Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T_FIx-5h1Bb197VPG8W9-rev-FI.roa
File:                     T_FIx-5h1Bb197VPG8W9-rev-FI.roa (raw, json)
Hash identifier:          FowRSltGD/MNJUWzE6hUBuA1csBfMe1SFsPGjA+nsbs=
Subject key identifier:   4F:F1:48:C7:EE:61:D4:16:F5:F7:B5:4F:1B:C5:BD:FA:B7:AF:F8:52
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       1504FCE8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T_FIx-5h1Bb197VPG8W9-rev-FI.roa
Signing time:             Mon 06 Jun 2022 21:01:20 +0000
ROA not before:           Mon 06 Jun 2022 21:01:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     24961
IP address blocks:        2a0e:97c0:3e2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352648424 (0x1504fce8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jun  6 21:01:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4ff148c7ee61d416f5f7b54f1bc5bdfab7aff852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:db:ab:f6:c5:a0:8d:82:91:7f:0e:99:8a:
                    8e:5b:45:ab:64:d5:a8:9f:fa:1a:0b:04:da:29:d6:
                    2b:7a:63:6d:af:5f:f6:7c:d1:4d:6b:3e:cb:3a:c0:
                    88:31:2c:c0:e1:b4:d9:19:40:80:63:a0:c1:1a:21:
                    2c:3b:bc:d9:e7:ad:05:6f:c6:8d:37:5f:d1:7d:0c:
                    36:0b:b0:8d:e5:99:23:8c:8e:d4:10:67:2a:16:30:
                    e9:fe:d6:7d:f8:4f:6e:e5:6a:47:50:ff:85:e1:99:
                    c1:2c:0c:f9:90:90:24:a8:36:fa:b6:f1:ed:1d:af:
                    0e:66:aa:62:4a:1f:06:8f:b9:33:dd:e2:50:60:43:
                    90:97:f2:5a:5d:a5:4d:52:74:34:19:8b:52:51:e9:
                    8e:9d:79:1d:f6:ad:8a:ee:42:4c:ae:50:e2:d8:fb:
                    5a:f0:a2:d2:3d:4f:9a:8a:ac:af:b8:5b:97:32:8e:
                    89:35:eb:2e:ff:76:e7:cf:50:d5:fe:91:1d:b2:29:
                    00:27:4b:38:a2:52:84:8b:7c:ef:28:e4:0f:d0:93:
                    31:c3:d9:5b:d6:a4:59:87:c8:f2:2b:f4:db:9b:ee:
                    cc:3d:65:a8:f7:be:82:a4:72:4d:31:a5:77:dc:d8:
                    f4:7e:3c:04:ae:e2:99:52:6b:b9:6c:df:2a:65:48:
                    bb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F1:48:C7:EE:61:D4:16:F5:F7:B5:4F:1B:C5:BD:FA:B7:AF:F8:52
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/T_FIx-5h1Bb197VPG8W9-rev-FI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:3e2::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:4d:d9:47:f2:dc:e4:aa:a3:cb:92:46:8c:ef:2e:e1:77:33:
         0c:51:7b:78:12:f2:bb:b2:77:5c:d5:72:fd:db:a3:6c:2c:e1:
         79:f8:b1:7b:26:0a:36:04:a7:0b:c1:91:db:1b:b8:49:3e:4c:
         9f:15:40:f3:ac:14:7b:b7:b6:50:c5:62:0a:dc:da:29:50:0c:
         11:98:8a:33:43:f2:69:9b:03:3a:65:f1:b7:5e:f4:f0:33:06:
         d8:1d:5c:2a:c9:a3:31:06:a8:9d:f0:de:57:90:d7:13:0b:47:
         e6:67:90:e6:29:50:54:4b:be:1c:8c:26:8b:0c:46:9d:36:c2:
         4a:3c:0c:1f:10:fc:4e:1b:7d:be:e2:c4:a4:c6:f7:29:2c:cb:
         9e:ce:c0:ad:bf:da:e1:96:e8:ec:16:ce:29:99:8a:4c:1e:fc:
         49:30:d5:98:69:01:72:16:68:c9:ca:60:69:d3:be:05:c6:7c:
         c1:ed:3a:31:78:aa:84:9d:36:c5:68:41:33:c4:e5:0c:1f:19:
         7f:59:17:8b:90:11:24:df:4f:ff:5a:d1:e1:9c:53:b1:2d:f6:
         50:df:77:bf:62:b5:a8:1f:9e:48:1f:80:b7:89:c5:37:4a:c6:
         f7:7c:f2:6a:e3:ff:eb:e0:e8:7e:1f:8f:86:f2:a7:6a:22:cb:
         13:43:c2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----