Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8Abh2u05FG8IkULfQJ-Hl5iJM4Q.roa
File:                     8Abh2u05FG8IkULfQJ-Hl5iJM4Q.roa (raw, json)
Hash identifier:          y0XEdOUf0LRDTeSCKOXNd5R8o16FAqmrUggpbP7bYO8=
Subject key identifier:   F0:06:E1:DA:ED:39:14:6F:08:91:42:DF:40:9F:87:97:98:89:33:84
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01829C50CE70B4238137C05027905ECB34F9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8Abh2u05FG8IkULfQJ-Hl5iJM4Q.roa
Signing time:             Sun 14 Aug 2022 12:25:17 +0000
ROA not before:           Sun 14 Aug 2022 12:25:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212888
IP address blocks:        2a0e:b107:c00::/48 maxlen: 48
                          2a0e:b107:c02::/48 maxlen: 48
                          2a0e:b107:c01::/48 maxlen: 48
                          2a0e:b107:c03::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:9c:50:ce:70:b4:23:81:37:c0:50:27:90:5e:cb:34:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 14 12:25:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f006e1daed39146f089142df409f879798893384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:07:7e:6f:f7:e4:f7:fd:3b:f9:78:73:40:15:
                    90:c2:e6:96:9a:16:87:38:87:b7:1a:25:17:5e:13:
                    8d:f4:41:be:39:dd:f8:d8:23:05:88:40:0a:d0:2a:
                    66:b7:25:27:a1:c0:92:f7:ea:7e:cf:17:d7:fc:f3:
                    cc:a0:32:c7:4a:11:95:29:1e:0c:13:dd:63:4b:75:
                    8f:a0:f9:0d:ee:1d:18:3d:af:5e:5c:c3:6b:d5:87:
                    f0:f6:a6:46:4b:ba:a0:df:0d:74:e2:f3:0c:86:26:
                    cf:48:69:e7:82:b3:dc:5a:69:29:7f:f7:b9:ad:82:
                    49:f9:a9:a7:0a:33:31:65:dd:f5:9a:09:b4:54:fa:
                    11:3d:a4:99:3a:98:97:e3:ac:1a:ec:dc:ab:df:24:
                    d1:91:03:32:36:33:75:da:80:38:c9:b0:ce:41:a0:
                    08:9c:ab:da:56:a6:cd:ca:0d:81:ea:05:65:0c:62:
                    92:82:0a:10:2d:01:9d:ac:6e:c5:4f:e2:e4:fe:a4:
                    bb:77:46:01:5b:f9:96:a7:ad:aa:89:bd:b2:b9:e2:
                    1a:9d:56:cd:55:d9:6a:4b:53:5f:5c:bf:e4:b3:e8:
                    67:c0:75:8f:1b:c8:cc:df:2f:ab:8d:65:7c:8f:5d:
                    5b:fc:5e:35:ad:0c:d0:c5:3d:b1:fb:7b:35:e9:bb:
                    7c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:06:E1:DA:ED:39:14:6F:08:91:42:DF:40:9F:87:97:98:89:33:84
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8Abh2u05FG8IkULfQJ-Hl5iJM4Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:c00::/46

    Signature Algorithm: sha256WithRSAEncryption
         39:14:70:58:ea:10:18:3a:de:aa:42:f7:c5:29:2a:1f:44:0f:
         e9:6a:8c:fa:01:06:26:85:20:81:83:69:b7:95:12:a3:a9:dc:
         a9:8b:1f:1b:95:dc:1c:18:94:f6:4b:dc:15:a4:34:9b:76:7d:
         52:ab:4e:e0:e3:1a:07:31:56:6c:15:f0:25:eb:d5:1d:55:97:
         ef:2d:99:a6:f4:8e:ee:69:26:ab:1b:6e:a9:56:03:91:eb:6f:
         d4:30:19:3a:30:4b:45:87:d0:e1:7b:31:53:00:49:47:7f:72:
         97:6d:33:97:f5:32:ca:11:d5:e9:5f:ea:36:01:b0:89:cd:4e:
         8e:ae:16:c0:bb:e6:11:3f:ed:09:49:f2:59:e2:fa:6e:3b:90:
         1e:e4:da:c2:40:12:87:8a:68:37:dc:d1:de:87:80:3a:0e:69:
         5b:15:0c:72:1d:65:c5:f8:98:d3:28:a6:f5:93:45:4d:c9:ac:
         4a:af:42:63:fa:23:fd:2d:70:f5:46:1e:51:1a:ca:3e:aa:ae:
         c2:00:01:b0:15:da:78:38:c7:35:19:99:22:94:e2:b1:68:a7:
         9c:02:ef:02:6e:72:94:aa:9d:12:64:4e:f2:52:8c:e2:34:a7:
         34:42:9d:88:fa:e3:ea:a8:7b:e2:2c:59:72:c1:f4:98:ba:84:
         ee:f0:22:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----