Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JpYhQJiy_wH6RX9NTNqV1pQmG8w.roa
File:                     JpYhQJiy_wH6RX9NTNqV1pQmG8w.roa (raw, json)
Hash identifier:          FEvxsZjcY6IIKO0092dOrl3ekEtNatHgSvvXJ5tsUhw=
Subject key identifier:   26:96:21:40:98:B2:FF:01:FA:45:7F:4D:4C:DA:95:D6:94:26:1B:CC
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0A5D6FFF
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JpYhQJiy_wH6RX9NTNqV1pQmG8w.roa
Signing time:             Mon 11 Apr 2022 10:28:21 +0000
ROA not before:           Mon 11 Apr 2022 10:28:21 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        45.137.201.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173895679 (0xa5d6fff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Apr 11 10:28:21 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2696214098b2ff01fa457f4d4cda95d694261bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:0d:64:13:13:42:f8:c8:e4:94:12:2b:1d:
                    ea:13:3b:5d:af:d0:e2:5e:e0:cf:50:d2:73:85:97:
                    b0:56:f7:dc:7d:bc:9f:b6:9c:12:e9:55:d6:92:17:
                    d3:3e:3f:f0:e5:b2:e1:6c:72:5a:b6:fc:dc:47:22:
                    5a:27:b9:70:1b:d0:cd:68:95:8b:98:fd:03:eb:be:
                    6f:5f:fb:6d:5b:79:f3:40:e0:49:ea:e7:ef:8d:70:
                    10:35:d7:6a:97:d2:67:19:b9:22:ff:fc:b9:f6:5c:
                    69:71:7b:20:27:88:15:f3:64:31:15:98:74:27:77:
                    70:cd:8d:0b:77:39:4c:12:df:ea:db:b9:2b:7d:3c:
                    b6:92:0e:17:5f:91:58:5f:c5:6a:46:82:45:74:a6:
                    69:4f:76:a8:ce:06:05:22:2a:51:14:28:0b:86:c3:
                    f8:2d:4c:95:55:8a:84:62:13:0a:ea:05:61:f8:e8:
                    21:60:36:8e:da:b7:61:67:f4:66:fd:fe:06:7c:2a:
                    88:1b:c2:8a:42:91:73:b9:23:99:21:e3:63:91:70:
                    74:3e:3c:7d:3c:26:20:62:b7:19:8f:9f:3a:b3:42:
                    f6:da:6e:bb:2a:5e:8d:c8:25:99:e9:f4:2a:b7:0e:
                    17:4a:79:86:c5:c5:d2:97:25:79:52:f0:9f:48:69:
                    16:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:96:21:40:98:B2:FF:01:FA:45:7F:4D:4C:DA:95:D6:94:26:1B:CC
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JpYhQJiy_wH6RX9NTNqV1pQmG8w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:e8:b4:64:bb:98:88:85:81:e2:30:f3:b8:14:9a:e4:d4:c7:
         92:cf:f7:ae:e3:28:8a:f4:95:5f:8b:8f:11:66:8f:40:26:a1:
         48:f4:bb:df:e4:52:22:92:44:d3:9a:77:46:87:9e:a1:84:17:
         11:04:e3:16:1d:fe:d5:61:1b:c1:d0:c8:db:4e:fa:14:ae:c1:
         13:a4:b3:44:52:8b:10:b1:49:69:42:4d:95:56:62:42:a6:9a:
         fe:4e:09:5d:5b:fe:dd:ea:cc:60:d9:82:fb:da:9c:1a:e6:3c:
         a5:76:a2:82:37:f3:82:f5:9a:b6:18:d0:79:23:fb:96:bc:11:
         72:4d:a8:8f:6b:9b:e8:62:be:99:3d:9d:d4:57:94:20:79:8a:
         75:96:ed:2c:73:a7:c5:c8:06:d3:da:bd:16:93:26:36:bc:56:
         d3:b8:c6:35:30:cc:dc:19:00:0c:cd:bc:30:2c:70:1b:8d:f3:
         e5:56:27:d8:7c:6b:a3:d7:14:07:42:eb:2d:e0:92:e2:e0:a7:
         c8:43:fe:2d:6b:91:cf:0d:84:9a:d4:ed:71:a1:53:a7:d5:d4:
         3e:af:5e:a2:3e:e0:7e:57:3d:2d:79:3c:b8:0b:4e:be:59:77:
         bd:da:73:63:c2:0e:20:3c:05:52:44:a1:6e:1a:94:93:18:ff:
         eb:da:af:35
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECl1v/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjA0MTViZmM0M2IzOGU5Y2ZkMWExMjk5NTIwMmU4NzYzNzUyZmRlMB4XDTIyMDQx
MTEwMjgyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjY5NjIxNDA5OGIy
ZmYwMWZhNDU3ZjRkNGNkYTk1ZDY5NDI2MWJjYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKvEDWQTE0L4yOSUEisd6hM7Xa/Q4l7gz1DSc4WXsFb33H28
n7acEulV1pIX0z4/8OWy4WxyWrb83EciWie5cBvQzWiVi5j9A+u+b1/7bVt580Dg
Sern741wEDXXapfSZxm5Iv/8ufZcaXF7ICeIFfNkMRWYdCd3cM2NC3c5TBLf6tu5
K308tpIOF1+RWF/FakaCRXSmaU92qM4GBSIqURQoC4bD+C1MlVWKhGITCuoFYfjo
IWA2jtq3YWf0Zv3+BnwqiBvCikKRc7kjmSHjY5FwdD48fTwmIGK3GY+fOrNC9tpu
uypejcglmen0KrcOF0p5hsXF0pcleVLwn0hpFh8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQmliFAmLL/AfpFf01M2pXWlCYbzDAfBgNVHSMEGDAWgBQbBBW/xDs46c/R
oSmVIC6HY3Uv3jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0d3UVZ2OFE3T09uUDBhRXBsU0F1aDJOMUw5NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvMDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8x
L0pwWWhRSml5X3dINlJYOU5UTnFWMXBRbUc4dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
MDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8xL0d3UVZ2OFE3T09u
UDBhRXBsU0F1aDJOMUw5NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2JyTANBgkqhkiG9w0BAQsFAAOC
AQEAnei0ZLuYiIWB4jDzuBSa5NTHks/3ruMoivSVX4uPEWaPQCahSPS73+RSIpJE
05p3RoeeoYQXEQTjFh3+1WEbwdDI2076FK7BE6SzRFKLELFJaUJNlVZiQqaa/k4J
XVv+3erMYNmC+9qcGuY8pXaigjfzgvWathjQeSP7lrwRck2oj2ub6GK+mT2d1FeU
IHmKdZbtLHOnxcgG09q9FpMmNrxW07jGNTDM3BkADM28MCxwG43z5VYn2Hxro9cU
B0LrLeCS4uCnyEP+LWuRzw2EmtTtcaFTp9XUPq9eoj7gflc9LXk8uAtOvll3vdpz
Y8IOIDwFUkShbhqUkxj/69qvNQ==
-----END CERTIFICATE-----