Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cdJwyYK0pazQ4HEf5N21Us2pHjA.roa
File:                     cdJwyYK0pazQ4HEf5N21Us2pHjA.roa (raw, json)
Hash identifier:          NAI3FnuKlcdzbk8dZYbdkDhV82zdBSPsjrQ2wDWSijE=
Subject key identifier:   71:D2:70:C9:82:B4:A5:AC:D0:E0:71:1F:E4:DD:B5:52:CD:A9:1E:30
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0184AA02E1CBBDB4992DAD7D29D73EA9BA7A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cdJwyYK0pazQ4HEf5N21Us2pHjA.roa
Signing time:             Thu 24 Nov 2022 14:20:26 +0000
ROA not before:           Thu 24 Nov 2022 14:20:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202427
IP address blocks:        2a0e:97c0:5b0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:aa:02:e1:cb:bd:b4:99:2d:ad:7d:29:d7:3e:a9:ba:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 24 14:20:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=71d270c982b4a5acd0e0711fe4ddb552cda91e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:12:8f:fa:25:be:a6:59:79:07:18:7b:40:66:
                    a0:74:17:16:ad:98:08:24:7f:5e:fc:f1:c4:28:f1:
                    24:a0:a0:ab:f2:00:be:49:3f:0d:8e:dc:44:96:ab:
                    62:52:92:09:9b:17:43:c3:91:65:13:31:c4:61:4b:
                    93:1b:91:77:05:63:f0:52:b6:f2:a0:49:2e:3a:9c:
                    76:75:63:ab:19:72:ba:5a:29:12:fe:e8:3e:99:f7:
                    f7:ea:0e:1b:96:10:2e:3f:f0:fb:33:5e:43:16:31:
                    59:e3:fb:c2:e4:60:43:f1:85:79:18:eb:56:0e:c9:
                    e3:82:5e:37:78:5f:2a:18:50:89:22:69:51:da:f8:
                    4a:53:27:25:c9:7d:04:12:c0:58:ec:ec:c6:0d:3e:
                    83:27:49:de:cf:c4:06:83:c8:d6:d3:de:ee:18:7b:
                    60:f2:39:93:90:5c:d0:8e:f6:da:04:d8:99:34:d6:
                    29:9b:30:99:95:4e:86:fe:f0:d2:49:7b:d1:fd:1f:
                    b4:e2:4a:80:b6:8e:9f:4c:7a:5f:58:e1:94:d3:56:
                    f8:2d:e5:f7:c3:b8:6e:67:15:b7:64:3b:de:71:da:
                    62:e9:30:78:8c:76:91:22:5f:4c:e8:97:ec:3d:bc:
                    7d:61:df:9d:bd:18:04:4d:77:55:cf:44:d3:63:1d:
                    e0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D2:70:C9:82:B4:A5:AC:D0:E0:71:1F:E4:DD:B5:52:CD:A9:1E:30
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cdJwyYK0pazQ4HEf5N21Us2pHjA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:5b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a2:1d:1f:f9:96:46:e8:e0:9c:21:80:36:79:10:24:29:44:79:
         15:13:55:b9:4a:26:cd:e6:6b:7f:78:2e:9b:b2:9b:5e:4b:9b:
         77:97:42:4a:76:5b:0b:a9:e0:bc:d6:8f:64:a5:b7:78:37:c0:
         6a:5e:54:3b:73:81:25:ed:fd:a2:00:ce:91:b5:86:20:e0:cf:
         a9:42:63:e5:26:1f:9c:59:f5:c5:5e:f3:8f:b8:ef:90:30:e0:
         d5:a5:0e:97:68:50:3d:06:dc:b3:e0:43:85:ba:b0:32:f3:33:
         23:0c:87:52:eb:df:ba:bc:a5:1f:4e:96:a9:a8:cb:e2:96:77:
         70:cd:b3:f9:a6:7b:50:ed:fd:4b:84:9f:aa:05:f1:1b:be:2e:
         fb:1c:07:10:b7:cd:c5:f3:15:fd:79:fc:7d:22:f7:6d:ff:0a:
         91:30:8f:e5:d9:81:6d:10:34:19:fd:b7:88:c1:8f:89:23:6b:
         64:cf:d6:24:d8:5c:1e:d9:6c:35:62:fd:b7:70:7a:d7:54:06:
         53:d2:bc:54:cf:c1:2e:29:ef:77:44:c4:f1:d4:c6:07:8b:79:
         51:f4:bd:42:18:41:32:8c:fc:36:c9:4b:a2:37:75:9c:ca:44:
         a3:76:26:44:b6:ee:be:64:8a:b6:42:11:e0:2e:0d:a2:15:7f:
         5e:26:ed:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----