Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UmuXiky2I8LUDNmu8hig3QBXmVI.roa
File:                     UmuXiky2I8LUDNmu8hig3QBXmVI.roa (raw, json)
Hash identifier:          Pe9XVKFebUUkS4XKCQjyrPRYyO1K2g8yO9m42FpObiQ=
Subject key identifier:   52:6B:97:8A:4C:B6:23:C2:D4:0C:D9:AE:F2:18:A0:DD:00:57:99:52
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01856832E0B61F96682A70C694E49ACB0D5B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UmuXiky2I8LUDNmu8hig3QBXmVI.roa
Signing time:             Sat 31 Dec 2022 12:40:42 +0000
ROA not before:           Sat 31 Dec 2022 12:40:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51939
IP address blocks:        2a0e:97c0:5c0::/44 maxlen: 48
                          2a0e:97c0:5c0::/48 maxlen: 48
                          2a0e:97c0:5c1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:68:32:e0:b6:1f:96:68:2a:70:c6:94:e4:9a:cb:0d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec 31 12:40:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=526b978a4cb623c2d40cd9aef218a0dd00579952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:2c:b7:b8:76:b3:e3:e3:6f:94:05:b8:d8:
                    c1:1d:50:44:16:47:0b:36:77:57:6a:89:02:f0:84:
                    23:ed:ce:4a:b9:fa:3a:cc:87:65:7b:92:e8:cf:c4:
                    ba:60:f0:9f:a2:bb:b9:25:d9:ee:ad:5e:38:36:d6:
                    48:1e:85:36:c7:f5:64:cf:8a:e7:c3:2b:fd:c7:44:
                    22:54:40:20:bd:7a:f2:af:f0:e6:63:3f:14:e5:e9:
                    b1:94:8d:85:f7:c2:a6:c9:59:ca:27:b7:9c:82:e8:
                    94:73:e1:c4:a2:44:d7:2c:18:8b:4d:a2:a1:c6:3e:
                    02:49:25:ea:75:23:0b:41:78:21:c8:15:7e:66:65:
                    1e:2f:c1:e9:03:6c:ae:21:71:43:1d:51:74:a7:2b:
                    3d:44:4f:d6:e6:96:96:29:2f:bd:b6:04:6c:bb:96:
                    4a:2b:f5:74:a7:f1:2d:80:88:89:ca:cf:2e:18:fa:
                    4f:71:73:5b:4f:6c:60:cb:72:5b:61:3b:cd:82:2b:
                    2b:5e:43:a7:50:e2:81:5f:79:29:49:eb:9a:aa:f2:
                    40:f8:21:9b:13:30:68:89:f3:d7:42:23:37:55:ad:
                    a7:93:0a:d4:f0:1c:c7:73:25:91:93:1c:0c:ed:3e:
                    c2:0a:a6:6e:48:4c:5d:99:b1:57:51:2b:1b:12:d8:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6B:97:8A:4C:B6:23:C2:D4:0C:D9:AE:F2:18:A0:DD:00:57:99:52
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/UmuXiky2I8LUDNmu8hig3QBXmVI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:5c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:6e:a1:0d:a1:6a:3c:ae:db:f7:0c:83:87:71:84:1b:6b:4e:
         a4:ef:48:0e:e4:0a:47:ab:95:b0:72:c2:b1:45:71:69:3c:a6:
         b3:a8:c7:9a:a3:ea:1c:3a:64:25:ac:73:e7:f1:5e:8e:31:2b:
         e3:41:d2:63:42:37:bf:c5:9e:c6:bb:0d:da:01:50:13:62:ee:
         7c:55:9e:8f:82:31:29:09:78:4d:31:88:ca:21:e2:8f:85:d3:
         de:ef:c5:1e:97:ee:b2:e5:ac:ed:9d:9b:cc:3e:fc:03:65:b9:
         8b:30:3b:7c:37:0e:88:d9:af:c1:03:d3:81:92:1b:60:ab:61:
         0d:ad:5f:17:7a:3f:ca:81:74:d8:d0:98:d2:9b:64:87:1e:b3:
         da:34:46:97:da:51:d4:47:75:6a:55:12:60:9e:1b:71:d4:bd:
         a4:93:f3:9b:98:14:6d:9a:29:87:b6:7e:ff:91:4f:d1:51:20:
         dc:62:df:03:64:78:5a:8f:8a:c9:cf:78:40:ed:54:55:02:35:
         57:d7:5f:cf:c4:09:ba:77:09:43:85:1a:c3:a2:07:0b:60:7b:
         98:c6:36:1d:9f:ed:e4:10:ec:51:7b:19:db:89:42:a9:04:ba:
         fd:4c:23:61:f8:cf:a3:f5:59:dd:33:e9:46:0d:ee:7b:e8:64:
         37:96:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----