Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vkyAqsLbJhU_dQM3fiwh56L8kP0.roa
File:                     vkyAqsLbJhU_dQM3fiwh56L8kP0.roa (raw, json)
Hash identifier:          Q8tVMNiE8/iYO4HP+y/HVC0lpTd3YrJRWJvvfAZIHEQ=
Subject key identifier:   BE:4C:80:AA:C2:DB:26:15:3F:75:03:37:7E:2C:21:E7:A2:FC:90:FD
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01843A602747B6E73CCEC0A4C154F759E049
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vkyAqsLbJhU_dQM3fiwh56L8kP0.roa
Signing time:             Wed 02 Nov 2022 22:04:50 +0000
ROA not before:           Wed 02 Nov 2022 22:04:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209606
IP address blocks:        2a0e:b107:a50::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:3a:60:27:47:b6:e7:3c:ce:c0:a4:c1:54:f7:59:e0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov  2 22:04:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=be4c80aac2db26153f7503377e2c21e7a2fc90fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:74:b6:ce:03:e6:e2:f6:41:3d:a1:b3:7a:
                    60:84:bc:05:75:8b:87:41:4c:52:fe:c3:2d:f4:f3:
                    b3:ca:fb:01:c1:00:ae:79:99:bb:39:ec:3e:b3:69:
                    0f:b2:86:b4:dd:1c:0f:26:11:62:63:14:c4:68:35:
                    a8:69:5d:aa:5f:4d:c8:8b:1d:21:91:57:b1:8d:50:
                    a1:dd:10:ee:66:08:7a:e4:ac:f3:c7:1c:b1:d0:70:
                    36:a7:80:b3:06:de:64:f6:64:f3:03:b2:2d:6b:41:
                    77:92:74:09:48:3a:42:7e:4e:20:a3:cb:7b:61:41:
                    50:df:37:94:23:d6:c9:90:4b:72:76:e1:43:35:31:
                    da:90:b0:5a:f1:13:36:57:2f:08:cc:f3:6f:a0:6d:
                    53:f1:f9:f3:f1:74:40:cb:9b:d8:b6:02:ee:b0:f7:
                    0f:5d:cd:bc:5d:84:c0:e1:b7:e7:29:00:1f:86:57:
                    22:69:3e:78:55:6c:44:b6:ee:8c:64:a2:04:21:0b:
                    98:fc:28:53:cc:38:6e:17:0c:5f:54:fe:09:00:20:
                    84:e8:84:4a:4a:62:d8:7a:7d:b9:2e:bc:2f:37:18:
                    98:eb:35:8f:03:19:1c:d1:25:e0:af:94:75:73:14:
                    0a:a7:b5:04:08:54:d1:21:ee:80:76:8b:39:b7:d1:
                    d6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4C:80:AA:C2:DB:26:15:3F:75:03:37:7E:2C:21:E7:A2:FC:90:FD
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vkyAqsLbJhU_dQM3fiwh56L8kP0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:a50::/44

    Signature Algorithm: sha256WithRSAEncryption
         45:67:17:3d:22:8e:2e:0e:36:77:ee:66:24:13:82:f2:3e:84:
         14:0a:67:93:5d:24:ec:0c:0e:1e:83:18:1d:3e:df:db:75:36:
         9a:26:17:fb:dc:85:09:9a:d5:59:6c:bc:b0:1c:90:6f:d9:9d:
         81:45:3b:c1:13:e8:a0:a1:38:1f:5b:40:fc:10:a8:4d:68:27:
         ca:cd:a6:ca:6d:9f:08:df:83:fd:4d:2d:d5:17:e7:86:be:66:
         9a:5b:17:e0:1c:fb:02:2a:20:ee:c8:dd:e5:1b:ea:93:8e:a5:
         95:06:54:93:60:3b:04:0b:48:2b:a9:09:7a:42:82:bf:7f:58:
         a0:3f:47:ef:e2:2b:31:dd:cb:bf:26:6a:31:f2:8c:90:46:34:
         ba:a2:94:a5:88:09:a8:1f:83:49:3c:c8:9c:39:a9:67:ee:90:
         49:d0:2a:9b:3a:39:06:17:a4:17:e9:b5:ee:e3:aa:65:f4:20:
         26:dc:3b:6b:40:a7:0d:44:9f:09:8b:02:b8:29:d1:97:9e:7a:
         3b:0b:cd:ce:99:11:22:45:8a:01:63:26:67:fa:06:77:79:81:
         48:87:e3:b7:37:42:51:32:d9:7c:55:85:c8:be:58:ab:52:4a:
         b3:8f:a2:93:34:5d:78:12:1c:84:99:10:fa:38:ec:b3:22:07:
         94:4e:e4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----