Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L8nxuvNtnSp4LDgdmmt8ujI1IDY.roa
File:                     L8nxuvNtnSp4LDgdmmt8ujI1IDY.roa (raw, json)
Hash identifier:          RcpaSloaeJbUVV5pfcGkNaZ88HrJx/Xq9KdD8naD7dQ=
Subject key identifier:   2F:C9:F1:BA:F3:6D:9D:2A:78:2C:38:1D:9A:6B:7C:BA:32:35:20:36
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10EFCB00
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L8nxuvNtnSp4LDgdmmt8ujI1IDY.roa
Signing time:             Sat 01 Jan 2022 09:05:56 +0000
ROA not before:           Sat 01 Jan 2022 09:05:56 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213064
IP address blocks:        2a0e:b107:b50::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284150528 (0x10efcb00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:56 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2fc9f1baf36d9d2a782c381d9a6b7cba32352036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9b:7e:ee:ff:f3:5c:48:36:5c:96:72:43:c8:
                    d8:f4:41:09:b5:da:4c:a6:4a:28:74:33:55:68:b3:
                    27:a3:df:20:40:38:60:64:fb:ec:9e:77:10:de:ed:
                    86:79:69:7b:93:23:bb:7f:e1:80:56:e0:fc:9e:b8:
                    0f:53:5c:9c:af:c4:a6:be:9c:63:bf:33:50:86:75:
                    d4:ad:6d:34:48:2c:cd:1f:62:14:5c:06:8a:75:00:
                    48:5c:a2:41:27:2a:14:5b:e1:7b:d0:d0:45:b0:e9:
                    bb:9b:c7:20:ca:6d:90:71:d2:8a:50:c6:12:0d:ee:
                    a1:66:dc:fe:6d:42:fb:de:98:3e:65:cf:b4:e9:ea:
                    e5:8b:5c:15:b2:a8:11:3e:b7:1f:49:4c:1a:8c:09:
                    91:89:cb:a9:31:b9:b7:7b:f8:c5:2b:c2:08:bb:79:
                    56:59:31:74:d7:b8:e3:fe:71:97:1a:50:f8:be:c3:
                    7f:6e:10:c5:0a:e2:2b:38:a3:0c:c3:87:5b:71:66:
                    98:12:9b:8f:08:24:f5:17:de:f9:0c:d1:b2:bb:36:
                    34:b3:2e:2c:b0:bd:18:a9:cd:67:11:66:84:29:73:
                    b7:8c:9a:89:d5:89:e6:94:b5:d4:f6:f1:36:4f:be:
                    af:7e:f5:2e:6b:eb:1b:de:31:24:55:35:75:dc:1c:
                    b0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C9:F1:BA:F3:6D:9D:2A:78:2C:38:1D:9A:6B:7C:BA:32:35:20:36
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/L8nxuvNtnSp4LDgdmmt8ujI1IDY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:b50::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:fe:86:5d:1f:03:2c:d5:88:f4:f9:1c:c9:87:1b:8a:3a:46:
         eb:f0:63:47:62:5e:a3:b0:15:63:76:2c:59:02:23:cb:45:da:
         34:75:63:63:11:4b:92:dd:6c:96:13:34:92:0e:77:c9:77:c6:
         e1:5f:3b:63:c5:14:e9:e1:ac:05:4b:6e:37:82:15:51:c7:9d:
         7a:d0:2a:bc:43:20:5e:60:d1:24:75:cd:41:83:17:a8:81:b7:
         4f:93:04:08:0f:8b:9a:7f:dc:42:49:47:c0:9e:b4:b8:a2:8b:
         71:d4:18:1c:91:c5:ef:12:9b:55:ca:1a:60:4b:ca:aa:84:ba:
         f4:2e:ca:f1:9f:f8:19:57:f6:c4:c4:d0:be:9a:f8:16:d1:3d:
         39:e5:86:a0:84:fd:95:b4:56:64:3b:10:17:f0:34:6a:57:9b:
         64:be:c9:43:dc:98:4a:0b:e7:4a:35:a7:05:50:8f:af:69:c4:
         ff:8a:b0:ea:57:76:2e:59:9c:fa:c5:83:77:9e:9c:ad:35:bd:
         9f:68:f1:84:fe:f6:65:ef:5f:9f:d0:a4:89:62:12:c6:90:da:
         bb:4f:8f:cb:fa:c9:1b:16:04:18:93:64:9b:30:f6:df:a2:42:
         d7:78:69:8e:b2:19:87:6e:4b:81:7f:02:a3:dc:ae:68:09:25:
         39:a5:5b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----