Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y35OSzIPyxsvWxT7q4WTAFZ0V1I.roa
File:                     Y35OSzIPyxsvWxT7q4WTAFZ0V1I.roa (raw, json)
Hash identifier:          sYOIfovn/YifzIzKCc+DpMvbPuQwQOfUb8O1/Kd52/w=
Subject key identifier:   63:7E:4E:4B:32:0F:CB:1B:2F:5B:14:FB:AB:85:93:00:56:74:57:52
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10DC7BD6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y35OSzIPyxsvWxT7q4WTAFZ0V1I.roa
Signing time:             Sat 01 Jan 2022 09:05:43 +0000
ROA not before:           Sat 01 Jan 2022 09:05:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212268
IP address blocks:        2a0e:b107:f28::/48 maxlen: 48
                          2a0e:b107:f2a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282885078 (0x10dc7bd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=637e4e4b320fcb1b2f5b14fbab85930056745752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:9b:1f:e3:c7:14:70:ee:94:a3:9f:0b:68:
                    39:46:58:0f:1f:8c:ac:7c:5d:e5:30:6b:c3:1d:04:
                    b8:06:af:aa:d4:6b:82:11:83:82:6d:a9:a3:87:b5:
                    50:6d:34:8c:6b:76:c1:5c:2e:cb:db:cf:f1:2c:70:
                    a1:42:fa:81:f5:6e:b4:f4:da:4f:82:00:9c:e2:60:
                    0b:a3:1b:dc:2c:3d:69:2a:55:16:22:f7:fb:00:0c:
                    ec:f2:0d:ef:33:3a:50:2e:c1:97:81:7b:ba:e6:de:
                    5d:5e:f0:12:13:dc:4a:98:3d:01:d5:a5:eb:72:18:
                    85:0d:f7:e0:bb:f7:ff:73:2e:7e:f4:ef:5c:74:9d:
                    24:00:ad:5a:73:19:cf:69:f9:43:c8:87:b0:36:92:
                    ca:be:ee:10:5e:8e:56:52:16:26:23:ff:88:b2:44:
                    0c:ec:2b:98:ec:6f:ca:34:15:b4:b2:01:37:ea:ec:
                    11:b6:b7:8a:10:4b:21:32:6a:8f:72:f5:57:de:da:
                    83:06:78:de:5e:d5:da:88:7e:85:82:80:84:60:30:
                    bb:d6:ea:b1:9e:10:ea:3b:a2:e9:cf:2e:01:8b:2b:
                    57:6e:16:3e:97:94:e4:70:c1:ab:bf:e0:d8:79:ac:
                    42:be:5a:a1:14:65:8b:a3:11:3f:40:f5:67:14:a0:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7E:4E:4B:32:0F:CB:1B:2F:5B:14:FB:AB:85:93:00:56:74:57:52
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y35OSzIPyxsvWxT7q4WTAFZ0V1I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:f28::/48
                  2a0e:b107:f2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:75:54:2f:65:60:c7:91:7f:78:e0:3e:40:19:fa:71:61:a8:
         4a:4f:21:e6:e7:38:06:c7:6e:1d:57:ab:b5:38:12:dd:d0:5f:
         f0:ce:01:dd:10:5d:f3:5a:d8:0f:24:ed:36:4e:f6:b2:78:a8:
         6b:4c:72:2b:41:e4:89:b5:a5:9f:81:6e:25:80:de:65:05:4e:
         59:a3:e3:c2:29:9b:9f:91:bd:72:98:7d:5e:ec:7d:b8:33:45:
         a2:c1:14:d5:f8:4d:cc:0e:75:55:ec:90:18:c0:ee:a0:8a:3e:
         6e:6e:34:85:62:f2:15:fc:16:34:d2:de:eb:3f:6a:ed:97:2a:
         e8:e6:e6:f6:7f:98:dc:84:e6:8f:89:fa:65:b8:c5:d5:f4:5b:
         fd:d2:25:a3:72:17:06:3b:8d:d9:08:a7:20:62:34:f8:bd:aa:
         7b:42:08:f7:e2:4a:cf:75:b7:17:f5:64:27:66:73:5d:6c:70:
         ef:02:6f:c1:6b:a2:cb:7d:de:a2:4d:e8:fa:bd:a1:b7:ea:90:
         f5:42:2a:d3:3e:ed:f9:f3:a4:c7:5e:fc:a0:02:6a:b0:13:60:
         73:03:ff:92:b2:03:38:9b:5e:c9:22:ed:ac:e5:83:37:02:8c:
         b0:cf:44:f6:31:c7:43:9b:eb:6c:f7:88:75:d7:b5:e2:02:81:
         98:e6:d3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----