Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fuVF18XGB5agfu79tNzwsrr0wPQ.roa
File:                     fuVF18XGB5agfu79tNzwsrr0wPQ.roa (raw, json)
Hash identifier:          gpRY0NVK2Y7zSqOZv+v4QTwi3EoeBmd5FJJX0e6Y6xk=
Subject key identifier:   7E:E5:45:D7:C5:C6:07:96:A0:7E:EE:FD:B4:DC:F0:B2:BA:F4:C0:F4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0182CB8FD1A5480257649AC45DE19AA1CC39
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fuVF18XGB5agfu79tNzwsrr0wPQ.roa
Signing time:             Tue 23 Aug 2022 16:36:16 +0000
ROA not before:           Tue 23 Aug 2022 16:36:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210956
IP address blocks:        2a0e:b107:158f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:cb:8f:d1:a5:48:02:57:64:9a:c4:5d:e1:9a:a1:cc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 23 16:36:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ee545d7c5c60796a07eeefdb4dcf0b2baf4c0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ab:59:f2:f5:fd:db:eb:00:51:13:68:e6:9d:
                    47:26:0c:1a:92:e2:02:ca:14:12:df:76:93:f6:22:
                    6d:26:e0:b1:4f:e8:ac:f7:83:52:36:9f:1f:77:95:
                    c8:64:b0:d3:9c:a0:df:b9:e5:dc:44:0b:e2:29:f5:
                    8a:ce:f4:9d:90:91:36:57:d8:ac:6d:2c:b4:99:f0:
                    06:61:b3:f9:22:48:b6:be:05:05:44:60:0c:00:41:
                    ca:30:cb:38:21:17:bf:73:ba:04:eb:a5:0d:43:3e:
                    97:04:02:9e:76:3f:58:7b:58:9c:a4:6b:e2:32:34:
                    6d:fd:50:ed:a1:9f:32:7d:64:a7:d8:4c:60:e2:ac:
                    fb:c7:42:a1:ce:fa:49:3e:a3:80:15:cd:de:bb:e8:
                    ec:7e:d6:26:4b:ce:c1:c5:43:76:97:da:6a:08:4b:
                    98:52:b6:06:bf:9e:34:65:d0:53:48:10:d6:6a:13:
                    f6:5d:80:e1:89:fd:fe:9d:81:4c:d5:43:14:e0:77:
                    a4:50:fc:8d:32:08:d7:9d:e5:aa:af:ac:9e:b5:9b:
                    69:9b:95:fc:ee:b4:2f:ba:1b:4d:4c:65:f0:da:b4:
                    86:40:29:af:cc:7a:7b:c8:a8:33:0f:45:fd:4c:79:
                    44:b2:5b:d9:12:84:fe:e2:80:1e:2f:aa:94:80:d2:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E5:45:D7:C5:C6:07:96:A0:7E:EE:FD:B4:DC:F0:B2:BA:F4:C0:F4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fuVF18XGB5agfu79tNzwsrr0wPQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:158f::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:b5:34:5c:61:5d:12:6e:f3:b9:30:c6:cb:5c:f8:ae:8e:f4:
         b2:4e:84:3a:8f:a7:e6:0d:98:99:49:a6:a0:29:d1:f2:bd:4d:
         9b:71:05:28:c3:bc:6c:e5:1b:58:c6:19:b5:b4:33:8a:24:ac:
         ae:05:22:17:47:ff:35:27:3d:f6:33:70:0c:63:a0:c4:b7:2a:
         45:89:65:94:5c:64:b6:41:25:22:d3:17:1d:97:a3:cf:55:05:
         a7:c1:39:dc:6b:31:5e:3c:a5:cc:54:16:f1:d7:b4:bf:ce:ad:
         47:cf:15:72:bf:ca:ea:fc:dc:99:f4:b6:d3:4c:2b:85:fd:46:
         3e:56:e6:1a:b5:ea:1e:b1:19:91:15:d6:72:a9:1f:12:ed:e0:
         b9:fe:b6:0a:73:30:40:80:b5:ed:76:95:65:9b:26:6f:88:dd:
         ae:19:79:6a:fb:87:35:65:16:7e:46:15:f1:2a:4f:85:74:8a:
         4f:56:03:d1:21:e7:fd:73:0b:ff:2f:ff:0a:8c:c9:f3:50:44:
         62:29:f7:c9:95:bd:56:ec:83:ff:55:ff:a7:8d:11:ed:ad:f1:
         ea:db:cb:66:fb:47:ef:87:4b:50:f6:ec:b0:ec:aa:f7:4a:b6:
         51:f3:46:9a:1d:99:80:d6:33:9e:25:d5:8a:1e:dc:07:c6:64:
         77:1a:ee:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----