Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Gst5_Mswty6gG2bIVtKsgEjdRgc.roa
File:                     Gst5_Mswty6gG2bIVtKsgEjdRgc.roa (raw, json)
Hash identifier:          e1knU2aZbSLwlt46N0WgukvYzH+zXnDZYqKsGoaEAFA=
Subject key identifier:   1A:CB:79:FC:CB:30:B7:2E:A0:1B:66:C8:56:D2:AC:80:48:DD:46:07
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0182B65C92A960B2463858F73A3514F5B0A1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Gst5_Mswty6gG2bIVtKsgEjdRgc.roa
Signing time:             Fri 19 Aug 2022 13:48:16 +0000
ROA not before:           Fri 19 Aug 2022 13:48:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203843
IP address blocks:        2a0e:b107:1b92::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b6:5c:92:a9:60:b2:46:38:58:f7:3a:35:14:f5:b0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 19 13:48:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1acb79fccb30b72ea01b66c856d2ac8048dd4607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:9f:7a:4a:7c:3f:cb:5c:ce:aa:12:0c:3d:
                    43:91:c2:b3:40:a7:97:ff:a6:83:01:0e:b6:14:6e:
                    7a:6f:62:c4:2b:e6:de:a5:e4:25:e8:75:2e:2b:4b:
                    09:d0:13:32:9a:1a:e0:7c:25:2c:a9:1c:71:bb:8d:
                    9d:aa:68:be:76:30:a4:38:a6:79:af:b6:02:fd:d5:
                    8f:a1:06:ac:60:80:2a:a4:46:a1:25:0d:63:d6:4f:
                    22:88:e7:af:70:f6:bd:43:2f:03:b8:0a:ca:97:a6:
                    61:d4:1e:28:0a:d1:b6:b0:45:f8:69:43:cb:2e:85:
                    59:a0:25:97:c7:d7:ac:c2:6d:23:d1:23:47:d0:3e:
                    ec:56:99:3a:14:72:c6:5f:83:42:35:41:a3:ad:5d:
                    48:91:99:24:98:99:85:1c:64:85:8c:c2:e4:b4:22:
                    74:e8:5e:e2:ae:17:5d:7d:f3:8a:7c:d9:07:fb:87:
                    e8:ed:a8:b9:9c:80:ae:f7:58:22:0c:35:bf:2f:5b:
                    15:fc:b3:67:4d:e6:19:6a:a7:22:79:54:7b:a5:71:
                    5a:5d:29:58:f3:39:92:64:17:12:7f:e3:fd:ea:8b:
                    d5:17:f6:95:a6:50:92:c2:4c:36:be:f0:75:15:81:
                    ff:3f:e6:85:67:43:f0:83:37:53:95:28:df:d2:df:
                    84:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CB:79:FC:CB:30:B7:2E:A0:1B:66:C8:56:D2:AC:80:48:DD:46:07
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Gst5_Mswty6gG2bIVtKsgEjdRgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1b92::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:b1:c8:14:d2:59:bc:1b:96:f6:fe:ba:83:7c:e0:ac:08:e5:
         8a:0e:ca:55:f5:e3:d2:5c:8c:d4:f5:e5:90:0c:bf:8e:1b:4a:
         f5:74:49:ce:6e:54:6e:95:a5:cd:90:f5:ee:16:f6:27:a5:a4:
         75:15:e3:80:23:1a:41:92:9f:cb:c5:d9:f5:59:24:fb:02:a0:
         93:f6:8a:99:3f:94:11:a4:f7:06:67:be:0c:7b:63:f4:85:ef:
         3a:ac:56:72:19:15:99:6f:5e:9a:b6:fa:7b:82:5f:40:50:04:
         04:e8:30:f3:d4:63:33:ab:c4:05:e5:54:47:c7:53:b8:0d:5e:
         56:c3:5b:92:02:4f:c0:d4:a1:ff:d2:25:f1:2c:1e:ec:64:42:
         c4:32:cd:1f:b9:e4:77:3b:8c:fa:17:80:39:1a:a9:8b:7b:7d:
         fe:42:a0:1f:55:ec:f9:82:f9:5e:6d:6c:92:3b:b6:c3:9b:c6:
         ed:60:55:9c:2b:a3:55:83:c7:2e:fd:38:31:3e:d4:7c:f0:09:
         8e:36:c7:97:cb:01:f2:7b:c1:8b:05:bb:01:4e:6f:fd:3a:1f:
         71:99:16:c4:bb:3d:6c:11:66:09:2b:1b:a4:13:0a:91:8a:40:
         18:04:26:c2:b7:0e:8e:9f:78:a0:c9:59:af:0e:53:8e:a8:80:
         17:70:0b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----