Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eQL9cthYC_0d1ZsL3aUX43_FOuQ.roa
File:                     eQL9cthYC_0d1ZsL3aUX43_FOuQ.roa (raw, json)
Hash identifier:          WaO+Lc1ew0M92jFEP0ezSJeCyWDzM88NrgQoWACpaS8=
Subject key identifier:   79:02:FD:72:D8:58:0B:FD:1D:D5:9B:0B:DD:A5:17:E3:7F:C5:3A:E4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0184EE37728B21F0FC19EB769E6B79CE065F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eQL9cthYC_0d1ZsL3aUX43_FOuQ.roa
Signing time:             Wed 07 Dec 2022 20:12:01 +0000
ROA not before:           Wed 07 Dec 2022 20:12:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204160
IP address blocks:        2a0e:97c0:b70::/48 maxlen: 48
                          2a0e:97c0:b73::/48 maxlen: 48
                          2a0e:97c1:100::/44 maxlen: 48
                          2a0e:97c0:b71::/48 maxlen: 48
                          2a0e:97c0:b74::/48 maxlen: 48
                          2a0e:97c0:b72::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ee:37:72:8b:21:f0:fc:19:eb:76:9e:6b:79:ce:06:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec  7 20:12:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7902fd72d8580bfd1dd59b0bdda517e37fc53ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:5e:d0:c5:2a:6b:44:a6:ba:84:fa:ed:eb:
                    51:bf:40:29:f8:30:50:a0:d2:9b:cb:02:64:21:25:
                    bd:32:ae:dd:12:2d:91:ff:e2:78:7b:d6:d6:63:3d:
                    58:dd:ee:b8:4e:74:36:26:26:34:27:03:d7:90:d8:
                    e5:f1:38:eb:c1:91:43:94:4f:00:7a:71:96:02:cf:
                    c9:69:9c:1b:35:1e:38:a9:34:08:e8:d4:3b:a4:5b:
                    5a:e3:be:8b:c0:5f:88:94:a4:b2:b5:3e:3d:91:74:
                    99:db:1c:d0:fa:9f:f7:c5:02:86:75:5d:aa:90:ef:
                    9a:48:7d:72:26:68:f1:52:28:91:8e:fb:3c:34:39:
                    91:7c:01:36:3d:46:a4:4d:8c:50:a9:4a:da:3e:29:
                    da:a4:23:11:d1:70:01:ed:33:bc:9b:8d:32:ef:3f:
                    35:b9:27:d7:9e:55:0e:ef:62:34:4c:5d:d2:71:81:
                    35:08:dd:26:25:05:0a:82:33:77:5e:56:12:0a:03:
                    e0:a7:1f:16:63:1f:57:fc:cb:c3:f8:45:d1:e1:29:
                    88:82:d3:11:7a:92:7b:71:9a:a6:ff:3b:67:82:27:
                    8d:21:3a:82:ec:68:b7:81:57:61:6d:95:80:37:02:
                    c2:ce:12:0d:19:69:85:2e:38:1b:79:90:40:eb:68:
                    d6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:02:FD:72:D8:58:0B:FD:1D:D5:9B:0B:DD:A5:17:E3:7F:C5:3A:E4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eQL9cthYC_0d1ZsL3aUX43_FOuQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:b70::-2a0e:97c0:b74:ffff:ffff:ffff:ffff:ffff
                  2a0e:97c1:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:b0:15:30:1d:88:50:02:a2:c4:e4:19:b2:ac:76:a4:cf:cb:
         a9:70:f2:b8:a5:c6:3c:de:10:23:27:9f:23:d0:ac:06:55:6d:
         26:6f:11:70:ac:4d:d7:9c:82:ce:02:16:58:b6:5c:55:1a:93:
         e3:96:99:52:ab:68:e6:fa:64:ed:2a:5d:85:3c:77:0c:2a:c9:
         d1:a3:03:a2:45:46:7c:86:22:84:48:49:7b:e9:a3:ad:0d:67:
         2d:3e:90:1b:cf:34:21:28:02:b7:3f:53:f0:3e:99:5c:16:b0:
         98:c9:06:3b:b3:1f:d0:09:3a:19:f9:94:27:27:9b:b8:09:f7:
         5b:e1:2b:0d:06:c7:35:08:6e:ed:72:05:b4:95:8d:0a:10:cc:
         2a:13:08:5f:fa:45:d8:50:ce:46:30:92:74:2b:d9:af:b2:78:
         3e:d4:e4:2b:6a:38:c5:ae:42:af:9f:17:d4:99:7c:90:08:5f:
         af:5b:50:0c:f6:70:ac:f5:ed:0d:c8:38:f8:d1:3e:84:60:a3:
         19:f9:9e:cf:5f:e4:c2:70:2d:fa:50:ef:ab:d5:35:00:ac:d1:
         83:d0:43:02:96:a5:9a:fc:66:c7:95:f0:05:1d:b7:1b:e8:44:
         52:94:50:39:c7:25:a5:9e:57:d3:58:8b:06:65:9c:1b:39:03:
         ce:95:e7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----