Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x5A7PuEGPmi5Nr7W27rnGz1zNSc.roa
File:                     x5A7PuEGPmi5Nr7W27rnGz1zNSc.roa (raw, json)
Hash identifier:          WhzP5m3ge7t/cnh95Q65YEcRWhX9R2L4B2vuKinOIjs=
Subject key identifier:   C7:90:3B:3E:E1:06:3E:68:B9:36:BE:D6:DB:BA:E7:1B:3D:73:35:27
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0182C7930249FB4DCB9C23BC0AF6865FC998
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x5A7PuEGPmi5Nr7W27rnGz1zNSc.roa
Signing time:             Mon 22 Aug 2022 22:01:16 +0000
ROA not before:           Mon 22 Aug 2022 22:01:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204160
IP address blocks:        2a0e:97c0:b70::/44 maxlen: 48
                          2a0e:97c1:100::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:c7:93:02:49:fb:4d:cb:9c:23:bc:0a:f6:86:5f:c9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Aug 22 22:01:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c7903b3ee1063e68b936bed6dbbae71b3d733527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:5c:1b:9d:54:49:91:8d:4d:ec:6a:22:14:
                    48:93:ca:60:ea:03:8b:dd:1a:3e:5a:6b:66:86:c8:
                    8c:b2:5d:5c:64:28:e7:b3:f3:9f:57:94:cd:4e:6f:
                    2a:7e:fa:42:25:b3:f0:68:eb:89:2f:81:fc:66:db:
                    00:e1:fe:47:80:53:1e:e5:11:8f:eb:0d:86:23:6f:
                    f1:6a:78:3a:9b:a9:c6:a6:8e:55:a9:4f:03:91:7f:
                    bb:04:a3:72:78:d8:e0:c3:06:97:3c:16:82:50:bc:
                    ba:06:c8:da:71:8d:98:f4:be:0c:c6:a5:e9:e3:73:
                    18:59:11:64:3e:22:f7:ce:da:4b:74:04:47:53:e1:
                    00:26:37:49:0d:88:f5:11:61:e1:b4:5c:cc:4f:80:
                    1b:e9:6e:d5:38:65:2b:57:0e:bc:c3:a5:50:10:93:
                    47:fa:3a:16:dc:e7:f6:54:f4:2e:43:30:82:dd:4d:
                    af:02:41:f4:27:39:30:f9:88:b5:38:52:25:42:7e:
                    2f:22:98:17:1e:f6:4d:cf:4e:2d:34:39:8e:6b:41:
                    45:fc:5c:73:c0:76:60:a6:ea:d9:ce:04:f1:87:1c:
                    92:45:06:cf:a0:4c:2d:04:4b:c8:65:30:99:08:95:
                    25:c3:d4:d5:3e:84:c8:17:df:55:02:a4:94:49:e3:
                    8c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:90:3B:3E:E1:06:3E:68:B9:36:BE:D6:DB:BA:E7:1B:3D:73:35:27
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x5A7PuEGPmi5Nr7W27rnGz1zNSc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:b70::/44
                  2a0e:97c1:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:7d:bd:ca:be:1e:f1:08:84:b6:3c:0c:fe:1c:c5:5d:c3:0a:
         fd:44:35:1b:b1:ef:2b:20:7f:cc:d7:9f:2d:39:53:75:ce:63:
         8e:7d:a3:a5:14:f6:4b:16:2a:09:3c:35:3c:bd:ce:b2:bf:78:
         bf:27:c9:0b:69:31:1f:58:da:06:d5:cf:5b:94:1b:79:bf:10:
         9c:68:7a:9e:20:41:f6:c1:5f:be:2c:c8:4d:ec:9f:f8:78:e5:
         c3:bb:f8:d3:37:f5:8c:fb:76:9f:07:c5:7a:a0:e8:de:1a:25:
         fd:3b:07:d4:9e:a0:58:6e:7b:09:c4:cf:f9:04:8a:c1:09:fb:
         44:1f:c1:e3:2d:6f:ef:08:d3:a3:8b:34:79:ed:2b:7d:68:89:
         0f:9d:ed:6f:2e:10:fd:57:14:70:fd:36:26:41:af:6c:bc:22:
         05:f0:c0:ba:e8:72:c4:dd:a4:a8:22:78:84:ca:d5:2b:9b:8c:
         47:7c:9d:a8:3e:28:02:e9:2c:9f:ff:c0:eb:74:c6:f3:50:5a:
         ad:2f:18:8f:f1:ca:7a:7b:36:9c:53:c8:14:1a:6b:42:08:a5:
         2a:2f:b6:06:b7:9b:29:e7:1a:23:c4:43:3e:9d:e2:b7:d1:97:
         a5:1f:06:b3:ee:b4:6e:df:de:69:b8:a5:86:ef:22:02:78:ed:
         fe:93:26:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----