Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WmSiwrP3OGPNCL4ksm3ItonpKFM.roa
File:                     WmSiwrP3OGPNCL4ksm3ItonpKFM.roa (raw, json)
Hash identifier:          4iAXWPeY4IqhtxfyOBNlsZ8VOLe3iLxO+GekdnnxCTQ=
Subject key identifier:   5A:64:A2:C2:B3:F7:38:63:CD:08:BE:24:B2:6D:C8:B6:89:E9:28:53
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       108355B1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WmSiwrP3OGPNCL4ksm3ItonpKFM.roa
Signing time:             Sat 01 Jan 2022 09:04:52 +0000
ROA not before:           Sat 01 Jan 2022 09:04:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     139328
IP address blocks:        2a0e:b107:1d0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277042609 (0x108355b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:04:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5a64a2c2b3f73863cd08be24b26dc8b689e92853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ae:68:20:c3:5d:33:f4:97:5d:04:e2:9b:fa:
                    7a:9e:81:a8:b4:49:8e:b7:cf:56:6f:91:94:66:48:
                    17:6d:83:98:65:0b:ba:ce:e2:51:09:a8:78:55:af:
                    77:2f:06:d5:64:ca:22:40:2e:7f:ed:19:59:f0:3e:
                    19:08:1c:9e:74:02:8b:e0:55:61:ac:7a:4a:08:e6:
                    2b:6b:d3:da:f7:7c:d8:01:9b:a1:ab:bb:d3:d3:f9:
                    18:db:27:43:a9:ad:83:99:22:31:18:f5:08:ef:0c:
                    7c:a7:6e:2d:47:be:1a:c9:e3:02:ab:c7:24:78:34:
                    2e:0f:4d:03:7e:59:ac:26:b1:00:4f:5a:00:1b:62:
                    54:4e:d9:bd:db:41:31:32:0b:d9:ce:2a:a3:77:db:
                    e1:1b:b1:dc:11:a5:59:93:26:2c:16:0c:9e:6c:dd:
                    8f:55:8c:bc:8f:5e:d7:e5:14:65:7c:63:58:d8:75:
                    39:52:61:2a:a6:ff:1e:2d:2e:7a:8d:a7:a3:cc:65:
                    fd:18:7d:20:98:5b:00:68:9e:a3:11:b6:19:02:57:
                    5a:61:d9:44:7e:8f:d8:f8:dd:c8:55:a2:f6:82:98:
                    ea:32:ba:0b:f5:b9:4b:0a:67:c6:59:2f:47:ac:ce:
                    2d:02:df:88:1b:eb:6f:4f:d4:bc:e7:0a:fe:82:5c:
                    37:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:64:A2:C2:B3:F7:38:63:CD:08:BE:24:B2:6D:C8:B6:89:E9:28:53
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WmSiwrP3OGPNCL4ksm3ItonpKFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         67:a9:22:ed:11:89:6b:82:6d:4a:26:95:a0:3e:1c:53:4a:ea:
         8d:c2:66:e2:50:ae:80:60:60:92:9b:7d:08:a2:0d:d0:08:7a:
         1d:02:77:4d:86:04:bb:e0:b6:0e:f5:c6:a5:c3:eb:63:58:b0:
         eb:2e:2e:9d:b0:f0:73:bf:fc:f0:5a:19:16:e5:7a:e7:2c:00:
         54:b3:6a:bd:11:82:4c:42:dc:2d:19:59:56:38:1a:29:13:8c:
         63:d9:ad:66:92:16:c4:e3:d6:f8:3c:e2:f3:b5:a7:1d:cf:5c:
         09:4c:0c:cd:d4:44:e4:09:7f:33:b1:65:19:a9:cb:c4:ff:6f:
         c4:ed:89:9f:f0:70:ec:a4:45:02:9b:59:5f:92:ba:0f:21:9c:
         8b:49:b2:8e:2a:80:e2:a1:3b:f3:08:3c:93:1a:1e:3f:8b:32:
         0b:14:6c:82:82:15:d5:67:30:81:ff:f9:5e:73:d5:d7:fc:2e:
         10:53:0a:7a:3a:b0:ce:4f:e7:c8:4e:74:7f:6a:f8:86:0b:a3:
         5b:8d:0a:26:78:85:8a:38:03:82:9e:3d:41:4a:30:35:99:ad:
         39:6c:d6:4d:c1:6c:36:77:97:04:b5:9d:c8:d0:06:4a:df:83:
         7d:0f:42:9d:a9:36:69:f2:2a:d8:92:2f:25:0f:56:ad:e6:79:
         ec:59:f0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----