Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qio-vxaldst3US0q-UMxLBDjEFI.roa
File:                     Qio-vxaldst3US0q-UMxLBDjEFI.roa (raw, json)
Hash identifier:          AnyrI9+UInBv89UJQtgR+11T2AKvs5p9vBv8V+6D3+s=
Subject key identifier:   42:2A:3E:BF:16:A5:76:CB:77:51:2D:2A:F9:43:31:2C:10:E3:10:52
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       13726405
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qio-vxaldst3US0q-UMxLBDjEFI.roa
Signing time:             Sun 03 Apr 2022 16:43:57 +0000
ROA not before:           Sun 03 Apr 2022 16:43:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     206569
IP address blocks:        2a0e:b107:19b0::/48 maxlen: 48
                          2a0e:b107:19b1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326263813 (0x13726405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr  3 16:43:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=422a3ebf16a576cb77512d2af943312c10e31052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:3e:de:51:df:5b:7f:9b:83:e0:48:59:66:
                    ff:15:ae:81:9a:df:68:72:c6:a3:22:1b:ea:c3:09:
                    ac:75:d8:e9:6a:26:d4:46:ea:65:c8:fa:b1:c6:1e:
                    6d:5f:82:f0:d9:5d:da:c9:69:78:ed:18:67:3b:97:
                    1c:ab:9d:e4:91:52:b2:1e:28:e6:83:c6:38:1a:4a:
                    4a:3c:f1:4b:bd:3d:81:98:35:05:bf:e7:ee:54:0e:
                    09:7c:f4:02:32:6e:6a:e1:3b:80:32:fb:34:25:cc:
                    54:14:af:8c:c5:22:32:d0:56:0f:74:9a:eb:2f:ec:
                    62:02:32:29:ad:3a:12:ec:99:1a:6e:ea:4c:7a:7e:
                    7b:e1:fc:87:39:f4:c5:cd:72:1a:0f:0a:c6:d1:5f:
                    fd:43:aa:5b:91:79:86:8a:1d:e8:2b:a1:1d:b9:b2:
                    d1:e0:37:ab:8d:46:1c:a0:55:a8:20:03:f1:b9:32:
                    c1:e8:a6:9d:1f:ae:32:66:8e:7c:88:81:9f:92:b0:
                    e7:75:8d:41:53:93:23:77:e1:b9:90:d6:09:fc:c5:
                    00:32:20:6b:7c:d6:71:9f:ed:9e:17:f2:c0:bd:67:
                    95:35:d3:cb:69:77:fc:e4:dd:91:f9:7b:0f:0f:cb:
                    97:2f:fa:11:4e:f9:b5:45:a6:a7:0e:8f:7e:7f:a1:
                    11:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2A:3E:BF:16:A5:76:CB:77:51:2D:2A:F9:43:31:2C:10:E3:10:52
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Qio-vxaldst3US0q-UMxLBDjEFI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:19b0::/47

    Signature Algorithm: sha256WithRSAEncryption
         a4:c7:1c:c1:3c:e8:66:6a:56:ca:2a:da:b4:59:3d:9a:40:07:
         65:c1:98:ac:7e:2d:0b:2a:54:a1:38:7e:0b:db:ad:ed:93:1a:
         e1:67:ea:22:7e:b5:c2:19:63:4c:c5:63:5a:f4:75:5c:e8:a6:
         80:4c:fb:c6:0a:f8:58:5f:ad:f6:4f:4d:49:14:f3:01:8e:8c:
         ac:85:cc:0b:5f:cf:82:7c:3c:51:ce:26:59:2e:53:e0:1d:47:
         05:73:b2:68:be:54:59:e4:da:4d:c3:1b:de:cf:a3:07:0e:af:
         e5:1d:70:6e:24:4c:ac:0f:7a:94:75:60:ad:b0:dd:6a:76:33:
         b3:01:78:9e:ef:0f:a9:bf:a8:70:54:9f:1f:a5:d8:87:fc:5d:
         76:4d:5d:86:09:78:17:a7:e8:ed:48:6d:40:cb:5d:59:6c:45:
         d5:1a:1a:6b:d7:4a:6c:ac:69:46:98:37:5d:13:5a:a0:03:49:
         92:69:38:cb:f2:06:b0:b5:59:fa:e6:d2:29:a9:a0:97:62:17:
         8b:4d:86:7c:d5:89:16:2f:c6:eb:76:03:20:8c:75:0c:d5:d8:
         65:0a:40:ba:e7:28:35:19:e7:d8:f2:a6:95:4d:a3:b5:d6:ff:
         83:af:23:ec:b7:c8:9b:58:1f:c7:1d:05:b4:56:3b:56:3f:d0:
         a3:9b:c5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----