Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e8ZopMZrLb-OhfdBEDwhfB4N6Hg.roa
File:                     e8ZopMZrLb-OhfdBEDwhfB4N6Hg.roa (raw, json)
Hash identifier:          +4JFet6ddF2c3ypRyRH45IMvMRlV2aj8kBEdKTIzLwM=
Subject key identifier:   7B:C6:68:A4:C6:6B:2D:BF:8E:85:F7:41:10:3C:21:7C:1E:0D:E8:78
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01846560A7D4C21D89D0DD5DBA894F768364
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e8ZopMZrLb-OhfdBEDwhfB4N6Hg.roa
Signing time:             Fri 11 Nov 2022 06:29:04 +0000
ROA not before:           Fri 11 Nov 2022 06:29:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213367
IP address blocks:        2a0e:97c0:6e0::/44 maxlen: 48
                          2a0e:97c0:6e0::/48 maxlen: 48
                          2a0e:97c0:6ee::/47 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:65:60:a7:d4:c2:1d:89:d0:dd:5d:ba:89:4f:76:83:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 11 06:29:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7bc668a4c66b2dbf8e85f741103c217c1e0de878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:b1:0b:1c:6a:16:e7:fd:d1:5c:6f:de:3c:
                    45:d4:34:56:3c:7f:08:f5:c7:e5:29:1e:90:80:41:
                    c3:11:04:c9:4f:56:3e:ac:9f:16:ea:87:51:66:79:
                    9b:72:f5:74:e3:92:eb:a8:72:d5:b0:f3:7c:95:ca:
                    bb:39:c6:b7:5f:82:ca:7b:4f:bd:91:e7:c8:c6:ac:
                    f0:3f:2c:99:a9:0d:4d:83:41:f5:de:4f:be:a7:50:
                    12:bd:d8:db:a0:a8:23:1e:5d:cf:f2:75:f1:3b:3b:
                    f2:ba:df:9f:24:4d:6c:97:ef:d4:13:5d:3c:88:f9:
                    eb:58:b7:b9:84:4c:ee:10:65:83:b9:5b:1a:b6:66:
                    f0:50:6f:9d:28:28:6b:db:5b:29:6e:b6:bb:5c:b3:
                    f9:99:58:3d:fb:e2:cc:37:aa:29:8f:6c:f5:25:d6:
                    6a:22:51:f3:33:2d:61:70:9c:c5:d1:1f:42:3c:b8:
                    de:28:d9:d2:ed:55:5b:67:1d:a0:5c:cb:d3:e7:28:
                    01:a8:a5:5f:d4:a5:fa:2c:d3:a5:f4:fb:92:58:38:
                    50:59:d8:03:6b:94:ff:46:0b:d0:f3:18:1a:e4:36:
                    ed:46:0a:50:fb:c5:42:8f:8d:fb:0c:54:ab:21:bc:
                    21:f0:a9:78:0f:d1:13:f0:e7:e3:97:a2:a3:c8:71:
                    15:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C6:68:A4:C6:6B:2D:BF:8E:85:F7:41:10:3C:21:7C:1E:0D:E8:78
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e8ZopMZrLb-OhfdBEDwhfB4N6Hg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:6e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         50:0d:0a:a1:0d:6f:c4:12:09:93:5d:6f:d2:87:65:8e:ce:1c:
         97:bf:66:4d:4d:4c:b3:70:da:ca:29:d8:c5:be:fe:1c:e7:51:
         23:f8:8f:0c:b7:6d:29:1f:1d:1d:9e:a3:aa:3f:fa:54:67:d9:
         74:56:92:24:41:69:08:e6:65:85:4f:f2:d9:be:18:b0:02:a3:
         6d:d8:05:69:43:99:be:03:c4:d8:61:f3:6f:1d:d8:09:fc:7c:
         a2:cf:58:ae:1f:03:43:56:93:bd:71:0c:69:46:e9:d7:2f:22:
         77:b4:ad:13:70:61:1f:14:b9:7e:cc:d7:f9:32:6c:90:f3:f9:
         c2:a1:67:fa:b2:58:3d:2e:31:f0:bd:c2:d3:12:86:84:a5:6e:
         89:4b:b7:7d:86:2b:de:b2:4f:72:f6:db:c5:48:bd:a7:13:d5:
         74:89:af:9c:b0:c0:70:c4:b5:70:2a:6c:52:3f:fb:65:e3:55:
         7a:d8:a9:c4:61:87:2a:23:87:5f:85:d0:fb:5b:7b:27:da:c9:
         fa:b9:17:f1:12:58:cf:cf:75:71:f5:b3:a0:17:87:82:81:e1:
         4d:ba:91:48:2f:a2:80:39:20:e7:76:09:4b:53:f9:0a:87:49:
         8d:17:9f:34:13:8b:04:cc:ab:4b:f5:80:5b:c2:4e:61:75:4b:
         28:be:26:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----