Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7qLuXrG2PKkcHPSsi5gxtmLywak.roa
File:                     7qLuXrG2PKkcHPSsi5gxtmLywak.roa (raw, json)
Hash identifier:          sZM51tUoJb2rZE4PdUFgQDnrIJcYcgxl4Z680yJefuc=
Subject key identifier:   EE:A2:EE:5E:B1:B6:3C:A9:1C:1C:F4:AC:8B:98:31:B6:62:F2:C1:A9
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       11DBAC9B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7qLuXrG2PKkcHPSsi5gxtmLywak.roa
Signing time:             Thu 10 Feb 2022 09:27:53 +0000
ROA not before:           Thu 10 Feb 2022 09:27:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     61218
IP address blocks:        45.148.116.0/22 maxlen: 24
                          2a0f:e400::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299609243 (0x11dbac9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 10 09:27:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eea2ee5eb1b63ca91c1cf4ac8b9831b662f2c1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:c6:78:35:3a:c8:53:02:f6:c2:78:d6:d6:
                    ed:13:b9:35:ec:9c:06:3b:4e:0b:8a:91:07:3e:69:
                    8f:c1:49:42:2e:2c:d3:8a:d8:4b:a8:db:1e:ed:d3:
                    ef:f7:38:90:84:33:af:0a:ea:6a:37:be:86:57:aa:
                    d6:35:3e:5f:9a:c1:c2:f6:f3:c1:83:f5:89:38:c2:
                    1b:ca:24:35:fa:99:ff:65:24:f3:00:c3:6d:20:fc:
                    32:60:89:8c:ed:22:c6:ad:c6:ee:10:c6:04:44:3d:
                    fb:9f:f1:e3:8d:86:42:4f:1d:37:5a:72:72:d5:8e:
                    9e:79:3b:a4:78:af:55:90:33:bf:eb:c6:96:5a:5a:
                    42:5b:10:42:1e:9c:d9:04:27:8f:a9:75:76:50:d3:
                    12:05:b0:c5:50:0c:2f:8c:96:da:5e:c9:b7:2c:44:
                    c1:f7:d0:8d:3f:2d:8f:fb:9a:86:6d:56:dc:09:23:
                    5c:75:08:09:31:d5:45:42:a8:87:d8:91:9b:a2:eb:
                    eb:56:57:6c:ef:a4:14:a3:1e:60:29:57:37:dc:c4:
                    b9:84:35:c4:11:b1:14:ae:83:b4:83:41:80:f1:05:
                    bb:ad:50:e0:5b:25:a1:23:9a:12:57:c9:9f:48:e2:
                    af:d8:3b:55:e0:78:1c:88:8d:d4:62:c5:18:a4:93:
                    5d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A2:EE:5E:B1:B6:3C:A9:1C:1C:F4:AC:8B:98:31:B6:62:F2:C1:A9
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7qLuXrG2PKkcHPSsi5gxtmLywak.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.116.0/22
                IPv6:
                  2a0f:e400::/29

    Signature Algorithm: sha256WithRSAEncryption
         03:cb:5b:20:e3:e5:46:dc:ee:50:06:60:cf:2c:4b:1a:aa:82:
         30:30:c0:1b:a2:2f:e3:54:43:77:c7:8f:80:de:cc:c8:8a:62:
         ff:fd:b5:43:27:ad:2e:a5:45:0b:48:87:b1:4a:88:56:e0:87:
         4e:5b:80:39:3a:d6:24:78:19:44:e1:f9:2b:73:5d:20:de:7b:
         fa:89:f8:a2:b9:23:a2:ad:c4:c4:64:8a:c2:89:b4:38:df:41:
         41:ff:af:4e:fd:2e:91:88:63:e0:35:87:29:1b:bb:cb:f0:25:
         82:d0:54:39:15:25:87:1a:d2:c0:80:23:78:87:78:df:33:6e:
         05:ca:8e:3b:de:3a:2f:a8:3c:25:03:fc:e0:27:db:00:4f:5f:
         73:34:ad:31:21:6a:ec:1d:a6:8b:61:00:eb:f6:78:63:ba:9a:
         13:0f:57:cb:e9:ae:23:6a:e6:79:c7:4c:fb:be:dc:69:40:0a:
         45:97:3a:05:37:96:6e:62:34:c0:28:72:da:a7:5a:c6:34:09:
         93:19:c9:5e:88:e4:5f:01:fd:e2:87:5e:0c:68:70:a4:6d:b3:
         0a:d4:1a:f3:2b:6b:c9:62:2c:cd:89:41:58:f8:99:88:38:db:
         7a:2d:5c:81:44:7e:44:ad:f3:f7:a4:8c:6e:1e:6b:7e:56:3e:
         e0:3f:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----