Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yXLFzfDOicCg1Dni2-_zSLY1Jfk.roa
File:                     yXLFzfDOicCg1Dni2-_zSLY1Jfk.roa (raw, json)
Hash identifier:          NtWjXmoOcqzEHNHr+A3a5pRGsPOq9N4ogkNNd/h4uQ0=
Subject key identifier:   C9:72:C5:CD:F0:CE:89:C0:A0:D4:39:E2:DB:EF:F3:48:B6:35:25:F9
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       1266CFBF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yXLFzfDOicCg1Dni2-_zSLY1Jfk.roa
Signing time:             Thu 24 Feb 2022 20:11:14 +0000
ROA not before:           Thu 24 Feb 2022 20:11:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20473
IP address blocks:        2a0e:b107:1870::/48 maxlen: 48
                          2a0e:97c0:760::/44 maxlen: 48
                          2a0e:b107:5d0::/44 maxlen: 48
                          2a0e:b107:5e0::/44 maxlen: 48
                          2a0e:97c0:750::/48 maxlen: 48
                          2a0e:b107:900::/44 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a0e:97c0:736::/48 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a10:cc42:1000::/36 maxlen: 48
                          2a0e:97c0:73f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308727743 (0x1266cfbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Feb 24 20:11:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c972c5cdf0ce89c0a0d439e2dbeff348b63525f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1b:47:e9:c0:d6:ab:0a:68:7d:d7:dc:3f:34:
                    6a:3e:81:0b:88:80:16:95:7e:36:72:38:34:76:8f:
                    49:2c:74:9a:5a:27:95:71:d9:29:28:1f:d2:e8:ab:
                    f0:aa:8e:7c:07:0c:54:7a:0d:d6:66:81:38:a6:fb:
                    f5:df:ff:a9:fb:d0:18:60:b6:89:c1:21:a3:64:91:
                    c8:40:00:01:fe:b8:f9:bf:c9:ed:69:5a:84:55:cb:
                    5b:6a:38:04:bc:e5:46:2b:70:5a:11:c0:c3:78:0d:
                    67:fb:ad:8e:e6:5f:a9:37:b6:5b:95:09:d5:89:c9:
                    cd:ea:60:43:39:02:06:5c:03:04:ce:94:e2:ca:7a:
                    7a:00:4e:c0:17:fa:01:ac:2a:72:34:78:95:d9:56:
                    0d:22:89:b0:38:9a:ea:04:2d:45:c1:ef:ea:3f:50:
                    1c:ba:aa:ab:d4:f6:b6:48:82:28:9e:f1:c5:c6:c2:
                    2e:1e:63:65:cf:ea:3e:b1:d7:fc:b3:a1:94:48:62:
                    58:8c:10:26:93:d3:03:af:17:d3:1e:38:76:8d:6c:
                    fb:20:64:f1:83:51:16:ad:3f:2c:ca:02:de:f8:84:
                    cc:d1:3b:cf:b1:f9:04:4a:10:8c:e0:74:93:b9:c9:
                    2b:dd:6a:76:31:08:95:6e:e2:66:5e:c4:18:d1:b3:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:72:C5:CD:F0:CE:89:C0:A0:D4:39:E2:DB:EF:F3:48:B6:35:25:F9
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yXLFzfDOicCg1Dni2-_zSLY1Jfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:736::/48
                  2a0e:97c0:73f::/48
                  2a0e:97c0:750::/48
                  2a0e:97c0:760::/44
                  2a0e:b107:5d0::-2a0e:b107:5ef:ffff:ffff:ffff:ffff:ffff
                  2a0e:b107:900::/44
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1870::/48
                  2a10:cc42:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8f:23:d8:e7:a0:ad:ff:c4:93:cc:e6:4d:38:78:e8:7e:38:7d:
         5c:56:b4:37:32:82:59:95:7c:51:1f:d1:c9:08:85:42:a6:9d:
         c0:1e:e7:7b:d7:64:3b:ff:c4:e9:d4:05:58:7d:b4:7a:04:f4:
         75:4f:35:3c:7f:af:32:50:33:ad:d3:72:b1:0e:fc:a7:c7:d0:
         35:08:65:01:ef:d0:9b:3c:34:d8:d8:aa:66:5e:71:ab:da:79:
         a0:36:0b:67:5d:61:ce:38:db:42:3b:62:20:11:40:7c:61:a1:
         89:29:71:14:60:41:29:f8:4b:fd:35:7a:99:35:46:e0:06:ef:
         6c:b5:de:c9:9f:3b:f5:46:9c:02:3b:b6:d9:0e:fe:68:c0:ff:
         09:2a:e7:23:50:75:be:18:a5:52:b3:9b:f2:9d:21:bd:cc:af:
         95:99:25:7a:33:05:ce:da:f8:cc:af:b2:a4:34:69:e5:44:8d:
         f2:fb:92:44:bc:1b:c7:64:8d:a4:d6:36:97:14:6e:2d:54:6a:
         11:a8:5b:4c:d9:eb:4b:c8:5b:0b:37:05:4a:90:fa:7f:e5:a0:
         8b:48:24:3c:45:3d:da:6b:1f:1a:ac:3b:26:7a:d1:e0:af:0d:
         76:4f:27:36:8b:18:8c:0a:48:ac:dd:04:59:a2:85:26:52:10:
         2e:b8:b5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----