Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vXwuROaPD-xo9mKaayEOE2C082I.roa
File:                     vXwuROaPD-xo9mKaayEOE2C082I.roa (raw, json)
Hash identifier:          oYGOcy5N4npWwd7Fh/RKfLNsOHy/VAUZe++/ESiBVmc=
Subject key identifier:   BD:7C:2E:44:E6:8F:0F:EC:68:F6:62:9A:6B:21:0E:13:60:B4:F3:62
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       10F4C05E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vXwuROaPD-xo9mKaayEOE2C082I.roa
Signing time:             Sat 01 Jan 2022 09:05:58 +0000
ROA not before:           Sat 01 Jan 2022 09:05:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213215
IP address blocks:        2a0e:b107:a20::/44 maxlen: 48
                          2a0e:b107:6e3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284475486 (0x10f4c05e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  1 09:05:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bd7c2e44e68f0fec68f6629a6b210e1360b4f362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4f:1e:1a:55:1c:7c:4e:fd:94:2f:63:de:be:
                    32:dd:b4:da:8a:5e:91:87:a2:da:d9:95:b0:20:4e:
                    8a:9c:9c:78:57:1b:82:95:ac:2b:6d:09:1f:32:6d:
                    05:b6:4b:21:38:4d:10:96:c9:fc:bc:96:ed:3e:8c:
                    82:b6:09:e4:2d:ca:49:6e:56:a9:2a:e9:6d:76:34:
                    ce:92:93:cf:99:31:f8:4c:51:a1:2c:55:49:39:a6:
                    b8:24:bd:0d:79:ee:e6:6f:00:0a:52:22:32:b0:e7:
                    73:1f:e2:8a:be:db:bf:d6:5b:4d:8b:63:ba:b6:8e:
                    08:06:10:45:ef:03:b9:6e:46:5d:c4:3a:79:5c:4b:
                    c3:64:91:84:72:48:b8:e0:80:64:d1:49:d4:86:aa:
                    bb:47:30:82:2a:75:14:e4:4c:e2:32:84:20:31:42:
                    d6:dd:08:61:04:05:fd:9b:16:04:53:0d:5e:0b:ab:
                    4f:ed:05:81:28:05:b9:69:02:e6:d0:27:4a:ef:a8:
                    12:0c:69:ce:3a:6c:a6:ed:47:1d:8d:b6:84:f4:a6:
                    cf:fd:ee:2e:a1:70:bb:97:fc:35:6d:86:80:bd:d3:
                    57:3f:3d:00:45:75:f8:a9:a5:13:81:55:0b:57:7e:
                    fb:76:b2:dd:24:c9:88:61:8b:b4:6d:62:72:29:6c:
                    25:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7C:2E:44:E6:8F:0F:EC:68:F6:62:9A:6B:21:0E:13:60:B4:F3:62
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vXwuROaPD-xo9mKaayEOE2C082I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:6e3::/48
                  2a0e:b107:a20::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:4d:bd:dc:58:ab:12:82:3e:5b:90:5e:36:06:05:65:cb:e5:
         a6:9d:38:61:e4:6b:64:1a:79:1d:e4:8f:91:b7:4f:15:40:df:
         55:44:c7:7d:c1:7e:a7:65:c1:64:87:32:b1:7d:13:a1:98:e0:
         fe:25:96:6b:25:fe:12:1b:99:83:e9:f3:d5:c9:41:99:21:fc:
         e7:b5:b4:79:64:af:0f:f8:b2:0b:5f:ca:e4:55:a0:9c:ae:ba:
         8a:ce:51:18:56:e8:b8:8b:4c:57:41:bb:8f:df:07:7d:3c:df:
         02:1d:37:33:40:c0:a9:20:2c:e6:b4:ba:d9:47:60:2d:d0:7e:
         46:f0:54:61:f8:3b:b1:f5:eb:7e:d1:bf:56:8c:7c:26:eb:17:
         51:5f:da:e8:a5:a7:8c:81:9f:59:57:84:29:f6:b9:85:2e:c8:
         fa:9a:0f:9f:0e:37:d1:6d:8d:30:90:cc:d4:d9:c7:a2:1c:34:
         79:92:dc:a8:13:fb:d7:98:d0:47:0c:08:e2:4d:f4:1c:bb:34:
         50:4e:bf:84:85:07:1d:4b:f7:67:65:ac:4e:c8:9c:f5:83:0c:
         da:52:43:57:54:f0:4b:5b:c9:51:ae:65:2e:e0:44:b2:46:d7:
         d3:a1:af:eb:00:92:3e:58:c1:34:84:ca:e2:a8:50:0b:d0:da:
         16:61:59:68
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEEPTAXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2U5MTY3MTdhYjExY2NjZjExZWYxZmI1YzEyZWU0MTk1MGZhZDliMB4XDTIyMDEw
MTA5MDU1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmQ3YzJlNDRlNjhm
MGZlYzY4ZjY2MjlhNmIyMTBlMTM2MGI0ZjM2MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMRPHhpVHHxO/ZQvY96+Mt202opekYei2tmVsCBOipyceFcb
gpWsK20JHzJtBbZLIThNEJbJ/LyW7T6MgrYJ5C3KSW5WqSrpbXY0zpKTz5kx+ExR
oSxVSTmmuCS9DXnu5m8AClIiMrDncx/iir7bv9ZbTYtjuraOCAYQRe8DuW5GXcQ6
eVxLw2SRhHJIuOCAZNFJ1Iaqu0cwgip1FORM4jKEIDFC1t0IYQQF/ZsWBFMNXgur
T+0FgSgFuWkC5tAnSu+oEgxpzjpspu1HHY22hPSmz/3uLqFwu5f8NW2GgL3TVz89
AEV1+KmlE4FVC1d++3ay3STJiGGLtG1icilsJUsCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBS9fC5E5o8P7Gj2YpprIQ4TYLTzYjAfBgNVHSMEGDAWgBRj6RZxerEczPEe
8ftcEu5BlQ+tmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1kta1djWHF4SE16eEh2SDdYQkx1UVpVUHJacy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTEvNDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8x
L3ZYd3VST2FQRC14bzltS2FheUVPRTJDMDgySS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEv
NDk1N2E0LWNlNTktNDMxNS05OTc2LWRjNWVjNzQ4ZjZhNS8xL1kta1djWHF4SE16
eEh2SDdYQkx1UVpVUHJacy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAIwEgMHACoOsQcG4wMHBCoOsQcKIDANBgkq
hkiG9w0BAQsFAAOCAQEATk293FirEoI+W5BeNgYFZcvlpp04YeRrZBp5HeSPkbdP
FUDfVUTHfcF+p2XBZIcysX0ToZjg/iWWayX+EhuZg+nz1clBmSH857W0eWSvD/iy
C1/K5FWgnK66is5RGFbouItMV0G7j98HfTzfAh03M0DAqSAs5rS62UdgLdB+RvBU
Yfg7sfXrftG/Vox8JusXUV/a6KWnjIGfWVeEKfa5hS7I+poPnw430W2NMJDM1NnH
ohw0eZLcqBP715jQRwwI4k30HLs0UE6/hIUHHUv3Z2WsTsic9YMM2lJDV1TwS1vJ
Ua5lLuBEskbX06Gv6wCSPljBNITK4qhQC9DaFmFZaA==
-----END CERTIFICATE-----