Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HqPV0HAhmvy9924_Rp5VTs2NoV0.roa
File:                     HqPV0HAhmvy9924_Rp5VTs2NoV0.roa (raw, json)
Hash identifier:          PyLR7/FYszoJ4MgwUnZlV0q2Yv8in5NTJPNTh+1g9+U=
Subject key identifier:   1E:A3:D5:D0:70:21:9A:FC:BD:F7:6E:3F:46:9E:55:4E:CD:8D:A1:5D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       12784921
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HqPV0HAhmvy9924_Rp5VTs2NoV0.roa
Signing time:             Mon 28 Feb 2022 01:43:24 +0000
ROA not before:           Mon 28 Feb 2022 01:43:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211275
IP address blocks:        2a0e:97c0:410::/48 maxlen: 48
                          2a0e:97c0:411::/48 maxlen: 48
                          2a0e:97c0:412::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309872929 (0x12784921)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 28 01:43:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1ea3d5d070219afcbdf76e3f469e554ecd8da15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:97:34:76:84:1c:fb:fb:83:bc:6f:c4:bd:
                    0b:c0:aa:02:43:2e:ca:2d:e2:47:7a:f6:cc:f5:79:
                    40:2b:1c:a0:d8:66:ce:88:b4:03:75:41:6c:47:dc:
                    eb:16:46:37:e8:b4:cf:1a:4a:1d:b8:ec:f4:7e:75:
                    cc:40:88:9c:3b:31:6b:df:bb:74:71:d0:7c:61:ac:
                    72:50:24:9e:e3:7a:97:31:70:dc:eb:9e:61:a1:47:
                    e4:b2:8c:b3:9d:25:62:2f:9d:5f:a7:3b:13:c7:b0:
                    7b:72:d1:14:ea:12:d8:64:2b:1b:a7:5c:f8:d5:7f:
                    0a:15:94:92:84:28:91:84:02:66:ba:eb:39:c1:f5:
                    9d:c9:37:a3:cf:82:3a:f0:07:21:df:da:59:2b:39:
                    fe:e4:0b:46:c4:b7:86:a1:f1:84:af:1a:ec:44:76:
                    06:0a:8c:41:1f:68:b4:7b:e9:c3:8a:32:c9:15:bc:
                    8d:40:01:78:c2:1d:2f:03:76:2a:9e:7b:00:40:b7:
                    ac:ce:40:b7:12:bd:9f:76:b0:c4:fe:90:e4:2c:fa:
                    df:96:18:23:fa:a8:43:17:9f:15:68:34:a6:31:87:
                    53:79:98:8a:ff:ad:1e:2e:0e:e4:36:58:9c:a7:d9:
                    8c:44:40:07:ed:c5:57:c9:fb:d2:33:19:9f:c1:a7:
                    5b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A3:D5:D0:70:21:9A:FC:BD:F7:6E:3F:46:9E:55:4E:CD:8D:A1:5D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HqPV0HAhmvy9924_Rp5VTs2NoV0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:410::-2a0e:97c0:412:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         16:ba:75:b7:57:e6:d4:66:d0:6f:96:48:7e:b2:c3:13:d1:24:
         15:2d:89:fe:c2:ef:b7:d6:10:6e:eb:b1:a2:6b:fb:cd:be:14:
         e1:44:1a:c8:c7:a2:bd:83:6d:dc:cc:58:95:de:78:4e:c3:c8:
         55:73:f2:61:8f:3c:6f:33:14:80:22:29:fc:51:cb:0f:77:33:
         ea:31:e8:ce:26:55:af:18:a4:dd:bb:e7:89:6e:12:0a:a9:66:
         10:b3:a1:bc:b8:c2:a8:f1:38:04:07:97:92:b2:11:cc:09:62:
         0d:af:0b:12:e4:b9:dd:05:50:4e:dd:e9:02:cc:be:d1:18:1c:
         46:18:e1:45:15:92:e9:e9:d4:3b:dd:e3:dc:70:1d:53:55:84:
         2a:08:9e:3c:fb:98:37:a0:1b:1c:03:11:87:a5:3a:c4:8d:ab:
         f0:99:c4:0a:05:b5:eb:95:a3:7f:90:26:43:5a:8a:3a:c2:18:
         a6:e9:0e:e5:ad:ef:98:55:ac:b8:3c:4b:f0:93:8d:c8:9c:b5:
         36:06:2d:f9:1c:03:e4:64:79:96:c0:c0:b7:19:17:56:75:81:
         bd:b7:aa:73:7b:d7:42:30:74:d4:bb:7f:c8:ec:e7:f9:55:b6:
         9e:87:79:fe:47:0b:ea:f3:d0:3c:ce:79:6b:b0:6c:83:5b:f3:
         83:34:e9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----