Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ruU936sagG5sqZBAEwYgqQESWD4.roa
File:                     ruU936sagG5sqZBAEwYgqQESWD4.roa (raw, json)
Hash identifier:          h78NeqO/6m2AuyJKoliA6t+d7++2Ur4rgu035Ei313w=
Subject key identifier:   AE:E5:3D:DF:AB:1A:80:6E:6C:A9:90:40:13:06:20:A9:01:12:58:3E
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       1161353C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ruU936sagG5sqZBAEwYgqQESWD4.roa
Signing time:             Wed 19 Jan 2022 05:37:34 +0000
ROA not before:           Wed 19 Jan 2022 05:37:34 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142055
IP address blocks:        2a0e:b107:1170::/48 maxlen: 48
                          2a0e:b107:df5::/48 maxlen: 48
                          2a0e:b107:1171::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291583292 (0x1161353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 19 05:37:34 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aee53ddfab1a806e6ca99040130620a90112583e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0d:5c:22:83:bc:70:62:eb:65:d1:a3:2b:10:
                    0a:09:02:74:5f:a4:d9:d7:f6:a7:8c:1a:df:f1:67:
                    24:9a:d6:f1:f3:78:dd:c1:13:12:69:5c:8d:c7:ff:
                    68:bd:42:45:88:1e:fa:69:f4:aa:c0:b1:67:61:85:
                    1c:c3:b8:2f:28:ce:42:27:58:69:2a:35:16:eb:b3:
                    db:66:7a:4e:da:d1:7a:d9:6b:6b:13:a3:12:bc:60:
                    51:d4:4c:fd:53:57:bc:b0:f3:a6:9d:66:ff:24:c6:
                    48:14:bb:e6:67:00:c4:e3:ea:55:cd:97:7d:2c:6f:
                    a1:7a:3b:4e:93:f2:36:cd:55:cf:ec:7a:50:0e:8b:
                    1c:50:8f:6a:89:93:6f:20:f6:83:a9:27:94:11:cd:
                    18:7f:a0:1a:3d:ed:70:e3:3f:5d:44:5a:61:15:60:
                    4b:28:48:b5:5e:58:f6:15:60:9f:2d:48:bc:e3:6f:
                    54:d6:97:12:58:d0:2b:0d:0d:83:16:96:7b:b8:4e:
                    45:c3:5a:3a:3a:3f:b2:76:ca:04:c1:31:77:e7:aa:
                    81:67:72:e9:4b:28:06:b9:b9:bc:cf:c1:a9:85:10:
                    15:32:a5:63:a4:33:5b:2b:78:58:19:3b:08:e0:41:
                    52:e2:ae:55:5c:fa:ca:c5:b2:f7:45:23:1c:47:c2:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E5:3D:DF:AB:1A:80:6E:6C:A9:90:40:13:06:20:A9:01:12:58:3E
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ruU936sagG5sqZBAEwYgqQESWD4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:df5::/48
                  2a0e:b107:1170::/47

    Signature Algorithm: sha256WithRSAEncryption
         25:61:60:38:c6:bb:85:d0:1c:5b:2a:4a:04:b8:cf:97:0e:84:
         3f:91:85:2c:cf:9a:77:dd:4d:46:be:fe:3b:70:6d:45:ec:dc:
         e7:3d:a8:5c:53:06:c1:35:55:dc:6e:2b:63:fb:5f:cd:69:15:
         b6:0b:e7:77:2a:09:71:6f:aa:9d:aa:a6:b6:26:b8:a4:a2:b2:
         f1:e7:a5:c5:62:d9:91:3a:ed:b1:f5:50:f7:b2:90:65:ba:80:
         e1:d0:67:6d:c4:9e:03:43:75:83:20:e8:ca:93:de:e5:9b:ec:
         cc:39:04:d2:5b:b7:f4:2f:ac:4a:5b:b9:88:7e:42:db:79:a0:
         eb:2e:d4:0f:34:fa:5a:d0:57:ff:4b:a8:51:bf:6f:d3:f6:1c:
         29:d9:ad:95:e0:26:15:44:aa:54:43:ea:1f:53:0c:0a:c7:3d:
         8a:0c:45:20:49:06:50:a5:cb:69:19:b4:99:c1:b1:44:d5:80:
         46:09:ee:6f:10:b5:fe:f5:be:81:2b:f3:c3:43:37:cd:b7:3d:
         3d:d4:e2:c5:b6:53:4e:2d:12:03:51:a8:61:95:6b:c3:3e:23:
         5b:51:55:bc:89:68:9f:58:5d:41:20:21:39:3f:5e:42:1a:37:
         aa:85:ec:94:c9:95:8f:f6:f4:6c:49:3f:68:ed:fd:0a:24:04:
         2e:3c:c6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----