Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vcg_hdxKCL5Pzyb1xjh6SgLZ_50.roa
File:                     Vcg_hdxKCL5Pzyb1xjh6SgLZ_50.roa (raw, json)
Hash identifier:          RkjPjGPcSd1recqrFI3AIFymZCq3HYUyjPJhGTh3G+s=
Subject key identifier:   55:C8:3F:85:DC:4A:08:BE:4F:CF:26:F5:C6:38:7A:4A:02:D9:FF:9D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01822D39E0FCD41AF37EDDB1C1E35153E9D6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vcg_hdxKCL5Pzyb1xjh6SgLZ_50.roa
Signing time:             Sat 23 Jul 2022 22:42:23 +0000
ROA not before:           Sat 23 Jul 2022 22:42:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209861
IP address blocks:        2a0e:b107:f0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:2d:39:e0:fc:d4:1a:f3:7e:dd:b1:c1:e3:51:53:e9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul 23 22:42:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=55c83f85dc4a08be4fcf26f5c6387a4a02d9ff9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2a:39:61:a7:ff:17:9d:2a:ff:1e:07:f0:b7:
                    1d:6f:f4:2e:a9:d9:3f:cc:57:8d:ac:4a:7e:a3:ac:
                    fd:8f:42:06:8b:2c:c9:c5:1c:a1:84:6e:a0:48:9e:
                    2c:3f:c9:ce:83:1f:a4:23:cb:70:36:5f:eb:c3:a4:
                    c1:77:5d:f0:c0:74:41:bd:52:53:b1:d1:d2:19:ad:
                    42:1a:88:29:a1:55:9b:4a:40:28:c4:88:ce:31:3d:
                    a5:24:4a:ec:9b:d7:f9:6f:f4:1c:ac:76:2e:46:1e:
                    2c:f5:b6:bb:5b:b2:0b:50:34:86:4d:c6:c4:86:67:
                    8e:88:88:94:a1:e6:28:1c:a7:f7:54:27:b6:37:29:
                    6e:06:5f:f4:d4:f4:70:40:4f:1f:87:8d:8e:65:26:
                    67:32:68:ae:53:79:89:44:98:93:ac:18:1d:f9:fd:
                    fc:e0:b0:82:81:88:bc:e4:98:67:f8:c0:38:67:3c:
                    28:8f:a0:dd:24:d2:66:7e:15:fd:78:43:1c:8e:d9:
                    0e:c3:4d:90:89:a4:53:9e:47:1a:4a:61:4e:e2:13:
                    ae:4f:96:4d:0f:05:bd:9e:bc:65:2a:13:b4:8a:43:
                    1a:2a:f9:a2:73:be:66:dd:e3:e8:0d:2c:99:15:80:
                    01:5c:7f:d2:6f:76:b1:47:cd:e3:40:ac:28:7d:5a:
                    e8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C8:3F:85:DC:4A:08:BE:4F:CF:26:F5:C6:38:7A:4A:02:D9:FF:9D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vcg_hdxKCL5Pzyb1xjh6SgLZ_50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         69:60:02:74:64:f8:3b:67:d3:7d:cd:94:e3:66:b7:ac:4b:74:
         b0:f8:2d:53:ce:c6:bd:91:a3:80:d6:36:23:61:86:df:7a:c2:
         0e:21:92:9f:e2:b7:58:f8:60:e1:08:fb:bd:34:ec:4c:2a:f7:
         f9:db:e6:87:ba:32:b9:c2:20:82:d9:72:80:49:8e:f4:f6:7d:
         45:e1:75:64:17:a1:1e:9a:17:c0:01:4b:e4:e6:f5:5f:e6:34:
         ac:6e:80:76:79:6e:22:f8:e9:a8:41:5d:e4:24:bd:44:30:34:
         8a:3f:4f:2b:95:ab:22:2f:0e:44:a4:75:19:bd:3b:b1:04:bc:
         56:93:94:31:7f:09:e5:bb:9d:46:fa:ca:65:d7:72:ed:13:a2:
         de:2d:89:5c:87:79:46:e2:de:42:e1:39:c2:4d:4a:7c:87:5c:
         c2:fb:ee:6a:77:0c:ef:9f:36:44:5a:b3:1b:a2:19:b4:86:cb:
         cf:74:95:5f:cc:aa:62:d2:f6:58:b8:ef:79:20:0e:79:29:e1:
         c1:8d:8f:eb:fd:58:c3:07:35:f1:2a:f8:69:6b:1e:0a:e0:32:
         e0:03:98:08:9a:0d:40:9a:3a:ce:42:a8:bb:1c:d2:77:6f:76:
         19:7e:b7:4e:54:dd:4b:60:1b:7c:f9:d1:0d:ed:8e:56:73:4a:
         53:c3:db:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----