Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZzEak92fUfNEeMdF6ptGUNv4kHQ.roa
File:                     ZzEak92fUfNEeMdF6ptGUNv4kHQ.roa (raw, json)
Hash identifier:          Vzk5M8jSnaQ4KeBJH2klIiB2X9vOlo834ZLJfrE7jg4=
Subject key identifier:   67:31:1A:93:DD:9F:51:F3:44:78:C7:45:EA:9B:46:50:DB:F8:90:74
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       1490DB69
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZzEak92fUfNEeMdF6ptGUNv4kHQ.roa
Signing time:             Thu 12 May 2022 09:18:02 +0000
ROA not before:           Thu 12 May 2022 09:18:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205121
IP address blocks:        2a0e:97c0:ad0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345037673 (0x1490db69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May 12 09:18:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=67311a93dd9f51f34478c745ea9b4650dbf89074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:84:55:c1:1b:7d:d1:36:5d:c7:a7:5a:5b:
                    9a:5d:05:f9:89:94:f3:59:89:e5:42:94:38:8f:23:
                    fe:f9:d4:e6:24:0e:a9:df:1f:9a:d9:f6:9d:02:49:
                    e2:85:e1:19:29:4a:e8:a6:35:16:c5:34:ba:b7:cd:
                    44:af:99:93:57:e9:64:a6:83:be:6d:cd:f9:12:7d:
                    da:be:d3:e9:b7:2e:d8:57:a9:2a:6d:bd:33:00:71:
                    2a:2d:9c:c2:bb:33:4a:a4:55:a1:93:e9:d6:ed:c7:
                    00:a5:6f:4c:89:91:64:9f:5b:af:24:14:94:5a:4f:
                    3d:bf:96:e1:c7:9b:5c:19:cf:31:6c:9b:8c:0f:af:
                    13:d6:14:08:9b:71:43:b1:84:f0:b2:10:b1:53:8c:
                    83:09:7c:1c:46:39:da:11:75:7d:f2:4f:2a:8e:47:
                    fb:f1:da:fe:19:02:60:07:2e:5b:2d:8f:4c:9c:a6:
                    a3:7e:16:9c:ec:4a:c2:20:24:a6:73:2c:33:d6:15:
                    95:0f:c1:33:31:19:02:b6:f2:b7:ff:cf:9d:3e:67:
                    34:bb:1c:4a:ca:35:c7:28:b9:46:e2:59:2e:36:9a:
                    97:50:47:17:42:8c:81:08:ec:2e:5b:dc:3d:21:07:
                    8d:a0:f4:9b:9a:8d:cf:af:f5:14:45:6e:0c:6d:5a:
                    a7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:31:1A:93:DD:9F:51:F3:44:78:C7:45:EA:9B:46:50:DB:F8:90:74
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZzEak92fUfNEeMdF6ptGUNv4kHQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:ad0::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:06:5b:06:00:f4:38:7c:c0:87:0b:ef:68:3c:ba:46:72:54:
         a1:dd:9e:e2:5c:6a:3a:ea:a1:39:95:a2:da:72:96:e8:b4:e2:
         5e:bb:f4:18:ef:05:e0:88:4e:fa:e8:e4:60:f9:b8:fc:c0:3c:
         d7:4b:30:55:95:3b:f3:1d:b5:ba:fb:e3:76:ef:07:63:a7:f7:
         b8:d6:81:8d:ab:d4:00:d4:4c:e9:28:7e:fc:6b:ae:60:bf:cb:
         b8:2e:91:11:94:11:ec:77:c6:e4:87:da:ce:76:5d:07:56:ce:
         2f:94:36:d0:0a:f5:df:d4:d1:67:dd:64:2d:b2:bc:0d:09:26:
         e6:07:d9:c8:3a:17:35:55:c6:34:a0:84:32:8a:79:19:dc:09:
         68:57:ad:91:82:7a:b2:3c:3a:dd:9d:2d:3a:9d:46:f3:3e:15:
         0d:ed:48:fc:1d:39:01:71:0e:3c:1c:ce:56:e9:a6:c0:b6:73:
         f8:83:c0:3c:61:4f:ec:a1:2f:6f:9a:d9:dd:a9:cc:6e:74:6a:
         3a:96:05:43:73:75:f1:4c:41:90:02:04:93:0d:26:ef:81:87:
         78:52:6b:4b:f7:3f:ff:16:70:42:e0:7b:2d:aa:67:2c:b2:77:
         53:1e:49:bd:76:97:77:82:41:a0:f5:8a:e2:59:94:7a:6e:13:
         2b:d1:35:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----