Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Sq3e1htCiGuTqi6vAPtLBYt4Q-s.roa
File:                     Sq3e1htCiGuTqi6vAPtLBYt4Q-s.roa (raw, json)
Hash identifier:          yykGpCZ0fV0E5tGIZTOczwfl52bybZWyZyr/qiy7lwk=
Subject key identifier:   4A:AD:DE:D6:1B:42:88:6B:93:AA:2E:AF:00:FB:4B:05:8B:78:43:EB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018428AC516F62CE33BF8C51218740981789
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Sq3e1htCiGuTqi6vAPtLBYt4Q-s.roa
Signing time:             Sun 30 Oct 2022 11:34:52 +0000
ROA not before:           Sun 30 Oct 2022 11:34:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211138
IP address blocks:        2a10:cc44:202::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:28:ac:51:6f:62:ce:33:bf:8c:51:21:87:40:98:17:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 30 11:34:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4aadded61b42886b93aa2eaf00fb4b058b7843eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:61:61:56:97:93:da:ea:07:e2:9f:9d:6b:de:
                    a4:ba:77:ef:cd:81:c8:b3:06:24:55:03:e3:6b:52:
                    b2:a9:61:a1:d9:27:63:ae:38:20:7f:35:ec:94:60:
                    f5:f8:d6:48:99:f2:fc:7f:a7:1a:f0:53:17:b9:28:
                    6a:bd:e0:ec:f0:41:74:72:35:7d:4e:b9:3e:b4:4e:
                    96:bb:40:ac:07:d8:a2:b6:4e:7f:57:26:e8:56:df:
                    57:09:45:8f:78:03:62:4b:cc:50:42:dc:b1:a9:26:
                    aa:b9:f1:32:f6:6f:b3:b5:c2:99:92:05:3b:39:45:
                    a0:fd:30:80:cd:29:01:00:88:6a:99:ef:05:d8:03:
                    22:cd:b0:14:0e:48:9d:4a:2f:0f:a7:7e:9e:0b:e8:
                    cb:51:f8:f9:da:4e:43:f9:7b:07:02:74:cc:04:d3:
                    67:ed:54:cb:62:24:8c:66:a7:df:1c:c9:bc:32:da:
                    fa:76:0d:7f:d1:a9:03:7e:41:e8:0d:a3:c5:7b:0e:
                    b1:65:42:70:52:30:44:d1:69:9f:45:a3:41:c5:93:
                    fc:13:f4:3f:32:ba:89:2b:a9:3e:62:38:1c:e6:5a:
                    8c:4c:7a:65:92:53:b5:c2:d8:cd:8a:4c:60:ab:02:
                    df:c3:d4:2c:39:53:1e:05:9b:29:55:8e:3a:2f:3b:
                    7d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AD:DE:D6:1B:42:88:6B:93:AA:2E:AF:00:FB:4B:05:8B:78:43:EB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Sq3e1htCiGuTqi6vAPtLBYt4Q-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:cc44:202::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:e4:0f:60:eb:ab:cb:aa:bb:fb:11:02:7f:c9:94:88:1d:09:
         2f:d6:42:98:2b:d3:71:e3:02:8d:09:cf:1b:95:a3:1e:9a:df:
         42:43:74:81:03:5b:d3:cf:6a:40:2e:d9:42:82:6c:cb:b3:4d:
         6b:fa:80:fd:bc:99:c6:a4:71:02:6e:15:0b:aa:3c:04:99:36:
         2d:f4:e3:3b:70:85:9e:ce:59:e0:73:08:1e:77:dd:38:fc:e9:
         65:63:b9:71:b0:98:02:20:73:0e:ed:37:a9:46:fa:9f:aa:56:
         19:5c:b3:1f:62:6a:f5:63:de:6f:ef:af:af:e2:86:d3:19:74:
         1d:d0:b9:1e:aa:ad:78:b5:07:e7:3f:a8:82:5e:28:22:41:15:
         7e:0a:ef:81:72:53:b3:f7:86:27:95:66:09:e1:d2:76:12:0c:
         8b:4c:76:cf:f5:b0:44:c6:f9:6b:c5:7e:fa:bc:96:6f:57:33:
         21:5a:6b:8f:c4:63:df:d6:e8:be:f5:b6:05:3f:6f:20:fd:8d:
         1d:b5:b1:18:3f:c4:d5:b7:53:bb:2d:8b:1b:45:80:82:1b:f3:
         59:af:42:5c:ba:c9:7d:be:90:d3:d1:63:ad:d6:0d:4b:69:64:
         2b:30:d7:66:1d:63:ea:af:b7:72:ec:95:17:f4:0d:44:6f:dc:
         a0:47:8b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----