Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/hRQkN71OfXhg8M69o2sysSE-O_U.roa
File:                     hRQkN71OfXhg8M69o2sysSE-O_U.roa (raw, json)
Hash identifier:          XLKf/0/33IkNfh8i8TlZ2wRFkHKyXz75qryqU8GCuUA=
Subject key identifier:   85:14:24:37:BD:4E:7D:78:60:F0:CE:BD:A3:6B:32:B1:21:3E:3B:F5
Certificate issuer:       /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial:       0A73DA5F
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/hRQkN71OfXhg8M69o2sysSE-O_U.roa
Signing time:             Sat 01 Jan 2022 03:02:47 +0000
ROA not before:           Sat 01 Jan 2022 03:02:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205390
IP address blocks:        185.220.0.0/22 maxlen: 24
                          2a0b:ecc0::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175364703 (0xa73da5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
        Validity
            Not Before: Jan  1 03:02:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=85142437bd4e7d7860f0cebda36b32b1213e3bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:81:51:c6:47:27:3d:a7:6f:ed:a4:a6:5e:b5:
                    6f:6c:43:24:e9:48:aa:f5:ed:a2:80:56:a6:1a:83:
                    19:db:3e:db:41:72:c5:15:d7:54:3b:9e:70:e3:64:
                    7c:5b:ff:87:75:be:10:66:6b:f0:fa:f8:af:fe:18:
                    4e:14:ef:12:4d:bd:df:c8:cc:0f:fc:4a:2f:c2:22:
                    45:d9:2e:3b:fb:ef:e3:45:95:5d:d9:03:30:9f:00:
                    fc:ea:45:7e:ca:2f:f3:60:31:07:f9:e7:c9:1a:4b:
                    3c:b5:bc:c1:35:0f:96:46:68:9f:c6:30:42:2a:3b:
                    44:42:b0:90:2d:74:5f:36:b8:6d:f3:82:a7:46:43:
                    c2:13:ce:2d:da:8c:e8:71:63:60:b6:09:f4:83:10:
                    df:c1:e1:48:dc:33:47:36:63:14:fa:a6:62:d2:ac:
                    3b:e4:22:e3:c2:4b:84:d6:a0:68:b3:90:3b:1e:d9:
                    f5:f9:4a:f9:c1:57:da:ea:81:b0:50:c0:29:52:da:
                    26:da:d2:43:84:86:3b:9c:b2:41:20:ae:5d:fd:fe:
                    3c:6d:b6:67:0e:8e:85:12:ad:a6:bc:03:df:68:d0:
                    86:df:31:54:f0:7c:6f:03:86:cc:76:bd:29:97:18:
                    b6:90:62:57:75:38:8a:ea:fb:9d:97:9b:06:af:5f:
                    7b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:14:24:37:BD:4E:7D:78:60:F0:CE:BD:A3:6B:32:B1:21:3E:3B:F5
            X509v3 Authority Key Identifier:
                keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/hRQkN71OfXhg8M69o2sysSE-O_U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.220.0.0/22
                IPv6:
                  2a0b:ecc0::/29

    Signature Algorithm: sha256WithRSAEncryption
