Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qz8eionRrkyJdac8skVq62k0gGE.roa
File:                     qz8eionRrkyJdac8skVq62k0gGE.roa (raw, json)
Hash identifier:          +/Vb5QjZtHDh33YiZeBr1D7/icjb/51pEgZnrNg/oKY=
Subject key identifier:   AB:3F:1E:8A:89:D1:AE:4C:89:75:A7:3C:B2:45:6A:EB:69:34:80:61
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01820D98C051248DA91C6C4A8494CF531E74
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qz8eionRrkyJdac8skVq62k0gGE.roa
Signing time:             Sun 17 Jul 2022 19:18:10 +0000
ROA not before:           Sun 17 Jul 2022 19:18:10 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210888
IP address blocks:        2a10:2f00:173::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:0d:98:c0:51:24:8d:a9:1c:6c:4a:84:94:cf:53:1e:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul 17 19:18:10 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ab3f1e8a89d1ae4c8975a73cb2456aeb69348061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:18:44:dc:77:b6:94:d6:67:ad:27:4d:7d:0e:
                    a2:5f:47:85:71:3d:ec:6d:f0:ac:97:b1:a7:37:bb:
                    98:eb:ab:3e:48:0b:9f:ec:46:85:3a:c9:11:fa:62:
                    2c:e6:01:2c:71:76:89:d8:f4:a1:0f:d8:73:bd:8d:
                    29:b0:67:01:22:97:85:30:16:44:2d:59:c8:37:dd:
                    fa:43:a8:cf:66:cd:b8:9a:0d:14:d3:68:6d:1c:fe:
                    bd:0d:71:40:47:c1:ab:90:88:a3:c9:b6:0e:80:64:
                    41:4d:a7:47:60:26:af:51:b1:c7:d5:fb:e5:3f:70:
                    b5:ad:e7:af:29:0b:b8:68:34:2b:1e:f0:8f:f0:b2:
                    50:b2:54:7b:7d:b8:de:40:d8:8f:5f:90:73:87:09:
                    42:6a:ef:1e:ea:a6:2d:53:23:42:2c:b5:aa:a6:c8:
                    35:7c:4b:ca:11:d6:63:ee:35:6d:21:9d:47:a4:2a:
                    76:29:2f:50:ea:93:16:56:bd:87:d7:cd:b2:30:52:
                    8f:68:e6:10:5f:56:5b:c6:74:f9:c7:06:04:bc:c6:
                    4a:74:5e:04:f7:6b:f6:53:46:99:ad:36:6e:96:7e:
                    07:9d:48:cc:83:63:ef:26:e8:ae:90:70:22:06:88:
                    16:34:f6:37:11:4e:d5:e8:20:c7:04:77:49:7e:a9:
                    2c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3F:1E:8A:89:D1:AE:4C:89:75:A7:3C:B2:45:6A:EB:69:34:80:61
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qz8eionRrkyJdac8skVq62k0gGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:2f00:173::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:8d:07:7d:0f:2f:ee:2b:fa:50:6a:9a:b8:4b:a2:f2:cc:4d:
         db:f3:df:e4:d6:16:38:f4:40:b0:5b:c9:af:ca:fc:e5:62:c5:
         31:23:ae:bf:63:e9:ed:5d:ab:d8:e4:76:56:b1:4b:06:77:6c:
         31:44:ee:89:15:c8:7a:a0:8b:07:03:88:1f:bb:6a:2c:16:3d:
         d7:8c:69:09:8f:84:05:be:59:1c:74:e8:bf:21:6b:45:5e:ac:
         34:1a:ed:0c:fe:94:cf:02:6b:fb:6b:6b:97:6b:05:4e:ef:43:
         28:5a:6b:03:f5:6e:e7:16:c2:83:13:1d:a7:75:80:62:ae:2c:
         07:50:2b:78:72:fc:dd:a8:2e:2b:1c:5f:ab:5e:b2:05:d8:79:
         62:57:ba:1f:c6:01:9e:e5:93:e7:9f:1b:cb:10:2a:dc:3a:df:
         af:d5:cd:c0:c3:cd:8e:b0:1b:ef:37:09:34:d1:c8:9f:da:7d:
         34:c2:49:14:c5:18:7c:f3:bc:97:35:38:b9:7b:03:8e:e3:81:
         63:96:e3:8b:ad:e2:c8:21:32:24:62:be:f0:05:b7:a8:9f:4d:
         73:b2:a0:d5:ec:cc:8a:13:a2:c5:8d:00:79:2b:57:60:9c:19:
         ed:d3:44:d2:d2:28:0b:89:6a:b4:db:55:bc:1e:7c:b5:b5:a5:
         12:49:47:93
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYINmMBRJI2pHGxKhJTPUx50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjIwNzE3MTkxODEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjNmMWU4YTg5ZDFhZTRjODk3NWE3M2NiMjQ1NmFlYjY5MzQ4MDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRhE3He2lNZnrSdNfQ6iX0eFcT3s
bfCsl7GnN7uY66s+SAuf7EaFOskR+mIs5gEscXaJ2PShD9hzvY0psGcBIpeFMBZE
LVnIN936Q6jPZs24mg0U02htHP69DXFAR8GrkIijybYOgGRBTadHYCavUbHH1fvl
P3C1reevKQu4aDQrHvCP8LJQslR7fbjeQNiPX5BzhwlCau8e6qYtUyNCLLWqpsg1
fEvKEdZj7jVtIZ1HpCp2KS9Q6pMWVr2H182yMFKPaOYQX1ZbxnT5xwYEvMZKdF4E
92v2U0aZrTZuln4HnUjMg2PvJuiukHAiBogWNPY3EU7V6CDHBHdJfqksJQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKs/HoqJ0a5MiXWnPLJFautpNIBhMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvcXo4ZWlvblJya3lKZGFjOHNrVnE2MmswZ0dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhAvAAFz
MA0GCSqGSIb3DQEBCwUAA4IBAQBdjQd9Dy/uK/pQapq4S6LyzE3b89/k1hY49ECw
W8mvyvzlYsUxI66/Y+ntXavY5HZWsUsGd2wxRO6JFch6oIsHA4gfu2osFj3XjGkJ
j4QFvlkcdOi/IWtFXqw0Gu0M/pTPAmv7a2uXawVO70MoWmsD9W7nFsKDEx2ndYBi
riwHUCt4cvzdqC4rHF+rXrIF2HliV7ofxgGe5ZPnnxvLECrcOt+v1c3Aw82OsBvv
Nwk00cif2n00wkkUxRh887yXNTi5ewOO44FjluOLreLIITIkYr7wBbeon01zsqDV
7MyKE6LFjQB5K1dgnBnt00TS0igLiWq021W8Hny1taUSSUeT
-----END CERTIFICATE-----