Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dei4tLD5Y4ChLjWPQcNBu0Lt_ps.roa
File:                     dei4tLD5Y4ChLjWPQcNBu0Lt_ps.roa (raw, json)
Hash identifier:          Yle10bJfg3x1/ghLqiicqLYCifTI4g3nDStWsM/kj/A=
Subject key identifier:   75:E8:B8:B4:B0:F9:63:80:A1:2E:35:8F:41:C3:41:BB:42:ED:FE:9B
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018380C52E0E0C52C1E4B965441C6C811A51
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dei4tLD5Y4ChLjWPQcNBu0Lt_ps.roa
Signing time:             Tue 27 Sep 2022 21:05:49 +0000
ROA not before:           Tue 27 Sep 2022 21:05:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212294
IP address blocks:        2a0e:b107:1ba0::/44 maxlen: 48
                          2a0e:b107:1bb0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:80:c5:2e:0e:0c:52:c1:e4:b9:65:44:1c:6c:81:1a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep 27 21:05:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=75e8b8b4b0f96380a12e358f41c341bb42edfe9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:08:4e:f0:4a:64:20:40:d9:39:c9:b3:a6:e5:
                    c4:b4:48:31:b1:0a:81:41:80:8b:88:1b:a6:b2:a9:
                    0f:08:a1:46:ec:66:e4:c5:8d:67:6e:a3:22:81:90:
                    d1:61:27:fe:95:2e:01:1b:52:ca:5a:19:40:ef:5e:
                    82:5f:99:7b:a9:1e:f3:09:0f:cd:78:d6:ce:8d:65:
                    10:21:8f:9f:3d:37:5a:06:62:46:c3:10:f1:70:7a:
                    92:25:ea:57:93:a3:19:03:71:a7:0e:f8:40:04:23:
                    b5:9b:07:49:3a:9c:61:ed:f3:ef:8c:0c:42:cb:bc:
                    e5:3a:b9:9e:fb:22:d7:77:f2:75:0d:17:82:1a:67:
                    7b:51:91:48:dd:86:6b:26:78:6f:07:4f:67:dd:a2:
                    b0:9f:cd:ae:48:7a:9f:97:d7:28:27:cc:a3:8e:4c:
                    35:36:af:f6:84:68:9c:b1:5d:cd:1a:52:0a:8f:fb:
                    a0:ac:22:8f:25:4a:59:c0:8d:af:db:26:76:4d:76:
                    91:8a:10:11:7d:46:28:81:33:0f:9a:79:6a:36:c0:
                    19:eb:4b:ff:d5:9f:ef:47:21:e0:25:41:72:ed:e2:
                    59:19:a0:c9:c4:b1:15:65:8d:73:ad:cd:88:2a:c5:
                    28:cd:ff:56:19:6d:68:18:fc:c8:cb:96:43:d3:e6:
                    2e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E8:B8:B4:B0:F9:63:80:A1:2E:35:8F:41:C3:41:BB:42:ED:FE:9B
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/dei4tLD5Y4ChLjWPQcNBu0Lt_ps.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1ba0::/43

    Signature Algorithm: sha256WithRSAEncryption
         31:09:5a:ad:44:a6:ae:6e:50:9e:7a:e3:85:47:7c:f2:79:0c:
         8f:70:9f:7c:d5:05:b4:66:7c:b9:6a:22:91:96:2c:de:88:5f:
         1f:df:63:ee:8e:02:e2:2d:21:37:20:c2:bf:8c:14:c6:c2:1b:
         56:0d:1a:01:1b:19:7b:fc:94:04:76:e7:37:bc:04:6b:89:cf:
         6c:26:91:ac:f9:90:f5:b0:67:a0:f8:d1:f2:fa:dc:4c:0e:b2:
         13:8c:c1:30:0c:2d:0c:ee:b6:ac:bc:02:53:d0:37:2f:1e:33:
         15:5a:ac:8b:7c:73:7e:b6:67:15:25:d5:a1:d7:9a:cf:91:5d:
         51:3c:a4:d8:4d:2a:be:36:88:81:3c:19:de:4d:2e:bd:fc:8d:
         a0:c0:79:c1:0f:ec:c6:ca:b7:b2:df:7f:87:3d:f1:37:05:93:
         0d:d1:ae:5b:ee:50:cf:7c:97:eb:50:3a:4c:03:ba:0a:80:f2:
         52:2d:53:cc:7d:b6:dd:37:fd:4a:96:09:7f:32:99:b5:2b:7e:
         fc:77:35:98:93:c9:1b:77:53:cc:de:10:83:1a:27:0c:96:08:
         62:1f:b9:cb:58:b9:2b:42:c6:a2:2b:ff:25:0c:9f:bb:06:0b:
         fa:ac:80:ee:93:78:6e:74:b0:bb:74:b1:bb:a2:b3:2c:ad:45:
         20:7d:8a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----