:6d:9f:98:6d:04:28:e9:
         2b:71:94:6d:43:72:07:e9:f9:ec:93:de:4b:b2:88:e6:fd:47:
         b0:bd:61:d4:2c:36:32:81:a7:36:b0:2b:ba:ea:7a:e4:e7:6f:
         59:c3:c7:46:ab:6c:ff:57:83:fc:e0:77:d3:4f:44:e3:d7:6a:
         9f:22:f3:b5:4f:a6:d6:d9:2c:18:57:91:44:7c:ba:e0:ab:12:
         6b:34:91:14:60:d2:5b:29:33:91:6d:d6:ec:86:96:d2:4f:e5:
         2f:e5:7c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----