Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wt2eVTJIp7eUgORal28PMmT6kXA.roa
File:                     Wt2eVTJIp7eUgORal28PMmT6kXA.roa (raw, json)
Hash identifier:          Wnr2m7EkEaHJpAuE90MMJblXe6HdHyKWzv1+RvcIm6g=
Subject key identifier:   5A:DD:9E:55:32:48:A7:B7:94:80:E4:5A:97:6F:0F:32:64:FA:91:70
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10C2BF49
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wt2eVTJIp7eUgORal28PMmT6kXA.roa
Signing time:             Sat 01 Jan 2022 09:05:26 +0000
ROA not before:           Sat 01 Jan 2022 09:05:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211242
IP address blocks:        2a0e:b107:13c0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281198409 (0x10c2bf49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5add9e553248a7b79480e45a976f0f3264fa9170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0c:d3:d9:af:6a:0e:3a:e2:a5:bb:dc:ea:53:
                    d2:67:b9:f6:28:c7:fb:bb:12:c0:63:18:2c:68:b6:
                    45:1c:e6:e3:b4:05:6a:19:e4:b7:dc:04:b6:c3:a6:
                    b8:06:f5:2f:02:11:30:27:93:6b:8c:51:62:3f:9a:
                    f7:db:74:2c:f5:04:40:d6:cd:21:53:20:e1:f2:13:
                    91:9c:a5:5f:d9:7a:7c:16:7d:27:83:ba:31:34:8e:
                    d3:77:09:63:8d:04:e5:11:83:03:ff:5d:41:ef:bf:
                    6e:81:4f:45:79:a3:67:f7:f1:cd:72:e6:f4:df:81:
                    23:43:48:c9:54:6d:68:33:93:f6:31:96:91:9d:b9:
                    62:af:12:91:6a:ea:e3:99:e7:b0:cf:83:62:40:7d:
                    1d:db:47:d1:79:e6:3b:06:86:89:64:f1:c0:d9:17:
                    e5:88:34:fe:8f:98:1a:72:e9:2f:37:9f:6c:e3:58:
                    8a:e5:15:c6:63:d6:5c:49:16:9b:dc:14:c9:aa:5d:
                    9e:dc:72:12:63:c1:e4:b5:d8:d4:75:fc:4d:11:e6:
                    f6:e0:7e:b1:61:0c:53:50:95:6a:08:43:82:96:f8:
                    d3:7d:c9:b8:ea:80:35:6b:ed:7c:05:d2:16:42:d7:
                    ce:7b:7e:02:de:ed:1b:5d:90:22:aa:86:cc:08:b7:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DD:9E:55:32:48:A7:B7:94:80:E4:5A:97:6F:0F:32:64:FA:91:70
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Wt2eVTJIp7eUgORal28PMmT6kXA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:13c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c8:74:84:04:c9:20:a8:4b:f8:18:7e:a5:0c:e3:b9:bf:4f:38:
         0d:ba:0c:2a:46:f5:c8:c8:93:f9:8a:2e:68:1c:aa:50:b6:68:
         2d:ae:bb:95:c2:3c:5d:fb:68:43:1f:74:1a:6b:86:70:a7:54:
         63:81:35:15:e8:5c:8e:dd:4d:9f:8e:be:18:f3:e8:04:91:16:
         4d:94:07:23:8d:80:05:36:17:b1:8f:d8:4f:dd:74:21:7b:b6:
         56:29:8f:3d:9b:4d:32:5a:31:d4:b9:00:fa:24:ce:89:56:c4:
         d1:d0:89:f4:aa:e3:08:e8:a6:03:c0:82:fa:99:14:21:ec:fd:
         dc:05:b9:a3:03:d6:5a:24:f6:c4:99:e8:0e:9b:9d:78:d8:80:
         e2:47:d0:75:f0:24:eb:a1:f4:e6:62:0b:b2:19:7b:a9:67:90:
         f5:70:eb:dc:c2:9a:c8:f5:0e:a7:db:d2:ea:33:b8:e6:7f:49:
         23:e9:67:00:26:74:fb:ea:10:d9:88:1d:0d:29:c3:0d:75:4d:
         b0:92:43:ad:0a:1c:f8:ec:42:63:b8:70:d2:6e:12:48:6b:a9:
         fb:d6:32:63:71:00:b6:d7:dc:e0:cc:86:58:ef:fc:0a:13:94:
         11:2e:21:44:08:a2:aa:09:64:d1:ef:13:0c:f0:05:d4:97:76:
         06:cd:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----