Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d6JC73-fj6F80S_lgqZY7w9acE0.roa
File:                     d6JC73-fj6F80S_lgqZY7w9acE0.roa (raw, json)
Hash identifier:          zSCnV1RGxlIPeYPfApCcBUTGDnX9Wz8lNkzGcgJh9zo=
Subject key identifier:   77:A2:42:EF:7F:9F:8F:A1:7C:D1:2F:E5:82:A6:58:EF:0F:5A:70:4D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01831C5E973F67EC859772AEA11CE2CE5E9C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d6JC73-fj6F80S_lgqZY7w9acE0.roa
Signing time:             Thu 08 Sep 2022 09:11:44 +0000
ROA not before:           Thu 08 Sep 2022 09:11:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209225
IP address blocks:        2a10:cc40:102::/48 maxlen: 48
                          2a10:cc40:100::/44 maxlen: 48
                          2a10:cc40:100::/48 maxlen: 48
                          2a10:2f00:17e::/48 maxlen: 48
                          2a10:cc40:101::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:1c:5e:97:3f:67:ec:85:97:72:ae:a1:1c:e2:ce:5e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep  8 09:11:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=77a242ef7f9f8fa17cd12fe582a658ef0f5a704d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:d9:1f:b2:6e:d0:8c:bc:38:9c:39:4a:36:
                    a6:56:03:1e:cd:7c:11:51:23:ba:5a:44:6b:46:c6:
                    11:e8:b4:87:bd:eb:17:89:a6:fa:d3:06:56:a1:67:
                    c9:a4:90:3f:ba:b5:2f:31:13:c3:f6:a9:f6:dd:71:
                    55:16:a1:34:28:16:4e:be:6a:f0:e9:1f:54:9c:83:
                    be:44:79:91:c9:50:64:13:ce:16:9d:23:b1:61:f2:
                    ed:23:4e:82:69:d4:3b:8a:39:fb:7b:d1:1e:ea:1c:
                    7b:da:46:33:7b:30:50:73:e4:6d:31:76:08:6b:78:
                    1d:cb:10:02:a7:4a:ee:b1:3f:20:63:dc:f8:a0:7f:
                    59:a4:a1:f8:46:1e:00:a6:ea:1e:6c:e1:42:ed:ae:
                    55:ac:3b:ef:0a:6c:67:99:bb:07:da:27:56:05:b5:
                    ca:56:e2:12:b5:49:d8:eb:84:fc:50:1d:e5:4d:96:
                    43:e8:c9:18:2b:c8:3a:b3:17:07:04:03:90:52:9a:
                    25:23:b2:3a:6b:56:05:47:62:2b:f1:b1:c1:ca:f5:
                    ba:f7:b3:94:d6:a8:f5:a2:8b:fd:96:c0:9c:29:a8:
                    3a:81:8a:a2:81:23:8b:cb:41:56:c9:22:29:92:e3:
                    c3:b2:94:eb:bf:dc:31:86:83:e9:8a:c5:6e:ca:cd:
                    6d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A2:42:EF:7F:9F:8F:A1:7C:D1:2F:E5:82:A6:58:EF:0F:5A:70:4D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/d6JC73-fj6F80S_lgqZY7w9acE0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:17e::/48
                  2a10:cc40:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:16:25:b5:fe:11:7d:d5:c9:ef:d7:51:cd:9f:76:7b:cf:97:
         2d:0e:0b:ae:79:27:77:4a:3a:1c:81:45:f0:73:03:49:69:fe:
         cf:c7:b5:62:f4:1a:7c:51:fb:29:76:aa:65:5f:2b:21:e8:e1:
         b2:97:2b:62:16:2a:20:52:3f:fe:b1:d5:c0:fd:c4:3c:b5:ab:
         52:3b:50:19:d6:03:4c:4d:e5:09:1d:4f:1b:df:b6:a2:c9:15:
         7a:7d:5b:0b:ae:01:68:a1:42:87:47:c2:f5:d1:02:ac:be:d8:
         26:03:b2:7c:bd:2a:0e:f7:39:74:69:93:a4:9e:ab:f1:99:cd:
         d0:e7:ff:b2:df:b6:a3:e0:a0:4c:81:ba:e9:f3:b4:e8:17:2a:
         40:5b:e6:90:95:0a:b0:28:e8:c5:05:1b:e4:c5:e6:6c:63:da:
         e3:00:4c:82:8a:2e:25:1c:88:27:ee:10:80:c1:18:f3:65:e6:
         38:be:ac:35:6b:0b:f6:d5:0d:fd:af:84:aa:19:3e:d9:1d:6f:
         bb:60:69:ec:67:30:8e:a5:d5:d9:cc:7d:0f:23:74:62:f7:eb:
         14:f3:38:90:e9:6f:b8:fe:4f:78:ba:10:af:c3:e3:a8:10:02:
         ab:2b:35:1e:db:15:43:ec:e8:5b:4b:ef:aa:6d:df:ff:61:64:
         8c:1a:4e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----