Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wt0j4NO530BW3LOsqaG8JXzG2-E.roa
File:                     wt0j4NO530BW3LOsqaG8JXzG2-E.roa (raw, json)
Hash identifier:          uyof2fZbHomr6fOq5H1AZLEwzP2ofVtrFRcwyRNrjQk=
Subject key identifier:   C2:DD:23:E0:D3:B9:DF:40:56:DC:B3:AC:A9:A1:BC:25:7C:C6:DB:E1
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01846B5B6B27D8CB30EAD0362D33A2C4E84E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wt0j4NO530BW3LOsqaG8JXzG2-E.roa
Signing time:             Sat 12 Nov 2022 10:21:04 +0000
ROA not before:           Sat 12 Nov 2022 10:21:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25198
IP address blocks:        2a0e:97c0:a80::/44 maxlen: 48
                          2a0e:97c0:300::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:6b:5b:6b:27:d8:cb:30:ea:d0:36:2d:33:a2:c4:e8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov 12 10:21:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c2dd23e0d3b9df4056dcb3aca9a1bc257cc6dbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:27:31:a2:cf:8c:a5:3e:3d:58:f9:01:ae:d3:
                    a5:0d:82:1c:0d:dd:1e:ee:9f:c0:15:92:c3:b5:ce:
                    b4:72:f2:07:ab:96:3a:57:c5:78:89:41:c9:05:21:
                    e8:48:60:3b:ac:15:0a:45:b3:72:7e:e9:f6:3a:a5:
                    21:e5:a6:10:b5:9e:65:fb:78:d1:a9:28:53:be:c3:
                    9d:d0:2e:8f:de:41:1f:47:86:da:d7:2d:27:2f:aa:
                    af:21:a1:33:86:7a:c2:af:fb:2f:91:43:19:2c:bc:
                    c7:3b:39:bf:de:b8:bc:4c:90:48:a7:40:94:2e:5f:
                    ec:4f:e6:53:15:4f:fe:40:ab:3d:0e:fb:43:e7:f8:
                    83:3f:a6:59:6f:18:ab:a3:83:e7:f1:58:da:f4:fd:
                    db:05:8c:8d:4e:51:b6:6b:3c:02:c9:2a:fd:4b:e7:
                    f7:68:64:8d:25:4d:87:93:eb:36:b8:c9:64:4c:d2:
                    93:ac:1f:f9:25:93:2b:ec:3f:40:82:94:ef:af:f5:
                    13:ce:c4:95:ea:f3:83:ed:3e:41:19:dc:75:d0:3e:
                    9e:34:7e:f4:df:df:56:46:f3:6a:ab:2f:99:b9:f2:
                    3e:b6:94:bb:07:1b:a7:44:3b:fd:e4:2d:bc:ee:36:
                    87:3e:24:3f:b6:33:03:e0:cc:87:47:26:31:dd:ed:
                    b9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DD:23:E0:D3:B9:DF:40:56:DC:B3:AC:A9:A1:BC:25:7C:C6:DB:E1
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wt0j4NO530BW3LOsqaG8JXzG2-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:300::/44
                  2a0e:97c0:a80::/44

    Signature Algorithm: sha256WithRSAEncryption
         a1:7d:76:30:16:34:b7:e1:a0:74:23:f3:a5:4d:37:18:73:24:
         36:58:bf:8d:a4:6f:ec:7d:53:22:a2:64:72:33:a3:65:d9:9a:
         29:5f:87:f9:ad:8d:88:c8:cf:d7:bd:b3:f9:b3:2e:97:b0:66:
         1c:16:41:c9:8d:91:c9:fd:86:d2:c9:fe:66:2e:dd:07:f9:b4:
         8f:07:f7:df:dd:f3:d0:27:6a:6a:2b:b8:3e:f5:a0:80:1e:4a:
         da:99:8c:e9:62:b6:d0:c8:7b:33:ce:cd:4c:12:94:b0:38:ef:
         1e:18:4e:72:aa:28:97:00:70:ad:a6:1c:14:87:d1:c0:b4:62:
         3f:8f:35:b6:b8:79:11:89:bb:6f:39:60:96:15:d8:53:e1:b0:
         38:23:46:eb:8b:90:e6:ea:d3:5a:81:95:39:27:9b:e2:fd:db:
         b7:50:d7:83:08:75:1a:07:50:ad:e0:64:24:1f:e4:d0:db:8e:
         5a:4b:33:cf:eb:3f:0a:82:23:01:04:9c:10:06:58:8c:b7:d8:
         f0:4b:3e:e1:e5:4f:eb:37:5b:58:ad:e5:b1:b1:75:46:0b:72:
         0f:55:3e:2d:79:fb:6b:28:7f:18:f0:24:72:1c:17:77:89:1e:
         56:26:1e:c1:6b:7f:f2:1d:fe:0a:69:a1:b6:28:c5:c6:23:70:
         f8:af:de:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----