Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GgAC4EH5NByh4R_Mu_dA1iSn3Hg.roa
File:                     GgAC4EH5NByh4R_Mu_dA1iSn3Hg.roa (raw, json)
Hash identifier:          7f4BVEZILAGGQzFxZfSeKrxBbRAAnTxov2qnw4hts9g=
Subject key identifier:   1A:00:02:E0:41:F9:34:1C:A1:E1:1F:CC:BB:F7:40:D6:24:A7:DC:78
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       14B5EB2F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GgAC4EH5NByh4R_Mu_dA1iSn3Hg.roa
Signing time:             Tue 17 May 2022 14:44:30 +0000
ROA not before:           Tue 17 May 2022 14:44:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207941
IP address blocks:        2a10:cc44:160::/44 maxlen: 48
                          2a10:cc40:170::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347466543 (0x14b5eb2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May 17 14:44:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1a0002e041f9341ca1e11fccbbf740d624a7dc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c8:34:58:ee:48:6b:0f:e2:67:74:82:5b:06:
                    f7:74:f4:52:f1:43:65:ce:82:91:56:4f:70:2b:d7:
                    be:d9:34:52:56:63:14:95:96:eb:b3:fd:c7:e0:b4:
                    ab:d8:55:96:e2:ba:e6:94:fc:3c:cb:57:73:5b:d7:
                    8d:ab:eb:d8:49:36:31:11:c4:38:8a:f7:41:d4:30:
                    6c:3e:8d:19:e4:08:a6:7d:de:39:d5:46:73:5f:29:
                    ec:bc:8d:4a:c2:47:de:ea:c6:60:68:51:b7:e8:9d:
                    75:fe:bf:1f:b7:eb:e0:f4:68:fe:18:c0:52:4a:d1:
                    66:7e:d6:f2:c9:af:91:97:b6:29:29:8c:df:5c:b6:
                    d7:40:78:39:63:92:97:f9:a2:7b:15:28:5d:82:9b:
                    8c:a4:bb:f1:56:c9:08:5e:e5:de:f2:64:3f:d1:ab:
                    c0:fa:b9:83:2c:51:0e:24:f3:b0:21:ce:14:d6:3d:
                    2d:df:ee:58:5a:66:4d:15:d1:b0:06:6d:55:b6:a1:
                    ab:64:68:6d:df:ce:3e:6c:60:fa:a7:4b:0a:68:9e:
                    c3:25:19:b5:cd:fd:7e:28:32:be:03:57:7d:79:c4:
                    58:1b:ef:a2:fb:2d:93:7c:2a:f1:e2:cd:ba:2f:48:
                    34:7c:af:e9:0e:0e:38:f6:f9:46:08:16:d9:19:b8:
                    88:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:00:02:E0:41:F9:34:1C:A1:E1:1F:CC:BB:F7:40:D6:24:A7:DC:78
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GgAC4EH5NByh4R_Mu_dA1iSn3Hg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc40:170::/44
                  2a10:cc44:160::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:f0:4f:c2:e8:bb:14:61:f8:d5:7d:c7:87:3a:dc:d5:98:33:
         0a:84:32:dd:a6:46:44:10:68:34:36:58:cc:ba:9f:56:8a:75:
         97:87:d5:8e:8c:1d:e6:27:31:95:ae:57:22:5c:34:85:86:99:
         62:63:0c:14:57:47:dc:22:14:14:4c:ef:fb:83:4b:37:81:3c:
         b0:fe:0e:b4:37:3b:bc:e5:1a:af:67:e3:0e:e7:00:2c:ce:67:
         3a:a4:8b:b4:5a:50:bc:c5:8a:79:cd:84:26:ce:2f:5b:70:2c:
         34:ea:6d:b4:e8:82:74:16:41:a2:36:90:dc:47:87:ed:2c:a1:
         23:f5:95:14:a1:7a:c6:49:2e:d3:e9:d1:4d:7e:d6:82:be:94:
         6c:82:74:f7:6a:44:26:7d:6b:64:4b:19:4c:e6:21:6b:a0:58:
         dd:7c:2d:c2:de:06:80:06:29:c9:6d:cc:bb:14:55:8b:56:0f:
         fb:55:5d:1c:38:6a:cd:ca:47:9d:a4:a1:77:25:99:95:3b:45:
         fd:04:f9:91:77:9a:c3:42:d2:82:ac:25:0a:46:cf:2c:d9:cf:
         6f:21:8c:04:f9:3b:eb:b7:bc:b1:0a:76:cb:d7:0a:09:7c:c3:
         24:aa:dc:50:64:0b:60:c1:49:fe:20:cb:9f:20:94:e0:4d:e8:
         5a:ea:9d:df
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEFLXrLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDUx
NzE0NDQzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWEwMDAyZTA0MWY5
MzQxY2ExZTExZmNjYmJmNzQwZDYyNGE3ZGM3ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOXINFjuSGsP4md0glsG93T0UvFDZc6CkVZPcCvXvtk0UlZj
FJWW67P9x+C0q9hVluK65pT8PMtXc1vXjavr2Ek2MRHEOIr3QdQwbD6NGeQIpn3e
OdVGc18p7LyNSsJH3urGYGhRt+iddf6/H7fr4PRo/hjAUkrRZn7W8smvkZe2KSmM
31y210B4OWOSl/miexUoXYKbjKS78VbJCF7l3vJkP9GrwPq5gyxRDiTzsCHOFNY9
Ld/uWFpmTRXRsAZtVbahq2Robd/OPmxg+qdLCmiewyUZtc39figyvgNXfXnEWBvv
ovstk3wq8eLNui9INHyv6Q4OOPb5RggW2Rm4iGECAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQaAALgQfk0HKHhH8y790DWJKfceDAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L0dnQUM0RUg1TkJ5aDRSX011X2RBMWlTbjNIZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHBCoQzEABcAMHBCoQzEQBYDANBgkq
hkiG9w0BAQsFAAOCAQEAgvBPwui7FGH41X3Hhzrc1ZgzCoQy3aZGRBBoNDZYzLqf
Vop1l4fVjowd5icxla5XIlw0hYaZYmMMFFdH3CIUFEzv+4NLN4E8sP4OtDc7vOUa
r2fjDucALM5nOqSLtFpQvMWKec2EJs4vW3AsNOpttOiCdBZBojaQ3EeH7SyhI/WV
FKF6xkku0+nRTX7Wgr6UbIJ092pEJn1rZEsZTOYha6BY3Xwtwt4GgAYpyW3MuxRV
i1YP+1VdHDhqzcpHnaShdyWZlTtF/QT5kXeaw0LSgqwlCkbPLNnPbyGMBPk767e8
sQp2y9cKCXzDJKrcUGQLYMFJ/iDLnyCU4E3oWuqd3w==
-----END CERTIFICATE-----