Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EdASgmmGPq2i3-2TxiGZ_NJakjc.roa
File:                     EdASgmmGPq2i3-2TxiGZ_NJakjc.roa (raw, json)
Hash identifier:          hme56WC1WDU81vW8rXiGDdBMLWesO2ZQm9yBPlXzh4g=
Subject key identifier:   11:D0:12:82:69:86:3E:AD:A2:DF:ED:93:C6:21:99:FC:D2:5A:92:37
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0183DBFE42CBFE64B6AC785186C17A6A9E94
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EdASgmmGPq2i3-2TxiGZ_NJakjc.roa
Signing time:             Sat 15 Oct 2022 14:13:36 +0000
ROA not before:           Sat 15 Oct 2022 14:13:36 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202256
IP address blocks:        2a0e:97c6:4000::/34 maxlen: 48
                          2a10:cc42:1000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:db:fe:42:cb:fe:64:b6:ac:78:51:86:c1:7a:6a:9e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 15 14:13:36 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11d0128269863eada2dfed93c62199fcd25a9237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bc:44:31:cf:f5:de:a9:b3:0f:60:24:a6:37:
                    54:bb:57:c2:b9:5e:87:77:b6:ca:ae:81:5b:0d:fe:
                    b2:95:2b:62:1b:b3:b0:0d:8d:ed:84:32:cc:fb:b6:
                    42:95:ab:e4:52:3f:5e:c2:ad:0a:21:51:d6:02:3d:
                    89:36:2a:dd:01:43:16:78:f7:c0:39:6c:2c:7e:d7:
                    90:7a:04:a4:9c:66:37:59:ee:03:09:3f:ce:e8:bf:
                    4c:4b:34:b7:19:b8:ad:96:e5:ba:fe:0f:69:0b:a6:
                    f1:f4:2e:c6:56:cf:9c:11:08:8a:db:e2:ab:da:b8:
                    ed:f4:fa:b0:bd:75:54:24:be:8d:2c:80:67:48:f3:
                    d3:62:fe:10:72:bc:ae:34:4d:3f:ef:59:2c:83:c8:
                    e6:7b:42:e2:83:fc:f5:05:58:32:98:f4:33:3e:43:
                    4c:44:80:a7:72:ae:41:81:a9:c5:d8:8c:42:6b:aa:
                    cd:fc:32:68:1f:95:8d:d5:d6:87:de:e7:50:e6:cd:
                    44:3c:53:44:a0:2b:09:b7:b7:5d:f3:4e:26:72:7a:
                    39:85:8c:dc:8f:c3:75:78:dc:5f:fb:78:cf:2d:b0:
                    20:12:47:59:b7:05:62:94:89:54:51:70:b6:15:dc:
                    92:d8:cb:3c:0a:92:5d:b6:20:2b:22:21:97:02:88:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D0:12:82:69:86:3E:AD:A2:DF:ED:93:C6:21:99:FC:D2:5A:92:37
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/EdASgmmGPq2i3-2TxiGZ_NJakjc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c6:4000::/34
                  2a10:cc42:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0e:07:e0:c2:01:d2:46:92:12:09:40:42:d4:38:9c:d3:3f:a8:
         24:8a:44:97:c8:4f:0d:bb:49:b9:c3:5b:14:97:3d:db:c6:2c:
         40:32:4d:6f:c7:92:c4:63:ab:82:dd:4b:bf:90:28:21:38:fd:
         51:2d:f1:4d:ab:75:f3:a2:67:13:f7:bb:12:37:ff:24:d8:d1:
         fe:88:a4:79:f6:16:9c:f4:56:9c:a9:bc:6e:5a:32:ae:50:b9:
         3e:6b:98:d8:f1:13:3b:ad:71:0b:19:40:c0:2e:f1:e2:81:46:
         89:12:f6:66:48:87:1b:39:29:95:51:c7:1a:c5:3f:95:c9:05:
         3f:eb:f6:47:d4:4b:89:fc:09:b8:48:9e:b6:7d:cf:e2:48:cd:
         90:3c:96:b3:6a:c1:72:10:4d:31:40:f5:7b:da:1d:c7:e7:b7:
         ea:d1:7f:cd:ce:e7:39:66:e2:90:c5:9b:b6:b4:2f:99:1b:cc:
         aa:2c:c4:c3:e8:33:f1:02:97:7b:ce:21:24:5a:2c:2f:31:34:
         c0:18:59:7b:b3:59:0b:8b:88:10:f4:23:07:a8:08:0c:43:8a:
         58:4e:fc:98:5c:94:bc:f6:1f:3c:28:bc:f7:87:67:cc:85:ba:
         75:2d:e5:6a:5e:ab:91:10:09:31:c0:0c:48:e1:44:53:cc:27:
         a3:bf:05:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----