Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QK51OSZTy6vvyclNqR53dhs522k.roa
File:                     QK51OSZTy6vvyclNqR53dhs522k.roa (raw, json)
Hash identifier:          bA/zCSibX5mW5sN/0LGH4dPlEQIM0BZYJFomvYZpSmQ=
Subject key identifier:   40:AE:75:39:26:53:CB:AB:EF:C9:C9:4D:A9:1E:77:76:1B:39:DB:69
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10EE2D51
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QK51OSZTy6vvyclNqR53dhs522k.roa
Signing time:             Sat 01 Jan 2022 09:05:55 +0000
ROA not before:           Sat 01 Jan 2022 09:05:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212995
IP address blocks:        2a10:2f01:2a0::/44 maxlen: 48
                          2a0e:b107:b80::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284044625 (0x10ee2d51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=40ae75392653cbabefc9c94da91e77761b39db69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4c:d2:1c:0e:51:cd:60:78:a0:e0:2a:9a:2c:
                    e9:7c:e8:f8:ea:44:dd:be:58:57:a7:f3:1b:be:a1:
                    32:d4:c3:5c:87:0d:5f:53:e1:73:7f:bd:5e:ab:a9:
                    e4:49:ad:c5:04:fd:16:04:ee:68:70:75:f7:81:8d:
                    5a:bb:4e:72:d9:ce:8f:8d:f7:16:74:d9:24:ff:e1:
                    86:49:78:f0:a6:6f:98:8f:73:ac:02:6a:31:f9:12:
                    d7:af:26:a2:5e:b5:13:60:d4:fc:78:e2:5d:4d:3a:
                    ff:3a:f9:b9:90:2f:4e:fd:0b:2d:4a:2d:a2:b7:a9:
                    2a:95:76:c2:6b:06:d9:16:25:1d:85:99:4f:62:8a:
                    a8:3c:2d:4a:40:b9:d8:ef:45:81:da:78:e3:92:db:
                    fe:8d:55:81:d6:f9:b0:91:85:58:b9:e4:47:bd:f6:
                    a8:c4:82:8c:8c:98:3e:ec:53:e4:ec:12:b9:97:61:
                    af:d6:eb:94:f7:e9:4e:15:59:05:51:1d:66:87:96:
                    8a:0c:74:6b:36:bb:13:84:04:56:0c:69:c9:87:24:
                    bd:26:20:73:7c:86:b6:9e:59:63:9d:df:fd:ff:aa:
                    a4:02:97:91:3e:00:fe:57:aa:39:5b:91:2f:78:0a:
                    6b:c9:c2:f7:c3:c0:a6:33:41:bd:31:9b:e6:ef:d1:
                    f9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:AE:75:39:26:53:CB:AB:EF:C9:C9:4D:A9:1E:77:76:1B:39:DB:69
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QK51OSZTy6vvyclNqR53dhs522k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:b80::/44
                  2a10:2f01:2a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:0b:c6:03:39:79:de:5c:e2:d0:df:9a:b1:70:b7:eb:ad:b7:
         54:d2:ca:58:be:0d:de:51:37:33:d7:b3:e8:1b:23:79:42:40:
         48:d5:05:e0:20:b2:69:33:82:4a:30:e6:5a:45:c0:4b:b1:e4:
         8b:d6:d5:7c:90:ac:50:ba:96:32:d7:aa:5a:13:23:7b:5e:73:
         e3:bc:8d:f0:3f:25:74:40:22:b1:cc:f3:01:9b:e9:a4:67:d7:
         75:08:e8:1f:f6:fb:39:90:77:87:06:a1:02:70:4f:52:c1:ca:
         d6:5a:8e:cd:12:bb:89:8e:ba:ed:99:59:d9:62:1a:76:69:f5:
         e1:b2:f1:bd:c4:5b:fe:6a:07:cb:f6:d9:8f:d7:9d:5b:4a:cf:
         19:44:be:4a:a7:52:ac:6b:11:be:da:7e:08:e3:91:c3:eb:0d:
         c9:97:46:0b:ad:25:e3:4d:bc:87:e5:fa:4f:e9:ca:51:ad:41:
         a8:60:b5:14:0d:9a:48:17:a7:20:2e:cb:e4:5f:06:a0:c3:36:
         90:5c:ad:76:4a:09:39:a0:5c:cf:b3:1c:a7:0d:6a:2d:ef:f2:
         80:64:a7:aa:70:93:9b:32:88:57:44:55:82:a4:18:1c:65:23:
         0a:ab:28:00:2a:07:aa:d8:68:4a:9a:7e:07:5e:20:5b:88:da:
         95:36:b2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----