Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/y-XpcvetXZF5lDZe1OYqfgFkG_k.roa
File:                     y-XpcvetXZF5lDZe1OYqfgFkG_k.roa (raw, json)
Hash identifier:          Z/Hud+mcgOmsWP9AFH89vGqaUWaaHMhrmudUgStWHnw=
Subject key identifier:   CB:E5:E9:72:F7:AD:5D:91:79:94:36:5E:D4:E6:2A:7E:01:64:1B:F9
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       09928C37
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/y-XpcvetXZF5lDZe1OYqfgFkG_k.roa
Signing time:             Mon 24 Jan 2022 21:44:48 +0000
ROA not before:           Mon 24 Jan 2022 21:44:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210542
IP address blocks:        45.142.106.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160599095 (0x9928c37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan 24 21:44:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=cbe5e972f7ad5d917994365ed4e62a7e01641bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:96:81:84:29:5d:38:36:a8:28:2f:86:7a:
                    90:7f:1e:50:da:61:19:13:2b:4d:63:ea:f6:1f:d8:
                    68:ad:22:1c:b8:86:f4:0b:a2:39:d1:71:cf:ca:89:
                    e0:1c:85:cd:f2:27:b9:82:c2:8d:3f:2a:df:cb:6f:
                    2f:c8:11:0f:3c:3b:b9:ba:9f:5a:b6:46:c2:cf:af:
                    c4:68:cf:58:74:76:ac:21:b7:a9:86:20:49:30:4c:
                    18:7b:9b:0a:37:4e:ea:a6:2f:bd:85:24:17:ad:39:
                    23:23:e4:69:8f:77:5a:59:a1:2b:fa:ad:eb:6f:04:
                    8b:5d:47:83:7d:25:ab:4f:d8:7a:3e:02:46:66:a3:
                    8e:fd:05:08:bc:e4:c2:c5:ac:c4:cb:08:92:99:b1:
                    33:70:62:74:69:6c:1d:c8:a2:9b:c2:15:4b:2c:95:
                    c7:98:46:a1:69:44:fe:6a:39:c2:90:3f:4f:55:7f:
                    ae:46:68:03:58:73:f9:73:61:43:fd:22:04:4c:bc:
                    9b:d1:a1:44:42:90:f1:b2:f3:3c:ee:dd:1f:7e:1a:
                    b0:e3:e5:31:fe:75:3a:f0:08:a5:6f:4c:e1:41:5e:
                    46:b8:d8:be:e5:e3:d3:fc:63:c4:ba:0b:42:c1:96:
                    3a:fd:b9:1e:b5:85:63:e4:fb:32:9f:69:c1:ca:59:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E5:E9:72:F7:AD:5D:91:79:94:36:5E:D4:E6:2A:7E:01:64:1B:F9
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/y-XpcvetXZF5lDZe1OYqfgFkG_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:83:6b:c2:94:fe:e7:c3:39:12:22:8b:12:a1:67:cf:10:27:
         0e:b2:54:bb:12:2a:a7:bc:cb:91:84:fd:15:b3:d1:4f:a9:64:
         04:ea:24:59:bb:8f:48:b3:ce:0f:fa:25:7d:01:b6:0d:46:57:
         41:93:a3:9a:8a:45:02:5c:d5:75:bc:95:de:de:81:2b:85:18:
         30:24:cf:a0:83:2a:49:93:4d:a5:20:4e:bb:ad:a2:97:7f:fe:
         9d:94:22:28:91:d8:da:f3:ce:27:53:94:a5:7c:bf:39:3b:2f:
         17:ed:4e:cd:cc:87:e0:bc:55:7f:10:35:a2:09:cc:df:b2:96:
         62:3f:46:28:f2:2a:0a:15:d5:81:e3:bd:b6:61:a5:98:e5:2e:
         9a:55:1b:8a:12:a7:6f:d4:f7:1c:a1:3a:0d:ae:3a:b4:43:ae:
         28:8f:6e:96:ae:71:69:92:21:e0:f8:c2:80:ce:7c:7d:50:6b:
         5d:23:e2:1f:2b:1a:3c:db:06:d8:15:6f:c7:27:a8:81:eb:88:
         ed:b2:f2:e8:ca:d0:93:c6:9f:cd:6e:9f:f8:c1:df:2b:86:a2:
         6e:91:4b:9c:b5:d2:df:ad:bc:ad:5d:41:16:b6:0b:49:47:b8:
         26:21:ce:40:08:dc:e0:da:3d:a6:df:87:19:2b:ab:22:13:6f:
         44:e1:dd:e7
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECZKMNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjA0MTViZmM0M2IzOGU5Y2ZkMWExMjk5NTIwMmU4NzYzNzUyZmRlMB4XDTIyMDEy
NDIxNDQ0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2JlNWU5NzJmN2Fk
NWQ5MTc5OTQzNjVlZDRlNjJhN2UwMTY0MWJmOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKbrloGEKV04NqgoL4Z6kH8eUNphGRMrTWPq9h/YaK0iHLiG
9AuiOdFxz8qJ4ByFzfInuYLCjT8q38tvL8gRDzw7ubqfWrZGws+vxGjPWHR2rCG3
qYYgSTBMGHubCjdO6qYvvYUkF605IyPkaY93WlmhK/qt628Ei11Hg30lq0/Yej4C
Rmajjv0FCLzkwsWsxMsIkpmxM3BidGlsHciim8IVSyyVx5hGoWlE/mo5wpA/T1V/
rkZoA1hz+XNhQ/0iBEy8m9GhREKQ8bLzPO7dH34asOPlMf51OvAIpW9M4UFeRrjY
vuXj0/xjxLoLQsGWOv25HrWFY+T7Mp9pwcpZ4VkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTL5ely961dkXmUNl7U5ip+AWQb+TAfBgNVHSMEGDAWgBQbBBW/xDs46c/R
oSmVIC6HY3Uv3jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0d3UVZ2OFE3T09uUDBhRXBsU0F1aDJOMUw5NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvMDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8x
L3ktWHBjdmV0WFpGNWxEWmUxT1lxZmdGa0dfay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
MDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8xL0d3UVZ2OFE3T09u
UDBhRXBsU0F1aDJOMUw5NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2OajANBgkqhkiG9w0BAQsFAAOC
AQEAHoNrwpT+58M5EiKLEqFnzxAnDrJUuxIqp7zLkYT9FbPRT6lkBOokWbuPSLPO
D/olfQG2DUZXQZOjmopFAlzVdbyV3t6BK4UYMCTPoIMqSZNNpSBOu62il3/+nZQi
KJHY2vPOJ1OUpXy/OTsvF+1OzcyH4LxVfxA1ognM37KWYj9GKPIqChXVgeO9tmGl
mOUumlUbihKnb9T3HKE6Da46tEOuKI9ulq5xaZIh4PjCgM58fVBrXSPiHysaPNsG
2BVvxyeogeuI7bLy6MrQk8afzW6f+MHfK4aibpFLnLXS3628rV1BFrYLSUe4JiHO
QAjc4No9pt+HGSurIhNvROHd5w==
-----END CERTIFICATE-----