Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8i849Dd6TYM7Y7YYYBEEN7CgwHE.roa
File:                     8i849Dd6TYM7Y7YYYBEEN7CgwHE.roa (raw, json)
Hash identifier:          SNoARb9T8+l+0g2UvONVcGl2nBl1+n1y0eND0p0pCp0=
Subject key identifier:   F2:2F:38:F4:37:7A:4D:83:3B:63:B6:18:60:11:04:37:B0:A0:C0:71
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0182E1EA12E529ED318ABC26EC28DC2E85B9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8i849Dd6TYM7Y7YYYBEEN7CgwHE.roa
Signing time:             Sun 28 Aug 2022 00:46:29 +0000
ROA not before:           Sun 28 Aug 2022 00:46:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204406
IP address blocks:        2a0e:b107:1b94::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:e1:ea:12:e5:29:ed:31:8a:bc:26:ec:28:dc:2e:85:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 28 00:46:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f22f38f4377a4d833b63b61860110437b0a0c071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:c9:33:77:80:2a:bc:a3:05:dd:b0:31:88:
                    58:a9:6a:ad:ba:c9:5f:42:1a:b9:c3:1d:69:8f:2e:
                    ed:7d:26:dd:2f:81:6e:ce:0d:ca:8c:02:c9:1a:7f:
                    f3:81:0f:56:07:27:d1:15:18:31:f0:37:53:66:45:
                    56:91:df:ea:9d:5e:08:ff:1c:07:9d:4a:27:54:74:
                    c9:99:c3:52:de:71:f6:eb:cd:76:fc:9d:39:91:56:
                    dc:4a:eb:70:50:bf:19:c3:75:ae:3f:02:6e:f3:96:
                    de:8f:c1:c3:62:9e:39:17:5e:b2:14:2c:1c:e1:9c:
                    37:9d:53:17:b5:cc:96:19:14:47:35:38:64:da:5d:
                    33:c0:3e:d6:32:39:f0:0b:a4:a0:50:6b:d0:b6:92:
                    2f:65:67:49:02:58:49:90:f9:7e:49:40:56:a4:57:
                    9a:df:60:7d:ee:bd:2c:56:1a:e5:65:ae:8d:e6:ca:
                    c1:f0:b2:7b:08:f2:3e:22:34:34:3e:9f:32:d4:0d:
                    ee:cb:a6:e6:d9:b6:12:18:22:c7:57:5f:2f:bc:03:
                    ed:e8:29:de:0a:2e:93:c1:02:2b:79:dc:b1:31:b3:
                    52:d4:11:20:63:29:ac:3a:44:43:59:49:94:06:fb:
                    01:a0:e3:04:c8:5c:ce:68:1e:78:11:9a:fc:58:c1:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2F:38:F4:37:7A:4D:83:3B:63:B6:18:60:11:04:37:B0:A0:C0:71
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8i849Dd6TYM7Y7YYYBEEN7CgwHE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1b94::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:64:a2:2a:e5:da:53:89:03:23:00:00:2f:ab:0b:c0:c0:af:
         21:d6:6f:f4:df:08:a4:70:0d:ef:cf:88:bb:b6:37:5e:49:38:
         d7:15:da:02:55:35:d6:45:f3:a0:5e:5b:b6:07:b9:f7:7d:43:
         c7:dc:c1:06:70:77:4e:5e:6f:87:b8:93:38:db:74:0c:53:fc:
         71:52:63:25:87:d5:bb:e9:51:4b:01:69:10:a4:a1:15:e0:3d:
         cc:4e:8e:ed:30:69:fa:f6:2d:10:cc:a8:20:c8:3a:21:94:a3:
         89:42:eb:24:15:d6:7e:4e:df:23:51:88:f7:21:8f:33:9d:ba:
         9c:a3:6a:21:46:78:c8:08:67:fb:17:c7:9c:2f:10:89:53:41:
         d4:76:26:8b:e8:d2:90:44:bf:ee:83:94:56:c4:c2:a5:c1:da:
         e3:9a:c3:4b:22:4d:2c:61:47:d2:7b:e5:dd:89:e2:49:17:bf:
         2f:0f:9b:0a:22:1b:4a:40:cc:68:2d:13:02:83:84:e4:b0:6e:
         bb:22:f3:81:34:e5:8b:92:4c:e8:1d:39:47:99:c9:5d:1e:62:
         aa:02:eb:b6:40:be:91:cf:76:c5:4f:7f:31:ad:eb:49:c5:d3:
         73:9a:74:67:5a:08:9a:f9:4f:f8:e8:62:b6:5b:6b:9b:4d:bc:
         c4:6b:db:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----