Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C02R-pTM45C89feU7_IqbUXNKpQ.roa
File:                     C02R-pTM45C89feU7_IqbUXNKpQ.roa (raw, json)
Hash identifier:          nqQ/FwtakMZrHTAntqthNP4q0s4CSY+tZKD3vks0I5I=
Subject key identifier:   0B:4D:91:FA:94:CC:E3:90:BC:F5:F7:94:EF:F2:2A:6D:45:CD:2A:94
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0184E7DAB71A73BB2AEDDDBE908B247BF611
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C02R-pTM45C89feU7_IqbUXNKpQ.roa
Signing time:             Tue 06 Dec 2022 14:33:01 +0000
ROA not before:           Tue 06 Dec 2022 14:33:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212164
IP address blocks:        2a0e:b107:1d20::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e7:da:b7:1a:73:bb:2a:ed:dd:be:90:8b:24:7b:f6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec  6 14:33:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0b4d91fa94cce390bcf5f794eff22a6d45cd2a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:79:61:f3:23:ef:a0:2e:10:c6:d8:45:26:
                    d6:b5:9e:1f:6e:83:0c:a8:f8:40:b7:a2:94:6f:69:
                    75:c2:a9:84:0d:ec:57:91:fa:30:cd:bc:0c:c2:16:
                    4d:51:6a:47:2e:c8:76:96:b8:4b:fb:ea:6a:b0:5f:
                    c1:e3:ce:58:c0:2a:2b:ca:53:2f:cf:d0:d0:fa:db:
                    6c:4c:49:2d:fd:da:1c:51:d1:34:c8:1b:9a:12:8d:
                    70:04:1f:ec:27:c6:ac:a3:9a:f3:d2:15:66:3a:90:
                    4e:41:93:95:a9:78:bf:fc:61:ef:f9:09:85:c0:91:
                    ee:28:b6:8f:2e:17:75:7d:4d:3a:9d:5a:ef:5b:d0:
                    90:0d:6d:af:80:2f:23:c5:81:4c:a0:8c:91:21:a4:
                    8a:36:15:87:18:f5:90:6c:a5:4f:60:cc:73:b1:c1:
                    f7:4d:91:8f:63:6d:d6:78:20:55:07:77:3d:e5:9a:
                    c9:4b:cd:df:82:77:a9:0a:11:53:ef:46:d6:10:65:
                    2a:28:d0:0b:e5:49:8c:00:99:85:cd:ca:21:89:03:
                    11:99:fe:76:c0:28:63:e7:58:52:e4:9f:57:c6:a0:
                    4a:61:fd:c8:ce:59:77:98:3c:0c:f7:27:9a:59:88:
                    9a:2a:6b:57:b1:2c:74:c9:b6:e7:9c:32:6c:6f:b4:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4D:91:FA:94:CC:E3:90:BC:F5:F7:94:EF:F2:2A:6D:45:CD:2A:94
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C02R-pTM45C89feU7_IqbUXNKpQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1d20::/44

    Signature Algorithm: sha256WithRSAEncryption
         71:b6:15:9b:fa:0b:00:05:82:04:f7:73:ff:c3:81:07:b1:1f:
         b0:d3:3a:76:9a:6f:29:99:12:be:66:e3:6c:d9:a1:82:9a:21:
         25:a3:3e:43:98:e1:f9:96:8c:36:aa:fc:d4:74:8a:08:cf:0f:
         d5:0d:75:7f:50:26:c8:69:9a:a2:28:34:69:73:41:70:a6:a8:
         84:2a:b0:d9:5f:ba:14:50:f5:20:62:ac:1c:1a:77:23:fb:b4:
         04:a2:64:0f:bf:4a:fc:4d:4a:36:18:65:18:0f:9e:94:8b:49:
         8c:1a:f8:1c:03:1d:4f:ca:fd:42:33:ce:70:6b:de:4f:de:aa:
         50:d4:6a:6b:b8:02:c6:87:9f:3d:ec:f4:1f:ca:f3:cc:70:41:
         f0:b2:e9:2a:85:0d:bb:8b:dc:d0:9e:49:66:25:9b:dd:df:fc:
         06:18:88:4b:96:ef:da:bf:e8:e7:e7:83:0a:bd:bc:84:7b:67:
         80:a4:71:68:94:1b:7b:82:c3:ce:9e:73:20:6b:06:94:d0:e4:
         c7:16:7d:f0:45:33:c2:d1:4e:7a:37:8c:3e:cb:43:0f:5c:35:
         fa:2f:96:f7:85:ea:f5:5f:68:b2:9c:77:d4:3f:fc:21:8b:6e:
         2d:9a:d5:9a:15:c3:44:b9:b9:91:c1:8b:53:c7:f4:d3:d6:5b:
         8f:c3:bd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----