Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wLn2_6YxhKIM1tNph4xsuxBiEc0.roa
File:                     wLn2_6YxhKIM1tNph4xsuxBiEc0.roa (raw, json)
Hash identifier:          1mSD+9WHS+IMHQ0BuDApD02BWnWKnTIqaBUkRyL5ktE=
Subject key identifier:   C0:B9:F6:FF:A6:31:84:A2:0C:D6:D3:69:87:8C:6C:BB:10:62:11:CD
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       135B8B2C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wLn2_6YxhKIM1tNph4xsuxBiEc0.roa
Signing time:             Fri 01 Apr 2022 12:09:42 +0000
ROA not before:           Fri 01 Apr 2022 12:09:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210013
IP address blocks:        2a0e:97c0:6cd::/48 maxlen: 48
                          2a0e:97c0:6c0::/44 maxlen: 48
                          2a0e:97c0:6c8::/48 maxlen: 48
                          2a0e:97c0:6c3::/48 maxlen: 48
                          2a0e:97c0:6ce::/48 maxlen: 48
                          2a0e:97c0:6c1::/48 maxlen: 48
                          2a0e:97c0:6cc::/48 maxlen: 48
                          2a0e:97c0:6c7::/48 maxlen: 48
                          2a0e:97c0:6c2::/48 maxlen: 48
                          2a0e:97c0:6c5::/48 maxlen: 48
                          2a0e:97c0:6c0::/48 maxlen: 48
                          2a0e:97c0:6cb::/48 maxlen: 48
                          2a0e:97c0:6c6::/48 maxlen: 48
                          2a0e:97c0:6c9::/48 maxlen: 48
                          2a0e:97c0:6c4::/48 maxlen: 48
                          2a0e:97c0:6cf::/48 maxlen: 48
                          2a0e:97c0:6ca::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324766508 (0x135b8b2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Apr  1 12:09:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c0b9f6ffa63184a20cd6d369878c6cbb106211cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:be:cf:c6:e2:53:b4:26:99:f4:c1:d4:95:64:
                    d5:17:d7:6e:aa:47:b0:5d:f4:b0:42:ef:51:c1:cc:
                    34:6c:90:5b:d7:66:4a:86:4b:13:bc:a5:fd:98:a6:
                    97:84:02:fc:68:7f:41:ca:67:8d:4c:2b:35:9a:6d:
                    27:8c:f5:7c:8f:47:40:12:20:e6:6d:95:8a:27:9d:
                    28:0b:91:70:4d:f1:d1:6c:20:dd:1f:ee:fb:50:69:
                    b0:ac:1d:cb:b1:63:1b:f7:16:61:32:53:26:d4:8b:
                    82:bf:89:9d:6e:97:1f:42:53:e9:8c:96:ad:f0:26:
                    34:b4:76:29:46:55:af:8b:a4:6a:b3:e0:92:4d:d4:
                    8f:bc:70:4b:47:2d:1b:5a:d5:14:37:36:75:a4:15:
                    88:7d:cb:81:e6:94:91:f4:34:9f:ee:bb:69:a5:81:
                    95:23:7d:2f:43:c4:7d:8a:cd:a6:6f:72:55:6a:c0:
                    1d:71:c2:f4:e0:2f:a1:9d:d6:2e:5f:67:1c:20:97:
                    eb:a4:65:45:a5:10:f7:9b:cd:42:6b:72:2d:3e:27:
                    26:f9:61:a0:c1:47:af:75:85:8c:f5:09:88:83:04:
                    0d:78:c4:d2:dc:86:9e:be:98:58:ed:15:b5:00:2b:
                    92:5b:b5:58:3b:8c:6f:8e:19:43:0b:06:07:28:bd:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B9:F6:FF:A6:31:84:A2:0C:D6:D3:69:87:8C:6C:BB:10:62:11:CD
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wLn2_6YxhKIM1tNph4xsuxBiEc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:6c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         67:27:89:82:0b:04:ba:aa:b7:7a:fa:b9:86:02:2e:9b:70:7d:
         8f:78:0b:0e:d7:85:0b:08:9d:af:0a:8f:fa:12:08:a8:0d:43:
         18:be:04:de:11:47:28:da:e3:b7:67:31:94:63:89:00:e3:b3:
         5b:4d:67:a1:04:2a:09:a8:a1:1c:62:73:e5:2a:f1:5a:05:26:
         00:e6:b5:04:a6:99:23:4b:e0:95:c1:d8:19:1f:57:6b:a5:77:
         fe:f0:5e:83:e6:94:1c:8c:80:c4:0c:40:4c:de:69:b5:15:04:
         3d:35:fc:fb:77:d1:a3:86:82:ca:fa:c7:22:ae:47:c9:ca:3f:
         db:1c:27:1f:3f:8d:10:77:18:55:80:d5:b1:e4:33:b0:a3:fa:
         78:2c:88:39:45:fc:3e:da:be:77:34:9f:d4:21:f3:1a:c1:67:
         7f:57:9d:a6:1f:7b:2e:33:8b:fe:4f:25:79:fe:90:86:3e:c6:
         cb:81:94:be:6e:57:af:84:0c:49:36:82:7f:17:2f:30:f0:2d:
         28:08:d7:c0:33:94:b3:9e:9a:c6:c3:5e:4a:a5:bf:b6:dd:dc:
         aa:60:4e:18:d6:a0:13:cc:82:41:3c:33:51:81:5e:bd:01:fb:
         67:f8:30:16:1d:0e:43:9f:6d:d9:11:02:91:f9:76:c1:33:18:
         00:31:ab:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----