Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jyxd1ErefrChPBsZy0U_MEGpO5Y.roa
File:                     jyxd1ErefrChPBsZy0U_MEGpO5Y.roa (raw, json)
Hash identifier:          FPslWpJTv4y/xPYb4OHe2hZ6CFtK6i7zwR8LN1kIr7s=
Subject key identifier:   8F:2C:5D:D4:4A:DE:7E:B0:A1:3C:1B:19:CB:45:3F:30:41:A9:3B:96
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01851C176F626EF27D6BC5E1ABEB9DA6912F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jyxd1ErefrChPBsZy0U_MEGpO5Y.roa
Signing time:             Fri 16 Dec 2022 17:59:35 +0000
ROA not before:           Fri 16 Dec 2022 17:59:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50922
IP address blocks:        2a10:2f00:18e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:1c:17:6f:62:6e:f2:7d:6b:c5:e1:ab:eb:9d:a6:91:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec 16 17:59:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8f2c5dd44ade7eb0a13c1b19cb453f3041a93b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:85:55:f9:18:20:ea:1d:5e:62:13:54:11:29:
                    43:15:65:5d:48:e7:05:1b:43:75:c3:06:d7:44:8c:
                    ab:e7:dc:55:8d:b9:e4:17:91:78:98:a0:f8:aa:2a:
                    44:62:64:7c:e2:19:4c:e0:9c:1a:f8:ce:1b:f8:83:
                    9f:8b:f2:5a:68:07:c3:f9:39:c0:a9:87:fb:30:6d:
                    db:7b:6b:ff:a7:b4:1d:9f:b8:d8:33:dd:43:8d:9d:
                    a0:d3:bf:92:f9:3e:93:50:f2:22:81:7c:e7:96:ff:
                    9e:cf:a3:81:3b:5c:c8:d3:e1:c9:63:54:12:bf:62:
                    fa:89:a1:31:ff:f0:46:d1:b1:c0:bd:9e:46:ee:14:
                    65:64:8f:42:c2:0d:b4:59:35:e4:66:f5:fb:b8:8f:
                    35:da:44:43:f7:46:51:96:3d:86:5a:06:61:f9:22:
                    5a:ba:ae:e8:9c:41:de:df:34:b7:a1:64:6b:f1:20:
                    5c:8e:d8:1a:3a:4a:9a:80:ad:11:fe:ad:5b:57:3f:
                    6b:53:52:01:4b:77:8d:7a:17:f1:53:9d:a8:60:e7:
                    a9:8a:36:0e:1e:c5:cf:e3:22:8d:8a:3d:08:1d:7e:
                    de:1b:0a:01:6d:9b:d3:83:76:2a:99:73:6d:d5:fc:
                    bf:98:8a:47:f2:63:43:f6:07:31:98:5d:c6:e5:78:
                    0a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2C:5D:D4:4A:DE:7E:B0:A1:3C:1B:19:CB:45:3F:30:41:A9:3B:96
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jyxd1ErefrChPBsZy0U_MEGpO5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:18e::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:4a:4a:2f:b4:a7:40:c6:0b:ba:13:6b:62:cd:f3:ff:c2:e8:
         71:1d:a7:8b:a9:c7:36:3e:d0:bb:21:97:04:53:93:8c:c2:39:
         a1:b5:5a:aa:e7:e4:ca:58:92:e2:0b:f6:48:b3:36:c0:ee:a7:
         16:44:b6:db:91:67:a2:bf:92:28:a1:20:18:12:e4:95:30:98:
         17:42:e8:9c:37:dc:51:15:d6:69:37:6e:46:ed:14:73:26:9a:
         a3:5d:5e:0c:b5:10:78:4c:ba:18:90:f0:6a:65:b0:f8:62:c1:
         a6:a3:53:d4:24:6e:fb:a5:b7:c0:4b:61:7c:fb:3e:53:1b:56:
         af:6e:a8:7a:09:de:a1:80:82:6f:40:f7:e1:0b:9f:c0:b4:ce:
         3d:58:52:b4:87:7e:b3:e0:4e:60:af:05:ef:e6:44:a9:d1:3c:
         2b:91:19:79:4c:bb:6c:47:89:52:cf:12:b5:66:af:c1:74:d1:
         d8:51:d3:52:7a:c3:ea:31:8a:a1:89:51:36:2f:9f:82:36:d5:
         66:eb:2b:bd:16:7f:b8:ad:07:f8:8f:f0:e2:fa:76:d4:18:74:
         8e:83:1a:3b:fc:60:65:5b:19:39:0f:0b:29:6d:ba:e2:6b:51:
         79:d7:73:98:ba:5c:a0:06:8a:21:15:7e:da:3e:4f:bb:22:3f:
         c8:23:e8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----