Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PprFWn-_ge_P6r9-KUg8PVwF0XY.roa
File:                     PprFWn-_ge_P6r9-KUg8PVwF0XY.roa (raw, json)
Hash identifier:          ZUI3tjgEdSaH9xDvj40rKNNowBDda1yhD1B2rkSXtBQ=
Subject key identifier:   3E:9A:C5:5A:7F:BF:81:EF:CF:EA:BF:7E:29:48:3C:3D:5C:05:D1:76
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       109151B4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PprFWn-_ge_P6r9-KUg8PVwF0XY.roa
Signing time:             Sat 01 Jan 2022 09:05:00 +0000
ROA not before:           Sat 01 Jan 2022 09:05:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     149007
IP address blocks:        2a0e:b107:1806::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277959092 (0x109151b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3e9ac55a7fbf81efcfeabf7e29483c3d5c05d176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:44:26:74:58:ae:94:1a:35:66:e3:ca:93:
                    17:c2:2b:2a:6c:53:73:22:80:68:f8:57:71:af:31:
                    9b:38:9f:56:2b:aa:08:86:1d:22:06:51:da:da:1d:
                    77:ee:66:29:01:4b:b5:08:df:c6:1c:c7:b3:be:10:
                    9f:a7:31:c4:e3:84:37:e7:24:e7:36:7d:98:b5:44:
                    bd:ff:59:21:62:24:7b:7c:b1:94:b3:6d:ec:6e:ea:
                    9e:dd:e6:44:88:54:51:5a:74:cd:e5:cf:4f:f9:74:
                    ea:57:ab:4c:1a:33:72:ec:65:aa:73:2c:0e:c8:e7:
                    bf:25:a3:f9:05:c2:52:b2:3c:7a:f7:b7:a2:ff:d3:
                    0c:74:f3:90:63:fa:8b:c1:86:7a:74:85:8f:3b:24:
                    84:7d:82:9c:2a:42:af:1e:78:e7:46:70:b8:1f:51:
                    4e:b8:b7:c3:c2:9d:a8:a6:c7:9f:42:f2:d3:ef:aa:
                    24:86:75:be:46:e3:ad:d8:8d:52:3d:05:75:a3:d7:
                    86:1d:88:ec:61:0e:60:a4:b2:a4:87:9f:b7:a9:bb:
                    6e:50:91:b0:15:56:e1:fe:f5:b4:ed:36:67:d4:81:
                    f6:59:46:b7:92:b8:6a:d8:d7:17:a0:0b:87:2a:73:
                    c4:45:40:d6:b3:26:b0:33:c4:6e:4f:5d:7a:50:5b:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9A:C5:5A:7F:BF:81:EF:CF:EA:BF:7E:29:48:3C:3D:5C:05:D1:76
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PprFWn-_ge_P6r9-KUg8PVwF0XY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1806::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:39:75:eb:4e:42:8d:d6:ae:a1:f9:6e:31:50:5d:70:67:1f:
         b4:f5:f1:4d:35:ca:82:35:bd:14:e9:f3:25:fe:ca:fc:c8:19:
         2f:eb:d9:6d:0e:42:c2:75:b5:ec:42:02:00:a0:82:c5:ac:56:
         14:7b:78:c7:58:26:c9:44:81:3e:88:a7:9c:2e:10:1c:93:f7:
         7d:eb:d9:da:43:a7:25:64:5f:d1:ba:49:bb:7a:fc:c7:dc:3c:
         34:18:d2:71:77:8e:8e:3e:6b:24:4f:a7:c6:a7:53:2c:ab:f5:
         84:cd:fd:18:02:9a:20:3c:b1:6e:8d:47:a8:05:94:17:f1:b9:
         ad:69:85:34:f6:cd:a2:fd:db:09:b2:79:16:99:cd:5a:b3:dd:
         67:9d:01:21:4d:c7:8c:a7:69:01:02:5a:66:23:1c:c8:d0:86:
         34:c0:52:a4:f6:ce:0e:a5:8f:03:09:67:29:6b:45:8a:ca:eb:
         80:fe:2b:1b:87:1e:fd:03:af:af:bd:54:89:a9:fe:e0:f1:f4:
         1d:29:09:89:43:c7:2f:7b:9c:98:c7:2d:50:97:6b:d4:cb:74:
         2f:fb:24:74:94:dd:aa:fd:61:53:e5:1a:03:36:e9:40:d1:7f:
         97:e1:e0:d1:40:f9:69:ba:ab:5d:9e:71:7c:d3:b0:d2:65:fc:
         8f:21:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----