Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Iz1PidvIAjQXd_ifxgtJQRpQXvA.roa
File:                     Iz1PidvIAjQXd_ifxgtJQRpQXvA.roa (raw, json)
Hash identifier:          XEaNuj9FjB1ahejZFzu8KEujaoNobwYgxZ3K4jAXAYo=
Subject key identifier:   23:3D:4F:89:DB:C8:02:34:17:77:F8:9F:C6:0B:49:41:1A:50:5E:F0
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       15158F84
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Iz1PidvIAjQXd_ifxgtJQRpQXvA.roa
Signing time:             Fri 10 Jun 2022 11:13:03 +0000
ROA not before:           Fri 10 Jun 2022 11:13:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204750
IP address blocks:        2a0e:97c0:3d0::/48 maxlen: 48
                          2a0e:97c0:3d1::/48 maxlen: 48
                          2a0e:97c0:3d2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353734532 (0x15158f84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun 10 11:13:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=233d4f89dbc802341777f89fc60b49411a505ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:53:ef:1f:61:0f:1d:50:85:23:68:21:b7:
                    8a:28:c6:5e:c8:47:29:5c:d6:af:66:84:7c:76:3d:
                    38:41:3e:e3:29:e3:53:71:89:21:7d:d9:c0:82:42:
                    a7:ac:d8:1a:2e:00:de:07:34:fc:0c:45:9c:d3:25:
                    67:20:0c:be:e0:f9:a4:1c:8d:e7:f7:13:df:c6:46:
                    49:65:ef:e9:f2:17:39:a0:59:bd:fa:36:a5:b9:c9:
                    41:b3:ec:8b:11:44:9e:1b:81:ff:d8:22:56:aa:bd:
                    76:12:92:46:6f:7d:f1:35:4c:91:78:ed:a4:f9:dc:
                    b1:95:e6:cc:1d:27:18:d2:51:f8:e0:8d:b7:7a:1f:
                    49:0e:a1:e5:aa:ec:05:44:95:7d:be:40:bd:c0:b0:
                    07:30:b7:d7:0b:1e:32:65:a4:54:ad:f6:a4:39:79:
                    8d:2d:86:63:3e:21:f8:75:82:3d:ba:74:07:ac:47:
                    a2:42:81:32:cb:9b:b4:44:ba:ef:ba:52:5c:fb:93:
                    b6:b1:f4:1c:42:f1:67:d2:78:05:64:ff:84:12:25:
                    9f:36:06:20:b5:e2:d3:2c:e1:3e:15:ae:0f:59:7c:
                    45:0f:e0:a7:06:a8:00:92:e9:ec:ee:51:10:99:80:
                    4b:7c:95:96:e5:e9:2f:62:f8:23:a9:09:3e:bd:d6:
                    73:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3D:4F:89:DB:C8:02:34:17:77:F8:9F:C6:0B:49:41:1A:50:5E:F0
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Iz1PidvIAjQXd_ifxgtJQRpQXvA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:3d0::-2a0e:97c0:3d2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         c6:19:f6:15:d7:44:27:6a:2d:9d:f5:03:ce:fe:62:04:ca:3e:
         02:a1:1b:40:5b:09:22:63:9b:88:1e:4d:d2:13:11:e8:a3:6e:
         09:41:a1:d1:c1:53:86:dd:16:29:e5:09:87:54:76:7a:57:67:
         86:64:8c:5b:35:c0:f6:e1:df:52:2f:0b:37:33:5e:60:d3:44:
         ed:a9:0e:f5:b5:b8:d7:82:95:ad:54:1b:8d:ea:12:f1:63:10:
         54:96:3c:e1:de:14:f9:da:2b:82:e7:42:84:68:fe:55:c6:dc:
         51:cf:77:78:54:1a:8c:eb:7c:9d:6a:0d:50:de:c7:90:3d:5f:
         57:35:fa:2f:2e:7a:0a:83:e3:9b:69:7f:2c:73:98:90:3b:c6:
         b9:dd:43:32:84:e9:ef:a2:22:72:64:67:b0:7e:f6:d1:b3:8b:
         38:4c:5b:93:36:2c:e2:9c:79:7b:b9:e4:99:78:d9:47:1e:15:
         c3:09:f8:1c:81:bf:bb:13:81:1c:97:06:15:b8:26:6a:a2:00:
         43:fd:34:19:97:9d:e9:52:25:4d:63:4b:77:ae:ce:5e:6a:9f:
         53:41:61:ff:4b:dd:03:d0:a2:21:62:a1:c9:df:4e:aa:06:a6:
         b5:80:5a:79:63:75:da:25:bc:d3:a2:0a:8c:d4:b9:64:73:36:
         f3:ba:df:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----