Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jVJ7iDgNRIZL-gMtCqfmUaqe8dg.roa
File:                     jVJ7iDgNRIZL-gMtCqfmUaqe8dg.roa (raw, json)
Hash identifier:          MhhMlup4f1x9qYyGrrQ2h+sZELbNckkVofcTAtkxyvk=
Subject key identifier:   8D:52:7B:88:38:0D:44:86:4B:FA:03:2D:0A:A7:E6:51:AA:9E:F1:D8
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       1345094A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jVJ7iDgNRIZL-gMtCqfmUaqe8dg.roa
Signing time:             Mon 28 Mar 2022 18:04:06 +0000
ROA not before:           Mon 28 Mar 2022 18:04:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208529
IP address blocks:        2a0e:b107:178a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323291466 (0x1345094a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Mar 28 18:04:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8d527b88380d44864bfa032d0aa7e651aa9ef1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:47:ff:95:9e:f8:69:12:6c:f2:27:18:22:23:
                    31:34:d6:34:ad:6e:1d:b0:fb:4b:2d:97:30:87:29:
                    52:da:c0:6d:89:93:ca:f8:91:43:d4:35:bd:c7:55:
                    c4:2c:02:d5:70:e1:d3:3e:e8:54:3f:b1:35:05:73:
                    34:bc:1a:49:92:80:cb:a0:9e:62:92:cf:cc:c4:d2:
                    16:18:91:e6:b7:f5:95:99:4d:71:d3:d8:c9:a5:a6:
                    7f:c3:b6:cf:4f:c7:e8:a1:b6:0e:8b:d6:62:3d:19:
                    69:48:50:7d:dd:af:5c:fc:67:9f:48:e1:38:17:fa:
                    a2:4c:6d:4e:09:ae:bc:0e:66:1a:80:6e:8d:45:da:
                    60:86:72:bf:ef:6b:c8:fb:4d:af:f6:22:20:2a:93:
                    58:74:ed:5d:ee:3f:e3:39:80:47:dc:11:ed:5c:16:
                    d4:c0:70:12:d5:21:c6:27:b6:b2:2b:8e:90:54:68:
                    54:a5:8d:35:10:a1:40:95:43:ce:64:7c:3e:a5:a2:
                    78:0b:83:85:50:81:32:d6:6e:b2:68:70:b3:3b:11:
                    0d:09:2a:59:7f:6f:ab:fd:c4:1f:89:e6:83:d1:24:
                    0b:11:d5:30:ca:03:0d:bd:a2:2c:cb:22:d5:5d:83:
                    de:5b:9f:5d:f7:24:37:aa:ec:c5:f8:22:60:49:74:
                    d4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:52:7B:88:38:0D:44:86:4B:FA:03:2D:0A:A7:E6:51:AA:9E:F1:D8
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jVJ7iDgNRIZL-gMtCqfmUaqe8dg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:178a::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:43:4e:d4:1c:b3:1c:cc:78:04:f0:24:32:f4:e0:05:64:8b:
         37:b6:32:ed:78:fb:96:c5:22:c3:53:89:6c:c7:73:6d:a0:fd:
         96:bf:d7:44:93:5a:3d:d2:70:89:a6:ec:b6:5d:69:b7:2a:4f:
         1b:0c:58:0b:88:2f:65:0f:7c:62:9d:f6:32:0c:0d:b7:10:bf:
         af:9c:23:5c:8b:ec:81:09:0b:89:1a:8a:b1:d7:58:bf:c2:a8:
         b2:cc:36:c6:8b:4d:48:82:88:4a:1a:c6:f3:dc:c5:70:33:93:
         b3:65:6b:bb:53:c0:0f:a4:c6:24:a7:df:af:7f:29:46:90:50:
         e1:ae:3d:f2:6e:e3:fe:df:dc:a7:d3:fd:df:42:22:80:c2:79:
         01:f3:80:89:8a:02:31:71:c6:8a:5c:83:3a:db:bd:82:49:66:
         69:fe:55:7a:c0:28:6f:1d:2f:b9:09:d0:59:69:ff:2b:5d:b8:
         f5:36:db:8c:49:d5:3f:40:f5:bc:bc:00:65:34:91:82:2c:7d:
         09:92:41:1e:f9:97:b5:d8:65:f6:94:de:6c:07:b9:94:22:da:
         69:6a:d6:77:d6:6c:7a:c5:93:90:69:50:91:2c:98:41:68:f1:
         47:cf:c0:80:b8:0a:d2:e5:4d:61:6f:97:26:c6:dc:28:c2:97:
         e0:4e:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----