Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nDedzIhe2BjON48-NACmQXSLCxY.roa
File:                     nDedzIhe2BjON48-NACmQXSLCxY.roa (raw, json)
Hash identifier:          FOJqwq7Ma7ppatfgGqjZwnTdWDjxsVt0XditpiqIzik=
Subject key identifier:   9C:37:9D:CC:88:5E:D8:18:CE:37:8F:3E:34:00:A6:41:74:8B:0B:16
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01831E5620FAD527F4A6FCFF5924867D95A8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nDedzIhe2BjON48-NACmQXSLCxY.roa
Signing time:             Thu 08 Sep 2022 18:21:44 +0000
ROA not before:           Thu 08 Sep 2022 18:21:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203790
IP address blocks:        2a0e:97c0:460::/44 maxlen: 48
                          2a0e:b107:12a0::/44 maxlen: 48
                          2a10:cc40:1d0::/44 maxlen: 48
                          2a10:cc41:110::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:1e:56:20:fa:d5:27:f4:a6:fc:ff:59:24:86:7d:95:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Sep  8 18:21:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9c379dcc885ed818ce378f3e3400a641748b0b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:78:ad:1c:4a:3e:a3:c0:c7:d3:33:b6:0c:
                    c5:e9:27:88:38:da:67:e4:04:cb:10:58:5e:1b:61:
                    3e:ce:61:8b:15:aa:4b:56:dc:87:ab:7f:1d:2e:5d:
                    bb:57:8f:fe:64:ef:05:b1:14:e1:32:40:d1:eb:9e:
                    fb:fd:5e:8f:e7:a1:38:68:b4:e3:42:5f:29:6c:6e:
                    9a:0c:b7:e1:ee:a2:3e:ef:e0:7f:5c:95:a2:e3:36:
                    e7:34:7c:ad:1a:6d:e5:a5:be:09:00:96:ba:a9:77:
                    f7:5c:80:80:89:53:2a:57:c8:c7:73:af:f2:4e:e8:
                    c5:b2:9d:ba:0c:f2:86:46:50:7c:0f:f4:11:15:65:
                    86:eb:20:c0:c9:17:19:83:86:ff:5e:fe:4c:fb:5c:
                    db:b1:ef:60:1b:da:30:64:01:54:a9:06:5f:f5:2f:
                    cd:d3:72:43:d0:7d:90:f8:c4:5a:a4:9a:2e:19:b0:
                    11:e0:e5:9b:cf:89:99:33:ec:24:cc:1d:a0:c3:03:
                    0a:e6:99:94:dc:4f:05:48:5c:40:3d:b1:f0:c0:bb:
                    0e:ab:33:f8:0c:24:a9:a3:57:00:29:5b:a5:31:cf:
                    81:25:a3:b9:03:36:87:b1:e1:66:32:9b:a0:18:3a:
                    eb:56:a0:1d:7a:74:fc:bd:81:61:e7:d1:14:32:86:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:37:9D:CC:88:5E:D8:18:CE:37:8F:3E:34:00:A6:41:74:8B:0B:16
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nDedzIhe2BjON48-NACmQXSLCxY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:460::/44
                  2a0e:b107:12a0::/44
                  2a10:cc40:1d0::/44
                  2a10:cc41:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         bc:36:df:56:19:91:23:30:6e:fe:2e:e7:3f:c7:0a:2b:0a:c4:
         22:03:36:62:a0:8a:44:a5:6a:83:79:45:d3:f9:69:de:bb:4a:
         92:22:98:f4:15:67:4d:18:f6:1d:a7:42:dc:8c:0b:71:e9:42:
         c2:f4:3a:01:b0:1e:52:b3:b0:a0:40:ef:6e:0a:2a:5c:cb:c0:
         ee:8d:3f:97:cc:07:20:46:20:ab:f6:a1:a1:9e:d5:eb:1c:54:
         aa:87:02:a2:41:ae:d3:f4:5f:51:76:62:92:98:e2:58:81:48:
         ea:b1:3f:2f:61:3c:ea:77:a4:b1:b1:e6:3b:89:6a:74:fe:5c:
         d0:6d:c0:1d:99:1a:0a:a6:4a:de:75:0d:b9:10:2d:bb:bb:83:
         2b:f0:9e:6c:1c:1e:32:5b:12:c0:09:c0:c2:fe:55:f1:c1:94:
         95:64:0f:70:80:b8:6e:db:9a:de:4e:22:7b:fb:fe:3d:77:e1:
         c7:f5:90:8c:6d:54:69:97:fb:08:4e:74:4b:4e:47:64:f1:f3:
         5f:70:e0:d4:05:79:8c:e6:fb:11:d2:28:c3:f0:43:13:22:98:
         51:29:76:e5:d5:1b:02:bc:17:22:c7:5b:30:7a:fb:73:fd:52:
         e4:9d:52:c3:86:d0:69:27:c6:a3:e7:ab:68:21:4d:45:80:aa:
         a7:dc:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----