Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_DfLADIry4R1CBqcQtaIucGz5eM.roa
File:                     _DfLADIry4R1CBqcQtaIucGz5eM.roa (raw, json)
Hash identifier:          uCw/9DVqEZTZ6Ot/FwDHM/6D7HBBitKyjEEdFFB2loM=
Subject key identifier:   FC:37:CB:00:32:2B:CB:84:75:08:1A:9C:42:D6:88:B9:C1:B3:E5:E3
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01825E42AD0AEE12008F0797B91E8C677097
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_DfLADIry4R1CBqcQtaIucGz5eM.roa
Signing time:             Tue 02 Aug 2022 11:13:24 +0000
ROA not before:           Tue 02 Aug 2022 11:13:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203521
IP address blocks:        2a0e:b107:1b80::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:5e:42:ad:0a:ee:12:00:8f:07:97:b9:1e:8c:67:70:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug  2 11:13:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fc37cb00322bcb8475081a9c42d688b9c1b3e5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6e:19:6a:3e:e2:86:19:0e:0e:81:00:f8:12:
                    8a:0c:38:99:63:1b:70:3c:c1:24:2a:4b:fa:51:f5:
                    d5:1c:6a:e3:f8:e7:62:90:ca:e2:2a:9d:15:67:1f:
                    b3:02:dd:a8:82:8d:b3:dd:e9:cc:08:7d:ac:82:6d:
                    e9:8b:a1:d2:c2:cb:f7:4b:05:c6:18:87:8a:85:fe:
                    fd:a4:8f:1a:72:30:26:f2:16:fe:81:57:73:0a:53:
                    3d:02:93:a4:b7:55:36:11:70:36:c7:a5:7b:f1:0d:
                    80:86:68:ae:03:42:1d:97:71:da:bb:2d:a7:62:2c:
                    ff:81:8f:b5:d2:ed:43:12:cc:4d:6d:13:c1:f2:f3:
                    06:df:28:c3:1b:3c:de:1f:20:95:d5:dd:a8:92:25:
                    fa:7b:a0:b0:9c:67:d1:48:95:bb:60:6f:cc:b2:62:
                    f0:8d:fc:6f:30:e6:82:53:8d:06:02:a5:fd:2f:26:
                    04:32:0d:1b:c8:e0:fa:3e:7f:7b:07:d0:d2:39:8a:
                    c0:5d:c2:13:28:ea:fe:83:ed:3e:d7:61:9e:19:e3:
                    e4:0d:7b:13:a8:d7:87:e2:df:a1:e0:23:9e:97:e4:
                    fa:0c:c5:7d:cf:f5:a8:c7:84:c2:3e:2e:ca:be:fe:
                    db:19:81:b5:f1:cb:8b:6f:37:61:7a:d8:d7:0b:a0:
                    e8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:37:CB:00:32:2B:CB:84:75:08:1A:9C:42:D6:88:B9:C1:B3:E5:E3
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_DfLADIry4R1CBqcQtaIucGz5eM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1b80::/44

    Signature Algorithm: sha256WithRSAEncryption
         a0:fb:40:ea:2c:24:fb:ce:a1:17:05:84:ec:43:66:01:71:7c:
         39:d7:74:cf:29:47:c7:f8:96:fd:6b:35:10:28:fb:fc:05:92:
         3d:13:1f:bf:3e:90:57:b2:35:4c:a3:40:a7:f9:9d:14:1d:8f:
         64:10:77:64:7f:9f:f2:1d:2f:f3:2e:af:52:7b:d6:77:6b:56:
         97:12:04:cf:94:e3:5e:3d:40:9c:24:2b:db:14:fe:e9:52:47:
         9d:af:bd:c2:7f:a1:10:c2:0d:4b:a1:d8:2b:dc:ce:69:33:5a:
         ee:ab:3e:bf:49:7e:08:67:5e:7e:f4:9c:3d:67:90:c3:69:83:
         e8:89:e9:cd:c4:15:cc:ce:3d:ad:c8:2b:3e:a7:7f:83:b7:86:
         f9:44:5b:33:ba:1b:2e:79:41:75:94:31:57:c6:6a:36:ab:35:
         8c:ac:b7:7c:64:02:8b:50:3e:81:a2:42:cb:9a:22:c1:7f:70:
         6a:fe:db:83:bd:7d:17:6a:a5:e0:9f:57:5c:0e:b0:4a:29:e8:
         3d:cf:39:bb:b5:67:9a:4e:0f:4e:f8:a6:99:9c:2d:55:23:78:
         0b:1d:51:aa:a0:81:23:b8:c3:c2:17:d8:4c:cd:43:71:43:e8:
         17:7a:fd:51:90:16:ff:16:82:04:e2:97:31:b2:0f:0f:64:e4:
         ae:76:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----