Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gbPMQma0oVNR4X2G9aeRtCYOl_w.roa
File:                     gbPMQma0oVNR4X2G9aeRtCYOl_w.roa (raw, json)
Hash identifier:          7Uz2G2wHxc+NvR28C0shrFUgz17fBS++FJJG0n7vmcc=
Subject key identifier:   81:B3:CC:42:66:B4:A1:53:51:E1:7D:86:F5:A7:91:B4:26:0E:97:FC
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0183E337A67C78DDE0227B02709145FCC6C7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gbPMQma0oVNR4X2G9aeRtCYOl_w.roa
Signing time:             Sun 16 Oct 2022 23:53:38 +0000
ROA not before:           Sun 16 Oct 2022 23:53:38 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202256
IP address blocks:        2a0e:b107:1120::/44 maxlen: 48
                          2a0e:97c6:4000::/34 maxlen: 48
                          2a10:cc42:1000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e3:37:a6:7c:78:dd:e0:22:7b:02:70:91:45:fc:c6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 16 23:53:38 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=81b3cc4266b4a15351e17d86f5a791b4260e97fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:52:bc:1c:2e:33:4f:bf:82:60:9d:2f:79:e7:
                    f1:bb:01:25:d2:5e:9d:a4:f8:73:cf:0d:fa:25:bf:
                    dd:3d:80:61:4f:db:ef:3e:f1:b2:24:ec:b6:ca:f0:
                    a5:d1:39:1f:03:6f:04:6d:f4:c5:b5:ad:75:21:56:
                    2b:ef:8f:11:39:79:90:d5:72:25:a9:38:40:02:29:
                    07:8a:0c:a1:8f:c6:75:7a:2c:23:32:90:e6:6c:42:
                    ef:8e:1b:23:92:4f:31:cc:f0:46:26:da:1d:d8:ee:
                    6d:97:a4:c4:25:9a:e1:21:a8:58:6f:78:dd:7f:46:
                    93:7f:ab:23:62:b4:4c:47:03:54:6c:be:63:44:28:
                    85:c7:12:8b:75:90:a8:45:3d:df:0d:5d:f1:81:b6:
                    0f:b2:63:b7:93:aa:f2:3f:a2:91:34:d8:75:9a:e7:
                    ba:a2:a0:48:78:85:f0:0b:ef:a4:7c:af:2a:48:a5:
                    8c:a5:39:80:f4:53:34:b9:46:64:48:65:1b:62:70:
                    1a:65:5f:cc:bf:f1:4b:30:c0:22:41:2b:40:67:ee:
                    51:37:52:e5:2d:bc:5c:36:58:a5:53:2a:54:6c:ec:
                    85:08:ee:f4:be:81:9c:43:48:68:3c:3c:4e:af:be:
                    8e:58:63:85:b0:17:30:ed:f6:29:f1:7c:75:cc:0f:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B3:CC:42:66:B4:A1:53:51:E1:7D:86:F5:A7:91:B4:26:0E:97:FC
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/gbPMQma0oVNR4X2G9aeRtCYOl_w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c6:4000::/34
                  2a0e:b107:1120::/44
                  2a10:cc42:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         43:38:07:82:b5:11:22:d3:4e:78:c0:d2:b8:83:8d:5c:03:34:
         98:3f:db:28:76:21:81:b5:6c:94:55:4a:fd:be:f2:6c:5a:01:
         91:87:b9:3f:d5:ba:08:97:65:ab:85:4a:86:9b:c5:b6:4a:24:
         88:84:08:0d:d8:9c:39:46:65:fb:4c:51:67:b1:69:6d:99:88:
         fb:0d:ae:45:f6:39:dd:5a:21:06:1c:31:80:76:6f:d3:4a:49:
         aa:7c:2e:fc:43:ae:2b:c5:9c:b4:08:33:7e:15:61:e6:9d:7a:
         3a:fd:7a:5f:5a:eb:0c:f0:bf:75:e4:4c:5e:41:b5:9b:0a:8f:
         5a:ef:0f:46:cb:2a:32:40:3d:31:36:f8:74:b2:1d:9e:39:bd:
         00:b4:ea:ce:33:05:d5:fa:3d:ec:8c:f3:60:1b:b7:77:22:4b:
         7c:41:4a:41:c0:38:ac:e6:94:52:27:e8:3c:9f:28:ee:a3:a0:
         30:34:06:07:0b:7a:28:59:34:57:71:5a:61:6a:b0:0e:1f:0c:
         08:23:02:d7:b8:8c:98:b2:48:df:85:f9:ae:40:fd:47:a4:1c:
         47:ec:60:9a:5c:e4:88:04:60:af:e6:29:3a:8b:a3:dc:78:c4:
         5f:11:c8:e5:f7:70:e9:46:ba:d7:b7:55:7d:c3:43:a7:7b:bc:
         f5:3a:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----