Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9rBeZaucyNg67h5k5xY46FVyURM.roa
File:                     9rBeZaucyNg67h5k5xY46FVyURM.roa (raw, json)
Hash identifier:          Ch9sB2gNahd3Mu7KlqnW1pNpT4aviwg8MWWuF1wYdLw=
Subject key identifier:   F6:B0:5E:65:AB:9C:C8:D8:3A:EE:1E:64:E7:16:38:E8:55:72:51:13
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       14D6CF81
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9rBeZaucyNg67h5k5xY46FVyURM.roa
Signing time:             Thu 26 May 2022 12:45:15 +0000
ROA not before:           Thu 26 May 2022 12:45:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56758
IP address blocks:        2a0e:97c0:660::/44 maxlen: 48
                          2a0e:b107:17a0::/44 maxlen: 48
                          2a10:cc40:b000::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349622145 (0x14d6cf81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May 26 12:45:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6b05e65ab9cc8d83aee1e64e71638e855725113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:eb:e7:d8:d4:29:47:c6:ab:6c:25:d1:1a:5f:
                    20:43:c5:7c:fe:e1:57:79:6b:7a:6f:ed:6e:fe:25:
                    30:80:95:ee:5d:10:7f:2d:68:24:33:69:d7:42:eb:
                    6c:8d:01:71:fd:d3:22:14:5f:6d:36:5a:5b:d5:b1:
                    5f:3a:fc:e7:36:dc:a1:93:1b:70:5c:59:0c:1d:b2:
                    a0:10:22:76:94:4e:20:69:fb:1a:50:ce:37:d8:db:
                    60:a4:6b:ab:5e:a7:0b:81:82:f4:3b:bc:70:66:64:
                    5e:ef:2d:78:7d:14:af:16:0f:59:c6:f4:db:00:b6:
                    ab:9e:cd:dd:a5:3a:cb:e4:54:d7:27:bd:02:89:81:
                    b3:75:f0:bb:a6:ba:8c:cf:dd:ef:fc:6a:22:c8:4b:
                    42:ae:51:b6:c3:10:75:15:6b:98:3c:8c:3a:21:1e:
                    b4:4e:c4:1d:1c:53:e4:f0:f4:ef:c4:43:19:8d:f7:
                    d3:8e:78:1c:6a:5f:ad:66:16:7f:dd:57:28:e3:55:
                    fd:94:36:ce:b7:f0:ec:c5:78:ae:a6:7f:33:da:e1:
                    34:3f:b4:f5:e4:86:87:d4:49:05:bf:10:e0:cc:8c:
                    2c:1f:ed:e6:13:59:90:0c:d1:c7:fb:2f:7c:81:08:
                    a1:98:47:cf:6a:56:8a:b0:b8:6b:eb:b1:45:55:f8:
                    dd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B0:5E:65:AB:9C:C8:D8:3A:EE:1E:64:E7:16:38:E8:55:72:51:13
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9rBeZaucyNg67h5k5xY46FVyURM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:660::/44
                  2a0e:b107:17a0::/44
                  2a10:cc40:b000::/44

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:5d:2b:35:8c:99:4f:46:59:dc:fe:d7:77:81:a8:de:60:
         ea:ef:6f:5f:4a:03:4d:0e:28:82:c1:d7:60:a6:da:5a:b2:86:
         e7:04:d9:79:86:34:9a:9d:d4:39:65:13:2a:01:b6:0e:cd:97:
         8c:e7:23:71:7c:70:88:d7:87:69:31:9c:1d:f3:ba:64:c6:0d:
         bb:49:bd:fc:44:e9:24:69:de:a0:ce:06:6f:5f:52:4a:38:ff:
         ed:ed:fb:7b:32:8e:aa:cf:7b:4e:35:bd:a1:1c:e4:45:73:7d:
         69:91:91:37:a6:ec:ed:89:52:3e:d4:26:9a:c0:18:ed:02:83:
         39:c6:d8:8c:cf:b0:9b:fb:2e:32:91:ac:20:ca:29:b2:0f:37:
         ca:ad:f8:72:85:49:8e:13:4b:bb:f3:77:68:61:57:ad:1d:b2:
         2a:80:6d:fa:b7:26:1a:26:0e:0e:e6:8a:1c:3e:46:3e:6c:a0:
         9b:99:14:b4:fd:53:76:29:af:fd:a0:1b:66:c1:9c:ee:b7:27:
         df:09:cd:b1:64:da:65:1a:f5:fa:9d:75:46:c8:37:d6:12:b2:
         c9:bc:0a:a7:a2:f5:b6:0f:fd:76:74:df:df:31:b5:70:e8:17:
         01:f9:73:61:c3:e4:ad:4c:1f:55:42:c9:f0:c2:05:a2:d6:e4:
         b7:70:07:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----