Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NCqqoxLHgD9ARqOQ8-4qIBYVdRU.roa
File:                     NCqqoxLHgD9ARqOQ8-4qIBYVdRU.roa (raw, json)
Hash identifier:          nNSVfOHcGSciCS9eokbcDfrZ8fiEA3Xg+coU56sefIs=
Subject key identifier:   34:2A:AA:A3:12:C7:80:3F:40:46:A3:90:F3:EE:2A:20:16:15:75:15
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       12822CD1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NCqqoxLHgD9ARqOQ8-4qIBYVdRU.roa
Signing time:             Wed 02 Mar 2022 13:11:09 +0000
ROA not before:           Wed 02 Mar 2022 13:11:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56655
IP address blocks:        2a0e:b107:1165::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310521041 (0x12822cd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar  2 13:11:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=342aaaa312c7803f4046a390f3ee2a2016157515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1f:6c:5d:3e:dc:35:2d:07:1a:1a:10:35:58:
                    a9:2f:72:db:08:17:38:68:63:19:22:8d:6f:9d:3a:
                    1a:f2:3a:9e:10:06:cc:e9:26:80:df:cb:81:c6:33:
                    dc:c5:b2:54:1f:0a:82:77:9b:2f:57:41:a6:d3:f1:
                    c9:7e:a4:83:84:f7:e4:96:72:fc:34:5d:7d:80:b0:
                    ab:1c:5d:ea:5f:d5:0a:0e:db:c8:65:57:d1:5e:bc:
                    12:71:8d:14:ef:a2:a6:ba:76:9f:78:57:6e:7a:06:
                    50:21:88:dd:f1:f9:ac:1a:cf:52:c9:a5:75:60:30:
                    c4:a5:a5:60:d4:e6:15:ba:0e:8e:8d:bd:cb:9e:8c:
                    41:6c:58:d7:23:d9:77:9c:5d:14:82:a5:aa:f2:01:
                    17:77:19:e0:24:85:0d:33:9b:d4:f4:64:d9:bd:0d:
                    58:8e:54:db:55:68:73:ce:c2:17:09:d2:ee:07:80:
                    c5:82:e3:ed:9d:55:21:14:de:fa:7c:77:98:2a:b5:
                    19:37:37:7c:41:bb:84:2b:ee:a1:30:a6:7c:0c:58:
                    88:75:cd:8f:a1:9e:46:69:04:50:90:8e:b4:55:a8:
                    68:45:a6:af:4c:3a:fd:ee:58:bb:70:e2:8c:10:81:
                    87:88:04:07:96:20:ea:6e:4d:b2:b2:6d:19:f5:e6:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2A:AA:A3:12:C7:80:3F:40:46:A3:90:F3:EE:2A:20:16:15:75:15
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NCqqoxLHgD9ARqOQ8-4qIBYVdRU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1165::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:09:ea:fc:34:3f:65:57:c0:0a:a8:1f:e4:4c:3c:a5:df:fc:
         2c:e4:8c:33:8c:c8:d6:7a:73:e1:6b:f6:71:ca:d3:66:70:c6:
         0d:54:d9:44:19:05:16:d0:b8:eb:25:dd:b1:1f:63:ac:a3:5e:
         c5:88:af:ea:c1:ad:32:11:d8:6f:9b:42:d8:53:b9:0d:20:8c:
         a2:a3:c8:7c:6c:ad:82:1c:90:95:46:e4:14:c5:57:be:1c:c5:
         3a:69:82:10:6b:b8:98:a3:0a:16:35:e6:e5:76:f9:fe:a3:b0:
         c3:7e:f4:0a:85:bd:2b:93:79:81:e6:5d:96:8f:22:fc:b2:3f:
         25:31:a1:4e:7c:68:63:46:34:5b:8f:8c:59:19:58:f5:65:23:
         f5:28:96:28:c7:7d:cf:b0:2d:9a:84:ca:9e:5b:a5:4c:49:7a:
         23:6b:54:58:9a:78:87:d9:5e:f9:d2:a4:d5:13:5c:9a:b3:00:
         02:e3:18:2e:11:e3:d6:98:be:90:b6:e8:b8:da:b8:1c:54:3e:
         c5:be:0d:f0:29:bf:71:09:d4:20:7d:3d:16:a6:9a:a3:b6:81:
         56:c2:97:7f:73:6c:82:f3:63:4c:08:2e:ea:e5:57:10:0a:0c:
         ab:61:69:9b:93:89:cc:b8:43:7e:53:48:eb:56:0e:95:86:4b:
         99:b8:e0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----