Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7ELJpMPVWFZHE64mkqikK_KWJO4.roa
File:                     7ELJpMPVWFZHE64mkqikK_KWJO4.roa (raw, json)
Hash identifier:          gtkjrvIn2oDlOSDUEwyaEf1Xi6ITck53BbOpaSrmF98=
Subject key identifier:   EC:42:C9:A4:C3:D5:58:56:47:13:AE:26:92:A8:A4:2B:F2:96:24:EE
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10C574C9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7ELJpMPVWFZHE64mkqikK_KWJO4.roa
Signing time:             Sat 01 Jan 2022 09:05:30 +0000
ROA not before:           Sat 01 Jan 2022 09:05:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211479
IP address blocks:        2a0e:b107:1220::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281375945 (0x10c574c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ec42c9a4c3d558564713ae2692a8a42bf29624ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:95:ac:fd:3c:10:4a:8d:bf:7e:ea:c3:f2:9e:
                    05:7e:6e:75:68:a0:c8:80:e3:46:9c:3f:b3:bf:11:
                    1c:c6:9f:d2:4d:4b:5d:5c:6a:ad:c1:05:ad:1d:dd:
                    0a:6b:f6:3d:21:da:f6:22:61:80:cd:15:8a:57:b7:
                    9a:6a:93:1a:19:94:64:3a:f8:bd:39:3c:af:7a:71:
                    eb:ce:a5:14:ab:61:6d:45:e3:15:fa:9a:36:6a:79:
                    c2:52:2a:89:a7:a2:38:d1:d1:84:72:26:13:3a:ec:
                    f6:0d:9e:7c:a7:57:13:8b:6b:6d:15:15:d4:22:b8:
                    5d:02:c8:37:e8:9d:3d:6a:52:45:b8:f9:dc:57:46:
                    16:70:cc:1d:c5:b8:60:1e:91:9a:05:2f:e9:a8:12:
                    3d:22:90:94:e6:3d:70:8c:f1:63:53:b8:8c:40:45:
                    a9:c2:a8:f0:d3:43:f3:ba:c8:23:10:8f:06:34:4a:
                    9f:61:d4:52:9d:5f:b3:70:4e:2d:a8:dc:e0:9c:53:
                    ec:6b:5b:58:a6:65:2b:65:35:68:87:ee:aa:08:db:
                    f3:1b:98:9e:d1:7a:dd:ef:01:87:cf:04:ab:fe:8b:
                    f5:63:61:ec:29:0a:6e:1d:c0:bc:ba:5f:81:fc:52:
                    37:9d:2f:19:97:c9:ef:70:e3:a6:9a:12:94:9d:c6:
                    af:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:42:C9:A4:C3:D5:58:56:47:13:AE:26:92:A8:A4:2B:F2:96:24:EE
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7ELJpMPVWFZHE64mkqikK_KWJO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1220::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:e7:4d:81:a1:09:93:4c:6e:32:40:29:83:3c:e5:52:8d:1b:
         76:c6:0d:27:71:66:ee:92:dd:c8:94:19:9c:96:bf:1f:ea:18:
         1c:af:7e:3f:77:48:3a:40:94:50:39:9b:4e:f4:b0:67:00:c8:
         7c:bf:6d:f0:cf:d8:93:79:b8:1c:cf:30:ba:61:39:7c:f3:19:
         fd:18:ef:51:60:10:62:88:05:17:c8:89:90:33:2d:72:6c:64:
         33:7f:8e:4e:a0:b3:67:c4:de:29:64:2e:05:9e:3d:51:bb:99:
         b3:39:eb:40:98:d3:a6:03:44:ed:3e:ae:1a:a5:72:50:16:3c:
         86:ef:f5:82:d6:dd:72:71:7f:9e:de:0c:86:4b:7b:99:16:e8:
         27:ec:67:87:a6:24:95:8e:6a:b3:83:32:7c:a1:05:ee:98:d0:
         1f:d6:87:b2:a4:52:ee:97:ff:03:9e:41:3a:71:c9:eb:f4:e9:
         c0:6c:7f:38:d8:5b:98:c1:3c:49:d4:67:6f:98:7d:61:99:ba:
         c3:d2:f4:71:cf:6f:5a:35:f5:f4:fc:30:4d:f7:d1:5a:ec:6a:
         f3:27:6b:7a:57:ee:2c:a4:9d:35:69:52:27:1e:30:ae:15:a8:
         12:c3:c3:f6:1e:11:4e:b1:a5:16:b9:f7:53:ab:37:22:95:47:
         3f:e3:4d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----