Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HxdJ6VrrK1TUdNP4-x34nPcWv6c.roa
File:                     HxdJ6VrrK1TUdNP4-x34nPcWv6c.roa (raw, json)
Hash identifier:          kVKiW0G9fnrkt8DMmdicRHaHPDi3wB/dcRM7vY42GOo=
Subject key identifier:   1F:17:49:E9:5A:EB:2B:54:D4:74:D3:F8:FB:1D:F8:9C:F7:16:BF:A7
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       126404D0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HxdJ6VrrK1TUdNP4-x34nPcWv6c.roa
Signing time:             Thu 24 Feb 2022 15:58:32 +0000
ROA not before:           Thu 24 Feb 2022 15:58:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210836
IP address blocks:        2a0e:97c0:750::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308544720 (0x126404d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 24 15:58:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1f1749e95aeb2b54d474d3f8fb1df89cf716bfa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:09:ec:be:2e:aa:15:42:e7:84:6d:fd:72:
                    a0:87:9f:29:a1:6a:8e:eb:0e:a6:7a:6e:45:4c:32:
                    c2:48:15:3f:22:f9:0a:56:9c:59:ee:07:81:97:3c:
                    83:7a:82:ab:3d:fb:c8:a5:ce:97:97:cd:b2:10:88:
                    ad:99:07:c7:5d:2d:0b:e1:1a:27:b5:17:50:1b:48:
                    60:c5:96:05:4b:22:94:25:eb:c0:6f:3d:d9:58:a1:
                    a6:c0:65:62:36:7b:ca:d6:3b:5d:fa:8a:86:98:50:
                    1a:ef:86:13:56:d9:3d:75:11:89:b6:e5:bf:b4:f0:
                    13:27:fa:cc:0b:5b:86:30:fc:aa:a5:e1:b4:38:9f:
                    23:ca:27:2c:23:09:3f:d6:24:9e:7b:8b:f3:da:0c:
                    2c:88:6f:94:c5:44:c4:7e:fd:0b:68:04:f1:02:44:
                    77:8d:f1:4a:4a:e6:85:58:51:27:77:5c:ff:b6:a5:
                    4d:1a:21:3c:83:55:af:14:3d:07:4b:90:ca:10:e7:
                    a0:b8:eb:bd:0e:98:b5:bf:2f:be:c7:37:52:98:44:
                    71:d7:67:20:a9:20:8a:6a:f2:da:b7:9d:ec:29:54:
                    c5:cd:8f:60:49:7f:f5:04:06:8b:8d:53:5e:d7:2f:
                    15:6c:4b:98:cf:63:a4:5c:58:9a:c5:42:34:66:66:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:17:49:E9:5A:EB:2B:54:D4:74:D3:F8:FB:1D:F8:9C:F7:16:BF:A7
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HxdJ6VrrK1TUdNP4-x34nPcWv6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:750::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:10:10:e2:71:9f:fe:14:b3:fc:a0:89:81:f9:cb:cc:df:a3:
         93:ea:7e:7e:fb:8a:42:df:0d:12:0b:d8:0e:70:66:c7:a9:2a:
         f1:f2:a3:9e:ea:ba:70:4d:52:39:33:54:8b:4f:7f:57:bd:ef:
         93:37:3c:bc:7d:b3:76:f6:2b:1d:fb:96:6b:e0:2a:a3:97:aa:
         f0:d7:28:e7:d1:64:76:64:5e:c1:20:18:7d:4a:cb:9c:85:b3:
         a2:9b:e5:3e:f9:23:0c:0f:6e:bd:3e:3f:0f:15:41:2b:e4:45:
         87:7d:f4:63:47:35:13:62:ca:dc:4a:99:bc:8b:d0:ce:8a:6a:
         47:0e:27:ef:33:92:e0:f8:92:6f:e5:ef:dc:c5:0d:5d:ca:44:
         83:34:d5:b7:eb:da:e5:72:ae:64:1f:10:d4:17:4e:05:74:9c:
         54:a5:c1:bf:91:43:b0:4d:b3:98:21:78:cd:54:ad:d3:07:68:
         fa:f9:d9:cb:b3:b5:0a:77:f9:bb:d5:92:16:50:29:e3:27:6a:
         da:47:14:52:cb:e0:a7:a6:b1:bb:16:35:b6:50:2e:6f:ea:ce:
         29:d5:1a:7e:96:8a:f2:30:d3:71:d4:cf:aa:20:70:36:f6:f8:
         cd:c7:ac:b4:9d:45:14:c3:7b:67:92:ae:17:cc:f9:48:47:cc:
         40:ca:44:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----