Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c3NkDyK-bBSVCCiSo_hLsZ4PAK8.roa
File:                     c3NkDyK-bBSVCCiSo_hLsZ4PAK8.roa (raw, json)
Hash identifier:          byYp4LVpllrV2JzboEeS+xaWAaXDGYnJcvKfgydM+h8=
Subject key identifier:   73:73:64:0F:22:BE:6C:14:95:08:28:92:A3:F8:4B:B1:9E:0F:00:AF
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       13B4FAEB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c3NkDyK-bBSVCCiSo_hLsZ4PAK8.roa
Signing time:             Fri 15 Apr 2022 03:01:45 +0000
ROA not before:           Fri 15 Apr 2022 03:01:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212227
IP address blocks:        2a0e:b107:139::/48 maxlen: 48
                          2a10:2f00:15e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330627819 (0x13b4faeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr 15 03:01:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7373640f22be6c1495082892a3f84bb19e0f00af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:d6:d8:51:9d:20:ff:bb:b0:7f:89:c8:f6:
                    de:1f:b0:5b:fc:41:0d:26:24:c4:54:70:8b:0b:e7:
                    f3:2f:2c:ac:b5:e1:42:2b:ea:c9:2d:2e:03:4e:d9:
                    8c:96:5c:8d:3e:8d:33:67:2a:c6:94:81:6c:a7:6f:
                    b8:51:50:9c:af:ab:ac:46:cd:84:5a:da:26:12:ae:
                    55:19:10:f4:96:8a:cd:56:00:39:3a:e5:b5:f9:02:
                    14:bc:43:88:c2:8e:e4:da:af:f2:1a:e5:ac:0a:56:
                    40:04:cd:3b:40:4e:f1:c6:13:3a:be:0f:a2:24:01:
                    a8:ce:ae:25:77:a1:39:49:de:07:8d:1f:fb:11:d3:
                    70:09:8a:b3:ff:31:5a:79:40:dc:cc:38:85:58:f8:
                    e8:a9:03:41:5f:e4:ee:b9:1b:8b:dc:b9:ff:dc:da:
                    72:3b:6a:dd:2a:1f:f9:6c:53:73:36:13:05:ef:ea:
                    ac:8e:ab:b6:83:bb:c3:34:e2:92:24:73:3a:6b:bf:
                    63:ad:0f:0a:56:a4:d3:f2:8a:1a:ce:58:e6:a9:b2:
                    25:e3:fc:b3:3c:5c:e9:72:22:a7:91:ba:f9:3b:7b:
                    84:7b:00:92:93:2c:17:5e:72:fa:dd:cb:07:84:87:
                    2a:71:f7:66:3e:80:d3:23:1e:c3:e1:3e:b9:7e:2c:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:73:64:0F:22:BE:6C:14:95:08:28:92:A3:F8:4B:B1:9E:0F:00:AF
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c3NkDyK-bBSVCCiSo_hLsZ4PAK8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:139::/48
                  2a10:2f00:15e::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:40:7c:a4:fe:3f:7c:74:3b:b9:a7:18:84:41:26:7e:bf:7e:
         24:34:3d:fa:05:ba:d8:51:52:10:bd:da:23:6a:b9:b6:71:a9:
         9f:91:ae:d4:20:b3:6d:d2:f5:35:2e:c9:7b:5f:aa:03:51:1c:
         52:d8:c7:fd:25:85:17:ef:d7:79:24:5a:f8:43:d6:97:0b:4a:
         8f:c4:c2:d2:77:3c:d2:ae:48:a8:5f:0c:fa:18:43:d2:6a:61:
         94:4a:f1:ab:f8:05:97:12:f9:1f:cd:8d:c2:78:68:d4:ca:ec:
         02:6b:dd:14:57:bc:2c:ae:ec:91:14:0b:ac:48:00:0b:b7:c0:
         50:7b:b1:f0:a6:10:aa:e9:94:17:bd:0d:3e:1f:b9:58:70:11:
         45:18:32:c2:f0:3a:4c:f7:20:20:9d:36:b4:e8:cf:0c:5e:11:
         68:03:cb:c0:bb:96:52:d8:4b:d5:b0:16:25:74:ed:80:80:3d:
         28:4b:5e:fb:29:84:ac:47:66:0c:40:e0:9a:b6:d3:96:e3:0e:
         32:1d:f9:62:b9:33:7f:23:9a:d6:0d:10:7b:75:42:5c:6e:87:
         54:14:47:19:d8:5b:ee:00:dd:86:ad:63:46:90:97:bb:dd:8e:
         ac:9d:ae:75:4b:34:54:81:36:5c:43:d6:da:a9:b9:2c:43:f8:
         ac:51:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----