Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GkPQYPg8pXFnh81n7JCYML36ihs.roa
File:                     GkPQYPg8pXFnh81n7JCYML36ihs.roa (raw, json)
Hash identifier:          mFt4UeoMSwCbXtsb9LDktgWJ/f/WWj6IjU4hUH/xdyc=
Subject key identifier:   1A:43:D0:60:F8:3C:A5:71:67:87:CD:67:EC:90:98:30:BD:FA:8A:1B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0184626D585775E228DCB9BC76396068B6B0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GkPQYPg8pXFnh81n7JCYML36ihs.roa
Signing time:             Thu 10 Nov 2022 16:44:03 +0000
ROA not before:           Thu 10 Nov 2022 16:44:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202000
IP address blocks:        2a0e:97c0:c50::/44 maxlen: 48
                          2a0e:b107:1ca0::/44 maxlen: 48
                          2a0e:b107:1c20::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:62:6d:58:57:75:e2:28:dc:b9:bc:76:39:60:68:b6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 10 16:44:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1a43d060f83ca5716787cd67ec909830bdfa8a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:84:0c:a3:14:07:08:77:c1:e4:f1:b4:5a:
                    20:c2:d6:c7:85:01:a8:b7:ea:37:09:8f:52:48:f9:
                    c2:07:fe:51:bf:7b:30:76:1c:b9:95:63:44:60:21:
                    d8:42:5f:40:de:2b:4d:0e:1b:4b:8d:38:e6:67:9f:
                    10:3a:03:8e:b3:e2:16:4f:20:09:69:ee:06:0a:be:
                    ec:95:83:c7:7c:50:f4:35:43:e2:7f:cf:06:72:95:
                    7e:6c:13:d8:e6:a8:f6:f7:1b:f7:3b:27:2f:75:5f:
                    ab:ae:bf:08:b5:de:e6:1b:80:64:9a:55:8b:35:da:
                    04:ca:82:7f:bb:e4:0f:77:1a:e3:56:ba:e1:09:30:
                    e1:d7:21:3d:4e:40:1d:a7:ac:1d:e5:ac:43:67:96:
                    e3:92:98:66:02:64:8b:1c:be:49:fb:d8:39:71:e3:
                    f4:f3:07:cf:82:95:a5:2c:73:12:73:1d:0e:39:46:
                    85:71:c4:c8:3e:72:a0:0a:98:8d:a0:7b:29:f5:ce:
                    b0:cb:4d:1f:42:e9:20:75:f5:1c:8d:95:5a:c4:e4:
                    c4:47:eb:6e:aa:c8:24:d2:c0:ae:96:ac:44:88:5e:
                    5d:08:c5:ec:27:c0:61:7b:9d:6c:3e:cb:0f:fb:d3:
                    70:21:b5:a7:42:be:13:98:92:e8:d1:e6:b6:b3:dd:
                    76:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:43:D0:60:F8:3C:A5:71:67:87:CD:67:EC:90:98:30:BD:FA:8A:1B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GkPQYPg8pXFnh81n7JCYML36ihs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:c50::/44
                  2a0e:b107:1c20::/44
                  2a0e:b107:1ca0::/44

    Signature Algorithm: sha256WithRSAEncryption
         54:dc:33:3f:61:5d:99:1f:d4:d7:3b:87:81:b1:ba:8e:1e:5d:
         6d:2b:c2:85:5d:93:4c:ef:6f:e5:25:70:1a:b6:10:40:79:cf:
         cc:05:d4:a7:e2:75:87:8a:83:eb:44:16:61:d8:36:a8:8e:41:
         87:95:40:dd:5a:74:f0:8e:91:fd:74:6a:4d:61:4f:24:f3:4c:
         47:67:19:96:8f:9d:48:8c:f0:1f:03:70:a9:92:5d:27:b6:61:
         8d:c3:2c:59:0a:00:83:c7:f2:1f:b2:1d:6c:e1:d0:8c:1e:31:
         33:7a:67:0b:80:9f:4f:49:92:5f:f8:97:90:32:26:39:8d:05:
         f4:b1:85:0d:a9:ab:ed:90:a8:0d:29:fa:d0:4d:5e:a0:37:e4:
         59:f2:9b:5e:a0:3f:55:27:9c:70:22:30:88:f9:d3:f7:fb:fb:
         76:76:39:8c:20:31:d8:de:9a:6d:75:2f:83:fe:5a:70:50:03:
         7d:72:fc:35:60:0f:f2:31:26:99:2f:7d:e6:17:2a:75:19:a8:
         89:3f:51:8c:2d:5f:b8:62:b6:f9:f0:17:28:08:a9:ed:f6:db:
         cf:a9:14:8a:83:da:a1:9c:25:c5:fd:bb:b3:e5:f1:69:ef:28:
         54:00:8b:4a:18:f4:79:56:d8:b9:56:32:95:1b:66:88:8e:f7:
         e7:22:9b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----