Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e1EVVlXF0nV7cApGXoi98moBXXU.roa
File:                     e1EVVlXF0nV7cApGXoi98moBXXU.roa (raw, json)
Hash identifier:          Cr1o3XYKHw6UMXGnufFU0bViDHZoBh1m/L1kk7twuIg=
Subject key identifier:   7B:51:15:56:55:C5:D2:75:7B:70:0A:46:5E:88:BD:F2:6A:01:5D:75
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01840A948BE8107709B3C9A5F5EFAAAF3AD8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e1EVVlXF0nV7cApGXoi98moBXXU.roa
Signing time:             Mon 24 Oct 2022 15:20:17 +0000
ROA not before:           Mon 24 Oct 2022 15:20:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210606
IP address blocks:        2a10:2f00:175::/48 maxlen: 48
                          2a10:cc40:200::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0a:94:8b:e8:10:77:09:b3:c9:a5:f5:ef:aa:af:3a:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 24 15:20:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7b51155655c5d2757b700a465e88bdf26a015d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:44:7f:3a:a6:e6:8b:42:20:e8:0c:06:5e:f0:
                    85:bc:d8:45:82:52:96:e2:ab:98:99:fd:44:eb:5e:
                    93:26:ef:74:c0:18:2d:57:08:e2:32:49:9e:7c:3b:
                    f3:c8:c5:34:02:37:bb:2c:4d:1d:c9:9e:85:82:91:
                    f4:f5:a3:a1:8b:0d:56:a5:81:a2:e3:fb:1e:fc:20:
                    7e:3f:38:c0:da:13:6c:d6:2f:b1:96:90:98:3f:cb:
                    1f:e1:8e:8e:16:aa:a2:19:d1:17:d3:28:60:eb:af:
                    cf:fe:75:45:76:f0:0b:16:23:d5:19:9c:cf:77:3e:
                    a0:9d:df:0c:43:65:4b:51:17:d0:3d:0c:6f:9c:b9:
                    48:70:46:2b:6c:d2:23:d4:2a:92:b7:48:47:eb:cb:
                    c4:b8:ad:be:3c:30:6f:58:ab:14:e0:31:a0:14:b0:
                    02:65:a1:83:26:28:25:55:98:f7:d5:d1:d2:f3:da:
                    b6:1d:36:bb:40:70:b5:2f:78:81:f3:e3:ac:7a:1f:
                    f1:b8:5c:5d:da:65:75:ba:b7:d3:18:d3:f5:2d:93:
                    af:96:2a:b0:3d:a0:52:48:a5:dd:56:71:4f:f1:e5:
                    7f:0a:21:e7:7c:0d:bd:3d:ae:0c:c6:51:ee:b7:2b:
                    70:8d:b6:a7:08:cd:c7:bc:95:19:08:93:04:68:bb:
                    82:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:51:15:56:55:C5:D2:75:7B:70:0A:46:5E:88:BD:F2:6A:01:5D:75
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e1EVVlXF0nV7cApGXoi98moBXXU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:175::/48
                  2a10:cc40:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         36:0a:90:a1:bb:ff:ae:04:24:a0:ca:02:9a:17:6d:17:b7:1b:
         1a:3e:64:f8:75:2f:02:96:93:b4:2c:90:aa:53:7e:80:50:77:
         1a:6e:82:b6:e2:1e:b2:51:a6:5a:20:f4:fe:5f:3f:4c:b1:d4:
         01:ec:cb:cd:14:00:79:f7:40:43:86:b0:53:f8:0b:ca:27:31:
         51:61:2c:a0:29:79:d6:01:d7:f4:cb:5c:d5:6a:64:86:3d:aa:
         a4:36:65:c6:6f:d4:1f:c0:ad:5c:f6:a3:33:c1:5d:dc:1b:7f:
         af:53:92:07:c6:83:0b:80:17:f6:d4:d7:e4:af:b0:91:ab:f5:
         53:29:d9:26:e1:17:e5:50:78:14:7b:7d:5d:f0:4e:45:61:14:
         66:27:89:1d:0f:c6:3c:a3:bc:46:b3:c8:24:65:d8:e7:c0:86:
         90:5a:a7:70:e8:8b:b0:33:ca:66:b0:61:16:4d:e2:99:bd:a3:
         28:bb:38:32:ae:60:15:b0:a3:8f:9b:df:0f:53:ee:23:d1:62:
         b1:63:dd:a2:b5:ef:ff:5c:67:d3:b2:73:4d:a5:22:16:4c:7a:
         ef:91:5f:52:75:a6:36:be:61:d0:f3:6c:51:6b:f9:0a:11:67:
         9e:e0:f2:06:60:85:d7:b4:99:58:61:a9:0c:9d:9d:ea:2d:53:
         fd:42:ac:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----