Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uGBqWkhlqAsiuXLm9H-mn_KHi6c.roa
File:                     uGBqWkhlqAsiuXLm9H-mn_KHi6c.roa (raw, json)
Hash identifier:          jUL6rvxVnhyoqVq1yNhKfiw+ka0a7rMQ05WQGdXUE80=
Subject key identifier:   B8:60:6A:5A:48:65:A8:0B:22:B9:72:E6:F4:7F:A6:9F:F2:87:8B:A7
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018426A535833B66DE13D26E091B3C9F4EB6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uGBqWkhlqAsiuXLm9H-mn_KHi6c.roa
Signing time:             Sun 30 Oct 2022 02:07:52 +0000
ROA not before:           Sun 30 Oct 2022 02:07:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     142382
IP address blocks:        2a0e:b107:1790::/48 maxlen: 48
                          2a0e:b107:1795::/48 maxlen: 48
                          2a0e:b107:1792::/48 maxlen: 48
                          2a0e:b107:1794::/48 maxlen: 48
                          2a0e:b107:1791::/48 maxlen: 48
                          2a0e:b107:1793::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:26:a5:35:83:3b:66:de:13:d2:6e:09:1b:3c:9f:4e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 30 02:07:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b8606a5a4865a80b22b972e6f47fa69ff2878ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:15:19:97:93:4c:62:97:59:80:a3:86:0d:
                    6b:2c:ad:8a:32:dc:34:db:61:c2:c7:4d:b3:87:1b:
                    8a:4b:18:c4:f4:a7:bd:bd:12:65:1a:96:fd:43:0c:
                    56:6a:c2:b1:3b:c0:a7:f9:6f:a9:af:65:ae:95:ea:
                    8f:f6:98:61:97:78:51:b1:38:eb:31:b3:04:86:1d:
                    30:43:2a:95:93:fb:ea:cf:e9:7b:aa:b1:20:0d:4e:
                    36:72:0c:14:ed:12:26:cb:a3:e7:ea:a2:3a:46:44:
                    27:2f:1e:48:50:38:32:46:b1:6a:09:eb:30:ec:ac:
                    bc:ad:63:09:67:17:e9:8c:a4:b1:5b:08:08:50:e6:
                    72:3a:f3:b1:3d:15:bc:3b:ed:ff:53:6c:f8:e2:bc:
                    5b:c5:5a:cf:45:2d:5c:29:f3:72:59:79:c7:b7:d2:
                    cb:d5:7a:1f:78:e8:e8:07:64:5f:22:69:2b:f3:c5:
                    0d:c1:f2:6e:99:36:21:b2:30:4d:14:df:68:67:bb:
                    1a:30:e7:e0:fb:25:c2:c3:83:1c:5e:41:96:dd:e5:
                    fa:6d:52:65:67:89:c9:80:a6:1d:9f:02:54:21:1b:
                    0a:45:2e:90:96:85:de:94:cb:67:16:5d:ab:3b:b7:
                    b5:4a:f7:a6:cc:17:f0:ba:01:61:e0:23:43:24:33:
                    58:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:60:6A:5A:48:65:A8:0B:22:B9:72:E6:F4:7F:A6:9F:F2:87:8B:A7
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uGBqWkhlqAsiuXLm9H-mn_KHi6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1790::-2a0e:b107:1795:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         8a:6b:50:84:e0:ad:dd:1b:f1:d1:0c:fb:e3:cf:94:03:f2:54:
         e1:0f:40:9d:3d:5b:c4:3b:6e:3c:08:df:db:94:d0:71:ab:53:
         a1:c1:d7:08:a0:36:5b:85:32:a3:c6:68:8b:35:a6:6b:95:08:
         54:28:dc:f4:6c:90:28:7f:d3:5f:d3:12:f1:14:e8:cd:9e:7a:
         ff:f8:c9:39:54:0e:57:8b:e7:ed:4d:97:df:23:16:e1:e8:27:
         ce:78:de:ee:74:46:ef:0b:f8:39:8a:bd:03:1a:90:39:8c:98:
         fd:6e:5c:87:4d:48:7b:9e:12:83:79:2c:ca:27:c0:04:55:f9:
         5b:85:70:e1:d7:a4:c2:70:cd:c4:e8:99:2f:bf:5b:45:e4:00:
         39:0b:cd:b7:08:4b:75:dc:61:f3:aa:91:5c:77:47:5a:ad:da:
         3b:51:d0:c9:24:c5:06:cd:ee:83:77:8d:bb:6a:69:02:e1:e7:
         56:58:61:58:0d:f0:58:2c:78:a5:56:21:b3:d5:64:db:bd:dd:
         f9:23:a5:57:76:62:2d:b5:19:40:44:7e:4d:1b:7c:70:2a:26:
         04:ae:97:3c:b1:ff:58:e9:0e:16:6b:47:36:d3:c0:a2:01:ac:
         25:3c:16:6e:56:50:03:8e:40:a0:db:29:25:ab:22:fb:a7:35:
         11:de:54:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----