Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WFxKJrCMcyi59mQQowYA2IBpA2I.roa
File:                     WFxKJrCMcyi59mQQowYA2IBpA2I.roa (raw, json)
Hash identifier:          DpvjahrGQ0JnqLCYqm/syxhuE11kq6hCxGmdppJmxuw=
Subject key identifier:   58:5C:4A:26:B0:8C:73:28:B9:F6:64:10:A3:06:00:D8:80:69:03:62
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0184F32332C93067D95411A947631F3D7708
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WFxKJrCMcyi59mQQowYA2IBpA2I.roa
Signing time:             Thu 08 Dec 2022 19:08:01 +0000
ROA not before:           Thu 08 Dec 2022 19:08:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208375
IP address blocks:        2a0e:97c0:c90::/48 maxlen: 48
                          2a0e:97c0:c91::/48 maxlen: 48
                          2a0e:97c0:c9f::/48 maxlen: 48
                          2a0e:97c0:c92::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f3:23:32:c9:30:67:d9:54:11:a9:47:63:1f:3d:77:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec  8 19:08:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=585c4a26b08c7328b9f66410a30600d880690362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:85:60:30:af:f6:e9:90:90:62:5b:da:cc:3d:
                    65:17:52:66:78:16:2b:4d:e2:03:db:f7:92:54:de:
                    c9:1c:c2:ad:d9:df:65:2d:0e:52:ea:35:36:f9:ee:
                    1d:83:c9:76:fe:59:38:a8:3e:4f:8d:4f:65:3e:06:
                    f5:06:e6:d6:b7:44:03:ac:6b:25:17:c5:7f:9a:b7:
                    ac:2d:12:05:4d:50:b2:62:d1:0a:9a:5d:12:d8:d1:
                    e1:d3:ef:2a:5e:3f:c2:d3:69:6c:f8:b6:13:12:ee:
                    d5:fa:9f:80:44:eb:e7:5c:2d:5c:94:3a:de:2f:d0:
                    f4:60:1a:03:7b:87:51:f6:bd:05:97:3a:ef:dc:18:
                    00:c1:1e:50:9e:65:9c:28:9f:33:40:53:99:1e:3e:
                    ad:0a:b0:e0:bd:1e:9a:31:ab:83:47:f5:40:73:ac:
                    92:49:aa:2b:6c:1f:32:b1:4a:d2:61:00:e4:36:b4:
                    c3:e0:f8:e2:b8:9c:13:f6:4c:34:6c:b4:44:81:a0:
                    08:3d:e5:a8:d3:45:02:4e:e3:85:b0:16:f1:be:28:
                    18:1b:52:d4:92:d7:9f:e0:3d:f0:08:48:13:b8:f8:
                    06:76:36:1d:54:31:b4:10:09:97:d1:55:b7:c0:e8:
                    62:6d:55:c0:78:38:f7:d5:59:a3:fa:b1:ff:36:6a:
                    b7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5C:4A:26:B0:8C:73:28:B9:F6:64:10:A3:06:00:D8:80:69:03:62
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WFxKJrCMcyi59mQQowYA2IBpA2I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:c90::-2a0e:97c0:c92:ffff:ffff:ffff:ffff:ffff
                  2a0e:97c0:c9f::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:09:f7:ee:f1:fb:f9:75:d0:be:4f:89:68:f9:48:d2:f0:70:
         9b:f2:50:86:c4:a7:b5:9e:49:c2:50:aa:aa:a0:9a:db:33:38:
         bc:d7:87:e9:99:9b:04:96:55:2b:02:75:ff:fa:85:18:18:bb:
         ee:73:93:a9:91:67:ab:5e:40:ea:fe:d4:01:17:38:e1:f3:1a:
         59:71:06:47:0b:78:e0:6d:71:79:4d:98:c9:c3:85:6f:73:69:
         69:3c:57:8b:2c:37:20:bd:0c:84:a9:96:87:46:da:58:a2:19:
         5e:f4:5b:1a:cb:b9:f7:dd:2d:a0:43:49:a2:d4:84:91:5e:93:
         72:a8:6e:b0:1d:c0:e9:1b:3d:1c:3f:b2:15:03:86:40:85:2a:
         e3:b3:f1:f5:eb:8c:3e:dc:9e:4f:c6:f7:1c:87:90:40:e1:54:
         79:b8:a8:34:44:5c:ed:32:00:e1:2b:b4:25:00:5e:bd:92:86:
         79:f9:65:ab:58:06:7a:40:f9:5c:58:eb:65:54:d2:19:e1:80:
         90:9c:22:c5:16:8a:9a:15:e4:f6:51:e3:6b:39:a9:81:41:f1:
         00:d2:cd:b5:ab:e7:13:bd:88:f5:6b:ab:7c:0c:cd:45:56:9c:
         b5:61:ae:c0:08:54:71:3a:8a:eb:77:ad:4c:9a:2a:0c:b9:a7:
         9a:76:e5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----