Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s-j3OZdxQ0LQM_juFUUGgFURngQ.roa
File:                     s-j3OZdxQ0LQM_juFUUGgFURngQ.roa (raw, json)
Hash identifier:          9AiAryOYZbKNYyV0XZXgNnWC2myqDh1xBfXOTnuhYVk=
Subject key identifier:   B3:E8:F7:39:97:71:43:42:D0:33:F8:EE:15:45:06:80:55:11:9E:04
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018468CEA6E0BF2B1E4ED9B70BC5F360B44F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s-j3OZdxQ0LQM_juFUUGgFURngQ.roa
Signing time:             Fri 11 Nov 2022 22:28:04 +0000
ROA not before:           Fri 11 Nov 2022 22:28:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197071
IP address blocks:        2a0e:97c0:3e4::/48 maxlen: 48
                          2a0e:97c0:3e2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:68:ce:a6:e0:bf:2b:1e:4e:d9:b7:0b:c5:f3:60:b4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 11 22:28:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b3e8f73997714342d033f8ee1545068055119e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:87:99:45:55:f0:e7:08:68:01:1c:1d:1f:
                    4b:a9:8d:8f:fb:b4:8f:a7:87:f0:9b:ef:b3:d5:74:
                    db:7e:af:6b:5a:0e:bf:c0:b9:11:6e:83:d7:58:73:
                    5a:9d:1c:ba:a7:df:b8:02:93:1b:b3:d6:b7:69:d2:
                    08:03:ed:6c:0b:a8:e0:16:55:71:4b:e7:ab:d1:aa:
                    28:f3:e4:eb:10:84:d2:61:5a:07:2a:db:89:6d:7d:
                    e8:eb:34:a1:4a:32:4c:94:90:fc:cf:90:e1:00:ff:
                    0b:fd:b6:e3:92:8d:5b:47:09:da:e0:b8:5a:2a:df:
                    6b:7b:22:1a:11:54:cb:2f:3b:01:95:66:de:51:ec:
                    ce:8b:b5:8b:57:10:73:b6:1b:f2:de:2c:a9:57:b2:
                    63:bd:8f:43:2d:c0:98:a8:7d:10:30:87:89:11:6c:
                    6d:1b:73:62:d0:22:03:75:fb:80:ac:6c:6d:08:64:
                    4c:35:fe:ff:46:a7:df:3f:dc:36:fb:2c:b7:02:3c:
                    fd:31:e4:99:76:5c:47:c6:19:fa:32:f2:5b:35:22:
                    be:bc:43:76:84:21:fe:76:6f:83:b4:d0:1c:39:c4:
                    b5:74:0b:d4:f7:df:d9:cc:cf:6f:e0:f0:22:73:32:
                    85:99:26:6a:c7:c2:f1:2d:cc:ca:48:2a:bd:83:6a:
                    fa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E8:F7:39:97:71:43:42:D0:33:F8:EE:15:45:06:80:55:11:9E:04
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s-j3OZdxQ0LQM_juFUUGgFURngQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:3e2::/48
                  2a0e:97c0:3e4::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:d0:7b:11:9a:38:b6:e1:db:e6:9b:35:89:f0:7d:e6:b1:e5:
         7f:fe:d8:91:14:92:b2:7f:30:60:df:89:ba:0e:cb:58:15:9c:
         94:5a:83:ee:69:ee:14:3e:b0:14:29:e4:83:6a:a3:d6:e5:87:
         ba:4c:7f:50:26:1b:82:a0:62:eb:82:23:ff:07:d4:da:43:01:
         89:87:94:69:a6:19:a4:ee:b6:e7:92:4a:c0:5a:ce:eb:33:0d:
         e3:0b:b9:2d:96:ac:d7:a2:48:32:e2:91:9d:7d:f6:10:7e:59:
         32:8f:66:5d:f0:33:0b:9b:88:e5:7c:92:1e:2e:7d:99:48:b6:
         bb:75:0a:5c:11:c5:6b:19:3a:62:32:d5:dc:5d:ca:1c:2a:0e:
         0e:ad:47:a6:74:e8:28:b3:9f:15:92:18:b9:5a:69:05:29:d5:
         87:45:e6:cc:ba:12:23:44:4a:8f:8c:7a:8d:cf:86:75:5f:4c:
         11:81:72:36:0e:f6:b3:fc:40:f1:fc:f7:cb:1a:8f:cb:7f:a0:
         ab:1c:55:bc:39:28:03:45:07:c7:e7:21:4d:a3:e8:b8:14:7b:
         7f:6c:8d:6c:1d:68:2e:dd:da:d9:49:d8:b9:b3:23:9f:7b:12:
         26:9b:b8:81:14:33:6f:c0:fc:67:11:5c:cf:f3:3b:3d:b7:51:
         f0:63:71:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----