Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LUYPZgzBhTZRVP06PiCviSTvLrk.roa
File:                     LUYPZgzBhTZRVP06PiCviSTvLrk.roa (raw, json)
Hash identifier:          Jai23y54uWyTdLvFl2MwHvAks2crmWXpuRcK316vIII=
Subject key identifier:   2D:46:0F:66:0C:C1:85:36:51:54:FD:3A:3E:20:AF:89:24:EF:2E:B9
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       11F0044B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LUYPZgzBhTZRVP06PiCviSTvLrk.roa
Signing time:             Fri 11 Feb 2022 01:34:04 +0000
ROA not before:           Fri 11 Feb 2022 01:34:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211139
IP address blocks:        2a0e:b107:1910::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300942411 (0x11f0044b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 11 01:34:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2d460f660cc185365154fd3a3e20af8924ef2eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:4b:eb:5c:39:a9:b2:fc:07:9e:29:73:38:
                    e6:0e:cb:a6:98:b7:8d:98:27:0f:75:da:ba:80:38:
                    41:42:3f:c2:09:c3:a3:55:d4:97:03:6a:77:a5:c2:
                    82:99:3a:76:c4:ab:92:90:5c:0e:55:e0:77:8b:37:
                    6a:e3:b5:f7:53:21:09:23:0a:7d:ed:12:8d:23:45:
                    21:3e:6b:9f:8f:0b:43:14:f5:26:0f:92:24:ce:0c:
                    3d:4a:5c:35:52:02:7c:80:ad:0e:a8:02:96:9b:10:
                    61:22:e9:a0:36:87:b5:a8:11:be:da:58:3f:3d:92:
                    eb:b2:1b:7e:d4:0d:39:23:57:41:5f:1a:8b:12:6e:
                    29:ca:c1:f4:9e:d8:7f:d1:33:66:26:f2:3b:13:12:
                    72:c2:a5:bb:9a:3f:17:16:55:24:2e:21:bf:de:31:
                    23:f2:6b:ef:cf:fb:10:56:e2:5e:44:a3:15:92:4f:
                    a3:2d:84:ff:76:9f:85:40:75:c3:48:0d:8c:4e:2e:
                    cd:b7:26:2f:03:75:b1:df:63:7b:c4:28:55:2f:90:
                    81:4e:00:e1:58:88:27:00:d6:8d:2f:0d:8d:72:b7:
                    19:32:62:b9:3a:71:39:d5:81:7b:83:a8:58:f6:d6:
                    55:38:69:51:4d:57:17:2d:6a:d5:e1:ae:c2:c3:cb:
                    59:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:46:0F:66:0C:C1:85:36:51:54:FD:3A:3E:20:AF:89:24:EF:2E:B9
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LUYPZgzBhTZRVP06PiCviSTvLrk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1910::/44

    Signature Algorithm: sha256WithRSAEncryption
         2f:cb:3b:e5:78:b0:86:a6:e0:31:75:ad:79:66:f4:48:34:32:
         7a:2e:89:d3:d6:e3:3a:19:44:03:50:d8:9c:15:7e:7b:2c:9b:
         52:09:22:ab:15:fe:65:64:10:f6:2c:33:3a:48:df:57:7f:e3:
         c8:38:ae:42:cf:98:33:54:8d:4d:04:49:23:d2:e9:62:4b:35:
         ec:97:0e:39:72:71:5d:d1:76:c8:1e:e4:1d:7c:5b:ea:06:9c:
         85:c5:88:f1:0c:5b:b4:9b:88:6b:ae:e6:30:c8:56:3c:e0:0e:
         17:39:6f:dc:93:8c:e0:30:8e:d2:7a:ff:50:ba:be:d8:f8:02:
         96:0f:2a:16:b3:46:9f:b7:9a:f9:1e:ac:45:68:75:66:9d:bb:
         87:80:44:53:e5:c5:b5:0f:3f:0e:4c:cc:85:37:5c:65:0b:c7:
         e8:25:a3:c4:d7:24:55:63:7a:d5:16:1e:da:75:bd:ac:36:b4:
         eb:e2:e9:86:52:9c:eb:c3:69:6d:81:4f:3d:77:06:32:b4:be:
         9b:69:c5:d8:0d:6e:fa:fd:58:09:d0:7e:0f:81:c8:a9:1e:d8:
         28:ae:2a:a0:88:92:2f:f2:29:b0:30:07:1f:3c:17:5c:49:d1:
         60:f8:46:67:69:85:e5:7f:77:0e:53:c5:8b:9a:eb:7b:8f:a3:
         76:84:ad:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----