Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Oi5TTUdsFbCPis8bax3gZDS6UGc.roa
File:                     Oi5TTUdsFbCPis8bax3gZDS6UGc.roa (raw, json)
Hash identifier:          AYxHb+x7L734kwLT6bEOxf9NxkmjahUSDknkyqf0+Cs=
Subject key identifier:   3A:2E:53:4D:47:6C:15:B0:8F:8A:CF:1B:6B:1D:E0:64:34:BA:50:67
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01827D0F65EFE37306CA156583EB8F60354E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Oi5TTUdsFbCPis8bax3gZDS6UGc.roa
Signing time:             Mon 08 Aug 2022 10:45:37 +0000
ROA not before:           Mon 08 Aug 2022 10:45:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49922
IP address blocks:        2a0e:97c0:b80::/44 maxlen: 48
                          2a10:cc44:100::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:7d:0f:65:ef:e3:73:06:ca:15:65:83:eb:8f:60:35:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  8 10:45:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3a2e534d476c15b08f8acf1b6b1de06434ba5067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:68:2f:99:d8:ab:d9:b6:60:e2:de:64:30:d0:
                    91:a6:1a:be:e3:39:b0:5e:60:7b:f7:d1:e9:bb:d7:
                    b0:e2:11:ed:fc:2d:a7:fa:73:96:4a:67:ec:94:d1:
                    44:97:3d:9f:2d:6b:88:ca:3a:54:31:17:1b:fa:53:
                    99:20:54:83:42:a2:66:88:57:70:2f:46:87:a7:95:
                    68:6b:f8:d6:dc:9a:5b:19:43:f4:d6:17:16:f5:cd:
                    d8:8a:6c:01:0c:c4:02:1d:78:40:c1:97:fa:6e:34:
                    53:20:b4:02:85:d7:e2:d5:83:d3:dd:fc:14:12:22:
                    d4:9b:88:c9:39:2b:5f:a9:b6:6f:f0:23:93:a3:68:
                    33:31:1e:58:3f:c6:90:e8:2e:67:c8:0b:65:b5:d9:
                    38:18:2d:61:31:bf:eb:b6:c0:75:ac:93:c2:54:91:
                    1a:2a:6f:f6:66:42:9a:a4:0e:e9:7b:55:33:be:4c:
                    c2:4e:bd:c3:e1:85:8e:c6:b3:85:a3:be:e3:34:f1:
                    41:e0:19:29:f6:d0:f8:1b:de:a8:30:59:06:d8:f0:
                    d7:80:34:a0:07:18:72:00:03:b9:79:e4:06:98:e7:
                    e2:28:d0:b4:00:ee:93:79:7f:4e:3d:98:a7:5f:50:
                    94:5f:5c:97:6e:93:29:a3:2e:31:23:3b:27:01:20:
                    e1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2E:53:4D:47:6C:15:B0:8F:8A:CF:1B:6B:1D:E0:64:34:BA:50:67
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Oi5TTUdsFbCPis8bax3gZDS6UGc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:b80::/44
                  2a10:cc44:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:66:86:a3:ca:82:c6:0e:71:6a:ba:01:39:97:c8:3e:32:42:
         87:53:5e:99:bd:99:6c:59:f0:d7:b6:0b:c5:00:b7:8e:f9:af:
         07:6a:cb:42:33:34:ea:fc:a5:8b:fb:7f:69:5a:fc:ae:c8:ee:
         6f:c8:ce:d2:9e:14:30:01:ac:d0:97:f4:c3:9f:9d:9b:7e:fa:
         c2:a7:6a:b5:c9:af:0d:78:6e:df:b4:b7:7c:4f:b9:b3:da:c3:
         91:99:36:28:92:fd:84:c8:e4:94:e7:46:db:18:cb:df:74:b4:
         d6:67:1d:5a:04:0a:65:66:c5:09:e4:1f:ef:1f:57:58:26:d6:
         41:f9:cc:b3:6c:4a:d3:6e:13:9b:84:6d:94:d2:d7:e8:ae:30:
         fb:b1:19:77:5c:a2:ee:7a:bb:ad:6a:64:09:d8:b0:c6:b1:b4:
         c9:a6:56:e3:83:61:71:ed:f9:55:3c:2b:ed:f2:bf:0c:c1:98:
         fc:ac:71:50:aa:18:bc:f1:3f:00:59:84:1d:cb:40:81:49:48:
         77:0e:76:b8:8e:b8:9e:a2:88:92:84:28:95:ff:04:80:74:a8:
         7e:6b:07:ef:86:4d:3d:54:e1:54:19:78:2d:65:c3:87:8c:8c:
         8e:13:8f:72:d1:c4:c8:c4:55:b4:de:8f:27:39:c2:d5:b7:e2:
         a3:33:a2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----