Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EQHYQV614_4M5mzf2MavRRuTsZ0.roa
File:                     EQHYQV614_4M5mzf2MavRRuTsZ0.roa (raw, json)
Hash identifier:          56StksnX99iAO2Bt9Aqc6EWqUnFUBZ8XxcNjA3U/M+I=
Subject key identifier:   11:01:D8:41:5E:B5:E3:FE:0C:E6:6C:DF:D8:C6:AF:45:1B:93:B1:9D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0183A868F3E65725D43ECDD313B0447DBAAF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EQHYQV614_4M5mzf2MavRRuTsZ0.roa
Signing time:             Wed 05 Oct 2022 13:49:53 +0000
ROA not before:           Wed 05 Oct 2022 13:49:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213244
IP address blocks:        2a0e:b107:d91::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:a8:68:f3:e6:57:25:d4:3e:cd:d3:13:b0:44:7d:ba:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct  5 13:49:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1101d8415eb5e3fe0ce66cdfd8c6af451b93b19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7a:17:05:20:e8:6d:c1:ce:fd:da:ca:dd:ef:
                    3a:7b:6e:cb:1a:0d:2f:ce:25:08:37:43:9e:1d:a9:
                    cf:2c:a7:aa:9d:f6:c1:a5:3e:6a:1c:70:a5:12:fb:
                    3c:73:0c:b9:bb:b9:4e:d2:f3:cc:7c:a1:53:fc:4b:
                    95:c8:cb:0d:5d:5c:d6:11:f6:00:f0:20:a9:30:82:
                    59:d0:10:28:ab:a3:10:8c:63:8b:35:30:1e:99:36:
                    7a:3a:6e:fc:b1:60:09:81:51:08:e2:89:24:bb:29:
                    01:4f:69:3c:67:bb:ee:95:58:44:42:31:60:03:e5:
                    14:c2:df:20:69:9e:1e:e9:cf:24:8e:38:7d:eb:a1:
                    43:d3:f6:5f:18:8b:b2:7f:40:48:59:de:87:26:84:
                    c3:51:c4:f9:37:32:46:67:b2:73:6f:57:a2:d3:f2:
                    df:b4:f0:af:b0:d0:9e:c6:7d:55:77:74:fc:1d:5e:
                    86:2a:e1:9e:f4:47:c6:b1:10:83:34:d1:21:df:d4:
                    db:63:b7:e7:ee:ba:7f:cc:ad:83:0b:9b:fd:5b:f6:
                    62:83:d1:13:30:04:eb:24:74:9d:26:db:ed:2f:cb:
                    ac:62:77:49:0d:6b:ca:4e:9f:60:05:36:79:3c:2b:
                    c1:b2:66:e6:34:62:01:80:1e:fb:a5:bd:15:43:d2:
                    6f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:01:D8:41:5E:B5:E3:FE:0C:E6:6C:DF:D8:C6:AF:45:1B:93:B1:9D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EQHYQV614_4M5mzf2MavRRuTsZ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:d91::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:ed:86:76:14:eb:2d:83:f6:d8:a9:63:64:70:c2:73:d5:0e:
         36:01:1f:d4:31:88:8b:f0:fe:ff:71:f7:d7:70:38:3e:a5:97:
         77:13:ee:6c:40:62:e4:a3:93:02:4e:9c:08:1b:45:af:3e:eb:
         73:40:24:c6:7a:c2:0a:b4:d6:45:b6:70:a1:66:88:df:c8:e3:
         11:21:c5:c6:9c:a0:0d:da:66:cf:85:2b:55:68:cd:f3:e5:db:
         7a:10:27:5d:17:7a:a4:c3:1a:f0:88:e0:d4:25:89:db:83:cd:
         37:fb:18:1c:f1:88:09:aa:c2:81:f0:92:62:00:22:74:63:e2:
         98:09:6a:c2:6d:78:7f:8e:5f:e6:82:63:69:55:32:99:42:f8:
         cc:48:f9:b8:8c:b0:e3:07:22:d0:46:c7:e7:a5:6c:ec:f3:d0:
         e3:eb:bb:97:63:6f:7a:8a:65:0d:1f:27:ce:62:12:c2:73:02:
         65:7f:1f:e4:06:17:44:02:a9:58:64:3e:0b:07:d0:41:07:f5:
         67:00:2d:4a:45:dd:23:83:be:0b:ed:40:ef:e9:a4:b3:e8:4a:
         3d:5b:9c:84:19:9c:0c:bc:4c:c0:ae:f8:a0:56:d6:c9:a2:e0:
         02:d8:13:70:25:0a:30:e9:67:49:81:05:f5:c6:54:71:61:5a:
         8e:ae:61:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----