Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sEu041C-CKCixeap-IohYmgr-mU.roa
File:                     sEu041C-CKCixeap-IohYmgr-mU.roa (raw, json)
Hash identifier:          wBZl3yB61/ibWHem5swXfjWOwAr1xJ/m0Fi1x3y+60g=
Subject key identifier:   B0:4B:B4:E3:50:BE:08:A0:A2:C5:E6:A9:F8:8A:21:62:68:2B:FA:65
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       109214B7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sEu041C-CKCixeap-IohYmgr-mU.roa
Signing time:             Sat 01 Jan 2022 09:05:01 +0000
ROA not before:           Sat 01 Jan 2022 09:05:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200303
IP address blocks:        2a0e:97c0:180::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278009015 (0x109214b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b04bb4e350be08a0a2c5e6a9f88a2162682bfa65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:f6:df:7b:63:f8:a7:bb:4d:39:5f:af:67:
                    ff:4a:b3:66:47:e4:28:e5:83:d8:d8:da:12:24:bc:
                    60:76:7d:be:6f:5e:db:11:f0:c0:80:a2:ba:9b:3a:
                    c5:6b:78:ff:80:21:22:b5:01:22:bd:b5:f8:d1:77:
                    41:7e:62:b1:fe:47:e3:d2:15:be:7f:b9:dc:37:ad:
                    cd:a8:51:24:ca:b3:6e:d9:e9:29:43:15:73:5a:0a:
                    53:39:cc:6f:35:1f:c2:24:66:36:b3:63:73:8d:82:
                    27:d8:0f:e4:ae:c8:28:2e:cf:35:4d:08:25:52:32:
                    5e:8e:3e:42:47:1e:cd:f5:35:ea:6d:c2:a4:4a:2c:
                    0a:63:8d:f8:77:56:d0:5f:1d:29:53:52:6d:cf:09:
                    01:d5:97:d7:6d:7f:e6:5a:2b:ff:b7:26:e4:c7:10:
                    66:6b:1c:1f:a6:27:48:be:0e:89:2b:27:8f:71:8c:
                    3e:96:95:f9:0e:5f:43:b5:2c:b7:c0:14:14:1e:f7:
                    23:3e:b0:ee:70:49:54:80:08:96:7f:88:9e:ce:ec:
                    2b:c1:b2:80:3f:54:7a:3f:c2:0d:7d:d9:11:ce:8b:
                    5c:da:2d:f0:4a:af:a3:cb:69:f9:d1:6f:8d:b1:4a:
                    0a:0f:6a:05:7b:86:09:b7:6c:25:9b:30:90:95:54:
                    5c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4B:B4:E3:50:BE:08:A0:A2:C5:E6:A9:F8:8A:21:62:68:2B:FA:65
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/sEu041C-CKCixeap-IohYmgr-mU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:180::/44

    Signature Algorithm: sha256WithRSAEncryption
         80:31:86:74:d1:cd:93:58:3a:53:37:95:08:68:68:95:33:a7:
         6b:6f:4a:0f:72:40:98:0a:03:82:e3:56:a0:5a:0d:b9:18:53:
         48:89:fd:4f:ee:15:c7:1b:1e:36:a5:65:b5:18:17:c0:2b:43:
         c8:3e:3d:87:6b:bd:68:fd:89:bf:36:7b:65:3d:58:79:e9:65:
         50:51:f9:20:b7:12:0a:22:ee:1d:dd:e1:bc:22:43:46:d5:a9:
         9e:f9:b8:92:62:e4:83:78:4c:4c:96:46:f5:da:6d:b1:60:16:
         a0:49:4d:d4:2a:ca:25:cf:05:42:bd:ad:34:96:9a:d2:cd:d0:
         06:02:5b:61:92:f6:8b:c9:02:c1:5d:c5:6b:19:ae:d0:d8:61:
         d9:46:b3:3e:32:fb:2f:5a:88:ca:52:0f:1d:3f:7b:1a:00:b5:
         74:d6:d3:b1:f6:87:d2:1e:4e:50:69:f0:79:60:f8:25:6d:22:
         69:7a:c7:b3:29:62:f0:9b:16:99:9e:59:9f:21:50:08:9e:a5:
         13:f1:25:4b:37:f3:0d:c9:58:5b:44:65:74:2d:ef:6d:d8:ed:
         41:75:f7:7b:57:7e:6f:ba:c0:78:c9:d5:f1:fe:70:79:2f:a2:
         29:93:b9:0a:29:09:bc:94:6a:77:47:b5:53:56:63:7f:2f:fe:
         68:5b:4c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----