Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/noavmj7vlbS7uzKV8ykwq2xH8qA.roa
File:                     noavmj7vlbS7uzKV8ykwq2xH8qA.roa (raw, json)
Hash identifier:          Pr19ERLFLM45WEm3uq7gG4GrtlZJKyk+68o95phb1w0=
Subject key identifier:   9E:86:AF:9A:3E:EF:95:B4:BB:BB:32:95:F3:29:30:AB:6C:47:F2:A0
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       11A73EF3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/noavmj7vlbS7uzKV8ykwq2xH8qA.roa
Signing time:             Sun 30 Jan 2022 21:06:57 +0000
ROA not before:           Sun 30 Jan 2022 21:06:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208753
IP address blocks:        2a0e:b107:380::/48 maxlen: 48
                          2a0e:b107:382::/48 maxlen: 48
                          2a0e:b107:383::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296173299 (0x11a73ef3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 30 21:06:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9e86af9a3eef95b4bbbb3295f32930ab6c47f2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6a:f3:ee:80:6a:1c:92:e9:9b:fd:2b:f1:6f:
                    05:2e:a6:99:c6:38:0d:ba:58:91:ce:98:c4:c8:f5:
                    f4:f6:ef:93:9c:29:56:aa:68:fb:8c:8b:aa:a0:6c:
                    4f:e2:93:ca:63:83:cc:3c:5e:ac:ca:c3:a1:ab:8d:
                    58:f4:e5:a6:b8:95:e4:98:c3:dd:68:19:43:a5:c0:
                    d6:32:05:98:d6:72:c1:d8:c0:a0:36:4e:c9:3e:56:
                    d5:dc:b9:80:a6:6a:22:c4:63:9c:12:0a:f0:3c:36:
                    3a:82:25:31:0d:60:c0:49:ad:4c:c7:32:02:e0:d4:
                    11:20:76:8e:3f:4a:67:95:f8:9c:c1:7d:4d:af:49:
                    37:1d:e1:01:b9:37:d1:04:e3:79:d8:08:bf:5a:1e:
                    0e:47:83:c3:ea:f0:5f:6c:d6:a4:ec:98:58:96:a6:
                    51:0d:81:3d:43:63:f6:64:27:80:b3:4b:df:87:da:
                    1b:65:ee:ae:b8:26:d5:87:ae:b6:8b:9c:60:68:ff:
                    c1:5f:c2:64:4f:80:a9:9d:1d:d4:10:13:9b:49:93:
                    81:ac:3b:84:e2:ea:78:79:66:09:58:3d:83:6d:be:
                    38:08:54:df:b8:fc:e4:84:67:c4:83:a5:1f:03:20:
                    85:a7:be:d0:2c:b7:71:ff:c6:4a:d5:03:86:20:c7:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:86:AF:9A:3E:EF:95:B4:BB:BB:32:95:F3:29:30:AB:6C:47:F2:A0
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/noavmj7vlbS7uzKV8ykwq2xH8qA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:380::/48
                  2a0e:b107:382::/47

    Signature Algorithm: sha256WithRSAEncryption
         1c:bf:50:60:22:f2:fc:e9:25:3b:0b:78:c5:12:a4:b4:a8:06:
         0d:08:5a:96:24:0f:cc:d9:15:e3:a7:74:66:28:a0:03:34:13:
         05:89:26:4f:52:ca:b9:5d:e3:ca:62:9b:0f:92:73:0e:c3:fa:
         d6:c7:65:96:e1:79:4f:7c:5c:d9:6d:57:38:36:a2:73:91:2a:
         87:9d:2a:08:a7:6b:0a:83:56:1a:d6:f9:9d:7b:62:c9:b2:8e:
         16:e4:55:4f:39:d2:30:b4:4e:61:47:ba:ac:77:c4:55:76:a6:
         fe:98:b9:99:57:9f:4c:09:1f:45:4b:eb:13:ba:47:2c:95:6f:
         c7:d4:9e:4c:f9:65:54:cd:54:d0:29:19:d0:ed:35:92:be:e4:
         fc:e9:52:8b:9a:fd:6e:b7:23:03:62:5b:56:8f:16:3e:ce:49:
         60:78:10:65:d9:15:b1:79:ad:e2:17:6b:11:27:08:27:2e:f3:
         2f:25:a0:6b:46:cf:79:46:47:dc:57:ec:d0:ac:74:f1:c7:e2:
         c7:a0:c0:45:be:8a:15:e1:ae:2a:3c:b5:e6:4d:2a:92:76:47:
         75:47:87:5f:aa:a8:3a:c7:75:0c:64:1d:db:0c:50:2c:cf:fa:
         43:92:d2:d5:33:13:76:34:82:d5:9d:f6:93:e6:f6:5e:02:03:
         87:6b:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----