Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UYRblNI72-jXwbgkL9Bd3zU11TE.roa
File:                     UYRblNI72-jXwbgkL9Bd3zU11TE.roa (raw, json)
Hash identifier:          58557dXtc+7TWFMyFafvPH0Wx5NPFhiHJ63656vDaLY=
Subject key identifier:   51:84:5B:94:D2:3B:DB:E8:D7:C1:B8:24:2F:D0:5D:DF:35:35:D5:31
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       1091F07B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UYRblNI72-jXwbgkL9Bd3zU11TE.roa
Signing time:             Sat 01 Jan 2022 09:05:01 +0000
ROA not before:           Sat 01 Jan 2022 09:05:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     149296
IP address blocks:        2a0e:b107:1840::/44 maxlen: 48
                          2a0e:b107:1810::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277999739 (0x1091f07b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=51845b94d23bdbe8d7c1b8242fd05ddf3535d531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:29:a5:25:38:62:64:a5:ae:9e:ab:00:1c:
                    3f:69:37:bc:37:3d:9c:d3:91:fb:dc:88:dc:d0:16:
                    e3:3f:a3:5a:f8:fd:25:8f:e1:9b:f4:5d:18:cd:66:
                    49:cb:c9:20:25:88:0c:b8:84:bb:5e:24:21:ad:ac:
                    fa:8c:5b:c2:a6:13:1f:6c:f2:fe:d7:b7:71:34:43:
                    25:08:87:33:a1:5d:8a:35:4e:fe:81:b9:fb:53:08:
                    2b:ff:47:cd:c3:09:85:00:63:10:23:b1:17:6c:88:
                    e6:f5:77:23:65:ab:7f:f3:14:67:c4:52:3c:f7:18:
                    c1:ac:0f:67:21:ba:8a:e0:13:19:f7:6b:93:d3:00:
                    68:15:76:9d:16:7e:8e:94:8c:fa:29:20:45:2e:48:
                    68:61:86:d2:07:a4:01:30:c2:22:83:b0:ed:9c:df:
                    62:bd:02:9c:fe:cb:50:5a:48:3d:9b:d2:cb:2b:f5:
                    31:d4:83:32:5c:15:08:2b:31:d5:85:bc:e7:5f:b3:
                    e4:d9:b1:ce:e6:e7:1d:49:38:94:0d:46:a7:14:55:
                    b3:ee:62:f6:63:3b:be:2d:e3:1b:fb:0d:da:19:6a:
                    67:c2:8f:5b:1d:46:dd:19:93:d0:e0:99:46:78:b2:
                    a9:31:12:56:c0:de:68:77:26:9e:60:1f:56:af:b3:
                    1c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:84:5B:94:D2:3B:DB:E8:D7:C1:B8:24:2F:D0:5D:DF:35:35:D5:31
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UYRblNI72-jXwbgkL9Bd3zU11TE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1810::/44
                  2a0e:b107:1840::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:6a:04:8e:e0:91:d2:19:d7:3e:e9:e1:a7:6f:34:75:a3:04:
         1c:0b:1d:e3:65:c8:8e:0a:3a:d6:38:cc:9e:de:ad:eb:a9:c0:
         0a:52:5a:68:98:fb:99:ea:4b:8e:a9:74:6e:24:f4:a2:2f:70:
         c6:5d:30:6d:7d:fd:72:b3:97:88:3a:00:e3:da:4f:f2:68:e2:
         5c:78:3b:82:46:c8:62:55:fd:c8:10:d2:55:46:30:a1:85:b2:
         32:6b:ce:94:1d:c1:aa:80:de:54:7f:88:69:5c:bd:fa:cf:ba:
         41:80:ff:16:41:24:a3:66:7e:c8:17:db:a8:ff:fb:54:ae:a8:
         eb:69:65:b5:5d:89:1b:40:2b:2d:ff:0d:32:f6:4f:eb:01:21:
         18:f5:18:70:5b:85:52:0e:83:26:77:78:a7:5a:34:78:a6:98:
         8b:97:88:81:05:23:29:c1:f0:72:2d:fb:41:30:55:0e:e2:b7:
         18:af:26:32:56:e8:6b:b8:2c:ea:04:6a:91:71:d8:74:bc:be:
         38:13:cc:18:f8:0c:34:fd:dd:fe:3d:89:ae:6a:17:f1:91:11:
         b5:f5:da:1b:19:54:11:0d:68:64:1a:2b:20:0c:9b:5f:09:ab:
         5c:c8:b4:ab:7e:40:ae:e4:97:c3:65:30:d3:9e:8e:9d:cd:63:
         41:c0:c4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----