Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DcVpRK3wkzag1XRmRJor9TYB5h4.roa
File:                     DcVpRK3wkzag1XRmRJor9TYB5h4.roa (raw, json)
Hash identifier:          qSJUgu78G1k2DwvNAgSBfFgLPKZjlApnZmmtPT2hBtA=
Subject key identifier:   0D:C5:69:44:AD:F0:93:36:A0:D5:74:66:44:9A:2B:F5:36:01:E6:1E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018265FB4B472671D5E1F63E77AA6FA3A07D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DcVpRK3wkzag1XRmRJor9TYB5h4.roa
Signing time:             Wed 03 Aug 2022 23:12:23 +0000
ROA not before:           Wed 03 Aug 2022 23:12:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203521
IP address blocks:        2a0e:b107:1b80::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:65:fb:4b:47:26:71:d5:e1:f6:3e:77:aa:6f:a3:a0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  3 23:12:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0dc56944adf09336a0d57466449a2bf53601e61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:c5:c0:1c:56:57:1e:f5:ad:0a:64:1e:f8:
                    ef:6d:8d:f1:e6:b1:f6:2b:29:e3:ad:41:67:83:dd:
                    94:9a:c1:bc:c8:cc:2b:c7:ed:c8:67:ac:f3:8e:ea:
                    7b:a3:b2:75:28:9b:62:f3:d3:34:62:51:48:4e:09:
                    34:54:a1:6f:5e:a0:28:b2:db:be:81:1b:62:7d:6f:
                    ec:f5:ff:13:39:fb:51:c0:bc:d7:28:e7:dc:7f:04:
                    64:2f:78:6b:c6:4e:d9:e2:73:8e:4f:95:cf:b9:1b:
                    70:c5:15:08:8c:a6:3d:d1:49:b2:c1:09:2f:0c:94:
                    27:a7:b0:17:c1:5f:9c:1a:d7:bb:3a:c1:68:75:5d:
                    99:61:2e:c6:bd:e2:78:5a:d1:10:00:ff:38:8e:db:
                    c6:4d:55:57:92:93:53:4f:68:57:3a:99:56:a8:56:
                    e7:6d:c3:b5:a7:38:59:e4:db:a0:72:ab:89:ae:68:
                    73:35:8b:ed:76:4e:b8:46:20:99:2f:68:8d:57:49:
                    30:c8:07:4b:43:d7:9d:4d:9e:2b:28:77:c4:44:27:
                    b1:00:31:f8:24:4f:f4:ac:98:3a:da:42:09:4e:03:
                    1a:37:ec:5a:9c:19:fe:7d:dc:ad:0d:fb:3c:60:ed:
                    a8:be:5a:89:9a:92:2b:f3:3c:2e:c1:10:26:e2:70:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C5:69:44:AD:F0:93:36:A0:D5:74:66:44:9A:2B:F5:36:01:E6:1E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/DcVpRK3wkzag1XRmRJor9TYB5h4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1b80::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:fc:55:5f:c2:05:37:28:9e:6a:c6:3a:76:30:a0:a2:d4:
         ac:e3:4a:6c:4b:38:28:92:d5:92:37:29:2e:4c:40:9a:1f:e3:
         2c:e7:81:b7:df:56:6e:5b:e5:3f:9d:a6:d6:95:e4:a2:d3:85:
         36:05:94:3c:dd:bb:ee:b3:b9:0a:3f:c9:a3:fb:15:64:b8:09:
         8b:43:c9:ac:6b:f6:58:aa:59:b5:02:83:10:7e:55:df:d8:48:
         40:7d:6e:b9:dc:27:e2:4c:c7:97:0f:3f:0b:fa:60:c6:9d:73:
         dd:0d:d5:ed:17:85:9a:3d:36:e1:94:7d:3c:30:43:20:6d:2d:
         96:3c:11:05:dd:40:b7:5d:39:ab:24:b1:cd:97:f6:f0:68:df:
         cf:b5:4b:aa:a5:00:f9:14:c3:5b:0d:e9:25:89:2b:7d:6d:41:
         72:0f:3f:b4:60:80:d8:19:97:71:fe:83:a4:b5:16:76:bf:fb:
         96:00:fe:73:d1:ad:47:30:b0:4c:b1:33:be:e4:0d:a6:61:45:
         43:94:1d:8b:4b:02:d6:86:b9:1e:91:1b:6a:ac:ef:20:53:52:
         54:cb:b5:1a:0e:9d:54:60:9c:9a:57:1c:2a:82:d3:0f:9f:7c:
         78:f0:42:c8:84:fe:8d:b2:9d:ea:c8:61:88:81:97:7e:90:c4:
         7d:31:3f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----