         29:79:23:77:7a:a8:2d:46:bb:d3:8e:d5:93:a8:6a:7b:86:04:
         e3:d6:8b:0a:f1:aa:70:20:fd:6d:ae:6d:67:25:cf:4b:2a:bb:
         9f:8f:1e:5f:3e:65:63:b0:35:43:b6:b7:8c:3f:23:92:e5:05:
         9c:c9:21:47:73:14:a4:20:5c:2a:2d:5d:b6:20:91:12:4a:e9:
         50:de:6e:80:f4:78:03:75:ac:a0:f4:aa:08:6a:cd:af:70:5d:
         6a:9b:ee:52:ae:00:4f:bf:89:11:90:6d:85:87:eb:e9:21:fd:
         aa:38:2a:25:71:b4:3b:a3:ef:1d:35:ef:c9:a2:12:5a:13:89:
         3a:84:ed:b0:e8:a0:6d:bb:7a:80:67:91:a2:55:90:4a:ab:2c:
         f4:8b:5f:b8:6e:0b:32:1f:af:e3:c3:11:6b:cb:b6:e2:82:64:
         8d:ea:bb:11:0e:37:a2:aa:7d:e0:b2:35:5f:c1:a8:bb:2f:ea:
         85:b7:78:b9:0d:9b:e8:5f:5f:15:fa:11:dc:1e:ad:ec:36:0a:
         c5:c2:6d:88:82:62:67:52:55:20:47:ef:bf:ec:62:f3:01:69:
         a8:1f:5b:40:dd:5e:cf:72:a2:56:f4:a2:31:d4:60:a9:6e:a3:
         fb:ae:05:4e:d8:92:59:3a:2f:a3:38:ea:8c:b2:f6:bb:ca:6f:
         6b:a3:13:8b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECnPaXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YmIwNjAxNjZkNjRjZWFkMGUyOTU3OTdlOGQyN2M1NWQ4ODk4YmMyMB4XDTIyMDEw
MTAzMDI0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODUxNDI0MzdiZDRl
N2Q3ODYwZjBjZWJkYTM2YjMyYjEyMTNlM2JmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOWBUcZHJz2nb+2kpl61b2xDJOlIqvXtooBWphqDGds+20Fy
xRXXVDuecONkfFv/h3W+EGZr8Pr4r/4YThTvEk2938jMD/xKL8IiRdkuO/vv40WV
XdkDMJ8A/OpFfsov82AxB/nnyRpLPLW8wTUPlkZon8YwQio7REKwkC10Xza4bfOC
p0ZDwhPOLdqM6HFjYLYJ9IMQ38HhSNwzRzZjFPqmYtKsO+Qi48JLhNagaLOQOx7Z
9flK+cFX2uqBsFDAKVLaJtrSQ4SGO5yyQSCuXf3+PG22Zw6OhRKtprwD32jQht8x
VPB8bwOGzHa9KZcYtpBiV3U4iur7nZebBq9fe2ECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSFFCQ3vU59eGDwzr2jazKxIT479TAfBgNVHSMEGDAWgBSrsGAWbWTOrQ4p
V5fo0nxV2ImLwjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3E3QmdGbTFrenEwT0tWZVg2Tko4VmRpSmk4SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWUvZjI4OGJkLTEwZjUtNDdiMy1iMTI0LTZiMTM2NDk0ZTNkYy8x
L2hSUWtONzFPZlhoZzhNNjlvMnN5c1NFLU9fVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWUv
ZjI4OGJkLTEwZjUtNDdiMy1iMTI0LTZiMTM2NDk0ZTNkYy8xL3E3QmdGbTFrenEw
T0tWZVg2Tko4VmRpSmk4SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArncADANBAIAAjAHAwUDKgvswDAN
BgkqhkiG9w0BAQsFAAOCAQEAKXkjd3qoLUa7047Vk6hqe4YE49aLCvGqcCD9ba5t
ZyXPSyq7n48eXz5lY7A1Q7a3jD8jkuUFnMkhR3MUpCBcKi1dtiCREkrpUN5ugPR4
A3WsoPSqCGrNr3BdapvuUq4AT7+JEZBthYfr6SH9qjgqJXG0O6PvHTXvyaISWhOJ
OoTtsOigbbt6gGeRolWQSqss9ItfuG4LMh+v48MRa8u24oJkjeq7EQ43oqp94LI1
X8Gouy/qhbd4uQ2b6F9fFfoR3B6t7DYKxcJtiIJiZ1JVIEfvv+xi8wFpqB9bQN1e
z3KiVvSiMdRgqW6j+64FTtiSWTovozjqjLL2u8pva6MTiw==
-----END CERTIFICATE-----