Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vvZ_MZ5sJny-07HtrEwEGdA2pHI.roa
File:                     vvZ_MZ5sJny-07HtrEwEGdA2pHI.roa (raw, json)
Hash identifier:          UHXXHP7stRESBJN8gTQeYXsqI9kKQZzwQ/AACSuTxpc=
Subject key identifier:   BE:F6:7F:31:9E:6C:26:7C:BE:D3:B1:ED:AC:4C:04:19:D0:36:A4:72
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0183E9F1F96D29F64DAC6EECACEF8DA8C71C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vvZ_MZ5sJny-07HtrEwEGdA2pHI.roa
Signing time:             Tue 18 Oct 2022 07:14:52 +0000
ROA not before:           Tue 18 Oct 2022 07:14:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202256
IP address blocks:        2a0e:97c6:4400::/40 maxlen: 48
                          2a0e:97c6:4000::/34 maxlen: 48
                          2a0e:97c6:4200::/40 maxlen: 48
                          2a10:cc42:1900::/40 maxlen: 48
                          2a10:cc42:1a00::/40 maxlen: 48
                          2a10:cc42:1b00::/40 maxlen: 48
                          2a10:cc42:1700::/40 maxlen: 48
                          2a10:cc42:1000::/40 maxlen: 48
                          2a10:cc42:1000::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:e9:f1:f9:6d:29:f6:4d:ac:6e:ec:ac:ef:8d:a8:c7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Oct 18 07:14:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bef67f319e6c267cbed3b1edac4c0419d036a472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5d:c6:f8:05:5b:f8:55:b2:2a:ce:43:10:4e:
                    94:0c:cc:21:58:91:ca:43:ce:ae:55:bc:aa:a5:51:
                    97:82:28:41:92:fe:48:b5:21:f6:8a:d7:20:03:82:
                    a0:14:c7:5f:a2:ac:e2:b3:78:1e:08:bd:c5:24:28:
                    6d:37:f6:1d:df:13:2a:a2:2e:00:5c:f6:d6:77:2a:
                    49:b0:c8:34:e3:d1:d2:1a:98:01:b5:fb:6b:71:26:
                    2f:c2:a1:cc:57:7a:94:b3:da:2a:49:d9:e9:d3:22:
                    42:93:3e:ad:fc:fe:96:60:4b:85:37:6b:0a:bc:7a:
                    26:7c:ec:1b:a5:e6:d9:e2:55:87:79:ca:f0:2d:f2:
                    60:e1:13:ba:5c:38:92:e6:34:cd:d3:66:af:4b:23:
                    a9:3c:de:fc:73:36:ce:58:36:3d:ce:8f:81:1f:23:
                    db:6f:17:c0:96:b7:0f:08:a1:b6:4a:25:d5:99:03:
                    b3:1e:db:75:fc:a7:7b:2d:f7:ba:58:1b:a0:2b:2a:
                    f4:4f:dd:a1:37:7b:63:40:5c:ab:23:5c:cc:68:1a:
                    24:33:59:c0:67:32:4c:f3:bd:1f:0a:88:5a:96:b0:
                    2c:2b:c9:fe:c1:1f:fe:8a:78:50:e7:f4:52:26:ca:
                    8b:b6:14:01:0c:cb:65:71:c0:52:3f:0c:d9:e8:d6:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F6:7F:31:9E:6C:26:7C:BE:D3:B1:ED:AC:4C:04:19:D0:36:A4:72
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vvZ_MZ5sJny-07HtrEwEGdA2pHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c6:4000::/34
                  2a10:cc42:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b5:8a:2b:7c:fb:ff:c6:b0:6e:ef:66:ee:26:44:70:c7:58:42:
         02:eb:e3:9f:14:6c:99:cd:6b:8c:f4:4f:cd:e7:ab:68:d4:80:
         06:ef:52:4c:b9:23:89:67:17:15:37:09:ec:2b:94:a0:6c:23:
         93:bd:12:89:fe:d4:dc:de:61:65:f1:78:68:6a:19:e3:8b:f6:
         34:91:cc:82:90:18:67:1c:51:40:32:b4:f4:19:b9:bb:e4:8c:
         01:e5:42:72:ec:75:78:89:b2:46:2c:c9:ae:20:f6:5b:60:f8:
         a9:67:44:3b:60:22:74:99:01:57:87:bc:ec:d5:89:58:00:49:
         4c:c3:ee:1b:11:f0:e0:81:2c:df:54:3d:ef:6d:d6:b2:ba:03:
         a8:08:ca:56:da:67:69:04:c0:cd:79:6a:4c:17:cb:d3:28:02:
         7a:b1:f7:55:6b:ee:6f:3e:f7:a3:15:bb:5c:b2:f4:c1:e9:13:
         43:33:de:f5:c4:65:8a:6f:67:e4:81:70:51:63:8f:ff:67:57:
         31:e0:47:3e:9a:7d:64:f3:b6:ef:6c:ec:79:ed:06:fe:f4:6e:
         93:01:29:50:6d:d6:66:23:70:8d:75:1c:dc:64:42:82:e0:f4:
         61:a6:0f:48:e1:c4:ed:22:54:e0:4f:da:ec:f4:33:2d:6c:0f:
         5e:68:03:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----