Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/1-3gJy65OZ8UqyXm0RRy0u3Hdq84.roa
File:                     1-3gJy65OZ8UqyXm0RRy0u3Hdq84.roa (raw, json)
Hash identifier:          JGk/SPvQmGoH/NdmuOA/Y3/EZdPHhOziwCMDMZSZ+hY=
Subject key identifier:   FB:78:09:CB:AE:4E:67:C5:2A:C9:79:B4:45:1C:B4:BB:71:DD:AB:CE
Certificate issuer:       /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial:       0184518BD8252D7784E6C2B6C6E5B4B4D29F
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/1-3gJy65OZ8UqyXm0RRy0u3Hdq84.roa
Signing time:             Mon 07 Nov 2022 10:03:50 +0000
ROA not before:           Mon 07 Nov 2022 10:03:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     398788
IP address blocks:        2a01:488:bb12::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:51:8b:d8:25:2d:77:84:e6:c2:b6:c6:e5:b4:b4:d2:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
        Validity
            Not Before: Nov  7 10:03:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fb7809cbae4e67c52ac979b4451cb4bb71ddabce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9b:93:b1:44:b7:cc:71:75:71:d5:0e:5b:d0:
                    92:7d:56:84:79:31:d4:88:98:b6:f7:d7:f3:4b:65:
                    18:91:dd:89:cc:b2:f9:fc:73:03:7c:cd:88:08:cc:
                    d1:75:5b:7c:bc:cf:f0:c5:50:f2:a0:d5:4b:03:02:
                    bf:61:cf:2e:43:02:52:5d:cb:d2:ab:2c:a2:02:2c:
                    fb:9a:2d:45:8a:1b:10:91:2c:07:7c:4f:3b:a7:4c:
                    06:50:a6:65:fe:1a:16:e0:bf:6f:6c:0f:f2:f0:21:
                    d4:2c:85:8d:4e:f7:33:07:0d:ca:37:48:a2:5d:b1:
                    fc:44:09:41:6b:95:9d:68:9c:ba:b4:4d:ee:18:59:
                    3a:ab:9a:9e:3b:fa:5b:2f:1f:0c:5a:2b:b0:24:4b:
                    f8:f5:92:46:0a:f7:48:79:9d:91:c8:9c:72:38:33:
                    05:2f:97:fe:08:2f:6f:5f:f1:b1:f2:ec:59:0b:01:
                    ad:56:08:e8:c1:2f:a8:3a:a9:ca:0a:95:28:a5:98:
                    79:3e:7c:a3:89:85:b8:c4:dd:8e:5b:7a:3b:bf:ed:
                    5d:f4:8b:68:64:dd:d1:29:c7:35:58:d6:b1:8b:7c:
                    70:6c:3c:39:22:25:bb:9f:4f:5a:a0:08:d1:ed:c6:
                    30:f9:8d:f5:d7:c4:9f:a8:fe:0d:13:ff:c8:1e:c6:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:78:09:CB:AE:4E:67:C5:2A:C9:79:B4:45:1C:B4:BB:71:DD:AB:CE
            X509v3 Authority Key Identifier:
                keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/1-3gJy65OZ8UqyXm0RRy0u3Hdq84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:488:bb12::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:e4:7f:3d:d5:82:7a:53:20:09:ad:15:e1:24:a5:a6:7d:
         76:b7:a3:70:02:03:9e:5f:63:f1:95:f9:7e:ad:88:64:a2:55:
         a0:bb:0b:36:2d:9d:52:20:2f:0b:bc:76:2f:a3:47:d3:e2:d5:
         6f:d6:4d:a0:9f:b0:c2:56:97:e0:62:6d:60:7f:ab:4f:13:45:
         b4:49:a4:e0:8d:64:00:9a:36:75:de:e3:a0:0b:44:5c:39:90:
         0d:8f:48:77:3a:d4:09:47:22:8a:13:49:39:c8:00:1f:57:ed:
         85:2e:7f:83:64:87:ad:6f:6e:db:29:f8:09:13:ff:c3:76:db:
         43:8d:b1:8a:66:74:49:e9:22:75:43:dd:87:c5:df:5f:64:ed:
         71:0c:bc:4c:fb:a8:35:25:54:9d:5b:76:6b:df:91:0f:97:d5:
         a5:58:46:96:26:25:89:8e:95:29:aa:10:59:af:74:07:9c:b0:
         00:00:8d:ad:87:f8:bd:f3:91:e4:28:a7:6a:97:c3:e9:cb:3a:
         3f:01:2c:bc:e6:ed:bb:2b:1a:0b:c0:bc:32:4a:74:98:63:a7:
         b8:71:e3:68:7a:ab:11:15:e9:85:52:70:f7:ae:3d:01:8a:c1:
         0d:99:be:65:56:2b:90:f0:24:bb:25:9f:56:55:9d:88:d5:39:
         16:b7:c5:34
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAYRRi9glLXeE5sK2xuW0tNKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjIxMTA3MTAwMzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjc4MDljYmFlNGU2N2M1MmFjOTc5YjQ0NTFjYjRiYjcxZGRhYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5uTsUS3zHF1cdUOW9CSfVaEeTHU
iJi299fzS2UYkd2JzLL5/HMDfM2ICMzRdVt8vM/wxVDyoNVLAwK/Yc8uQwJSXcvS
qyyiAiz7mi1FihsQkSwHfE87p0wGUKZl/hoW4L9vbA/y8CHULIWNTvczBw3KN0ii
XbH8RAlBa5WdaJy6tE3uGFk6q5qeO/pbLx8MWiuwJEv49ZJGCvdIeZ2RyJxyODMF
L5f+CC9vX/Gx8uxZCwGtVgjowS+oOqnKCpUopZh5PnyjiYW4xN2OW3o7v+1d9Ito
ZN3RKcc1WNaxi3xwbDw5IiW7n09aoAjR7cYw+Y3118SfqP4NE//IHsbANQIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPt4CcuuTmfFKsl5tEUctLtx3avOMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvMS0zZ0p5NjVPWjhVcXlYbTBSUnkwdTNIZHE4NC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjAvNDIwNDFkLTU5MzEtNDgyNC05MjU0LTE2MWYzNDIzODdk
MS8xL3VtN1EtM3N5Q0RLc0ZZQlRUSHNtUHpCT21Ccy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoBBIi7
EjANBgkqhkiG9w0BAQsFAAOCAQEAM83kfz3VgnpTIAmtFeEkpaZ9drejcAIDnl9j
8ZX5fq2IZKJVoLsLNi2dUiAvC7x2L6NH0+LVb9ZNoJ+wwlaX4GJtYH+rTxNFtEmk
4I1kAJo2dd7joAtEXDmQDY9IdzrUCUciihNJOcgAH1fthS5/g2SHrW9u2yn4CRP/
w3bbQ42ximZ0SekidUPdh8XfX2TtcQy8TPuoNSVUnVt2a9+RD5fVpVhGliYliY6V
KaoQWa90B5ywAACNrYf4vfOR5CinapfD6cs6PwEsvObtuysaC8C8Mkp0mGOnuHHj
aHqrERXphVJw9649AYrBDZm+ZVYrkPAkuyWfVlWdiNU5FrfFNA==
-----END CERTIFICATE-----