Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gGJuiiN8pcYvCEzH89__0lEFNsA.roa
File:                     gGJuiiN8pcYvCEzH89__0lEFNsA.roa (raw, json)
Hash identifier:          IZD2BbkyMWokeAECSEaVrkrk9Bd4VMvAInRmurxXwFM=
Subject key identifier:   80:62:6E:8A:23:7C:A5:C6:2F:08:4C:C7:F3:DF:FF:D2:51:05:36:C0
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01843140A41B628B89D1EAC0BAF906CCCCC8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gGJuiiN8pcYvCEzH89__0lEFNsA.roa
Signing time:             Tue 01 Nov 2022 03:33:50 +0000
ROA not before:           Tue 01 Nov 2022 03:33:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201938
IP address blocks:        2a0e:b107:1cb0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:31:40:a4:1b:62:8b:89:d1:ea:c0:ba:f9:06:cc:cc:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov  1 03:33:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=80626e8a237ca5c62f084cc7f3dfffd2510536c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:35:b0:6f:53:3c:ed:31:87:fb:e7:cc:13:
                    ec:16:93:07:c9:d9:7a:c5:e1:dc:bd:5f:79:db:95:
                    b4:15:b2:e7:d8:10:ea:ae:86:c1:2f:08:b1:20:d5:
                    a6:c3:f6:3d:5f:91:7f:b2:1e:2c:76:0d:74:88:db:
                    85:82:70:bb:4f:ac:d6:8f:b6:cf:b3:aa:0e:35:ee:
                    97:9f:68:b6:68:6e:3d:6d:14:43:c3:6a:c4:44:cf:
                    ed:08:0e:41:0e:d9:cc:9d:9b:a0:f9:80:f7:12:df:
                    78:2f:90:b2:30:3e:ae:67:80:ac:e1:d0:90:cb:c8:
                    32:41:d0:98:78:e9:92:92:02:7b:5c:35:22:fb:7e:
                    19:6b:02:7e:67:89:70:ca:30:1a:b4:20:45:8c:1e:
                    b9:2c:96:cd:2e:23:ef:4c:16:e7:a7:23:3c:0a:6e:
                    54:30:2f:79:a1:27:92:e6:51:55:94:c0:13:09:d5:
                    fb:1d:b1:9e:a9:c7:4a:cb:37:fb:89:c8:02:65:06:
                    15:ce:fe:b8:b2:1e:66:51:6c:1d:80:9a:f9:90:1a:
                    9b:48:1e:0a:18:8b:7a:41:84:8f:a6:76:0c:67:74:
                    68:63:af:a9:8d:4d:fb:99:ba:89:af:bb:50:d3:6c:
                    37:0f:69:53:f2:fa:eb:e4:f0:1c:cf:10:bd:17:72:
                    26:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:62:6E:8A:23:7C:A5:C6:2F:08:4C:C7:F3:DF:FF:D2:51:05:36:C0
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gGJuiiN8pcYvCEzH89__0lEFNsA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1cb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:2c:9a:4b:4a:dd:94:dd:25:f7:83:d4:16:a0:c6:58:a7:bd:
         02:88:87:c9:87:ae:00:0e:f5:bc:b5:0a:53:27:1b:7b:97:ad:
         c3:4e:22:50:d5:a2:03:51:ad:12:68:66:66:89:83:c9:d0:d4:
         a3:fc:7f:06:f6:cd:52:1b:8d:ce:24:07:6c:48:75:71:96:2a:
         7c:85:e8:46:2e:05:bc:d1:6c:23:12:0f:e3:0a:34:ab:dd:db:
         7a:98:ca:19:6e:e5:d8:26:06:52:6d:59:07:9d:c8:93:30:b1:
         48:a6:39:bc:f3:6b:07:49:1d:27:44:bd:b7:79:57:c9:f5:c6:
         99:24:df:97:27:e7:98:ab:bf:ad:be:64:b5:bc:ee:bd:15:ee:
         fd:40:b5:8b:1d:3e:4c:1f:fa:70:94:02:d4:37:fd:92:66:00:
         b6:ca:78:95:56:46:5d:cf:1e:5f:1e:2f:b3:dc:c9:e6:d4:e3:
         ee:0f:b8:7f:81:a3:10:9b:b6:59:ef:34:99:17:4e:fe:50:e3:
         ff:07:85:36:59:8c:84:65:b0:e3:d0:88:c7:44:f4:d2:30:be:
         28:9f:95:31:6d:67:36:fc:60:2b:72:ca:e0:7a:01:5b:3d:6e:
         ae:98:b2:bf:ef:1b:4f:b7:9b:6d:d4:04:bf:82:11:c0:ad:54:
         4d:cc:80:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----