Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/ovkfOjoA2L1_ZqyIrFp4-UveLQA.roa
File:                     ovkfOjoA2L1_ZqyIrFp4-UveLQA.roa (raw, json)
Hash identifier:          87k8rXaOvoKhVvquSLjDNhWZZDHK5eHwdnSYz3giGJ8=
Subject key identifier:   A2:F9:1F:3A:3A:00:D8:BD:7F:66:AC:88:AC:5A:78:F9:4B:DE:2D:00
Certificate issuer:       /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
Certificate serial:       0F04910D
Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/ovkfOjoA2L1_ZqyIrFp4-UveLQA.roa
Signing time:             Sat 01 Jan 2022 08:01:26 +0000
ROA not before:           Sat 01 Jan 2022 08:01:26 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9053
IP address blocks:        185.115.0.0/24 maxlen: 24
                          2a02:5420:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251957517 (0xf04910d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318
        Validity
            Not Before: Jan  1 08:01:26 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a2f91f3a3a00d8bd7f66ac88ac5a78f94bde2d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:fc:96:ad:8b:81:b0:db:b9:3b:8e:4a:27:
                    0b:90:be:0d:4e:fb:38:8e:fe:93:cd:3e:e6:01:7f:
                    72:8a:c2:c4:10:b7:3e:d3:0c:a9:ca:23:c3:25:b0:
                    a0:eb:ac:96:d0:ec:c5:9d:b4:56:4c:6f:6a:23:73:
                    fd:9a:80:9d:e0:47:33:59:c6:f2:b3:67:37:8b:c2:
                    49:fd:1e:94:da:49:87:e1:c7:ad:20:ce:f1:52:22:
                    4b:bc:84:2b:4e:26:8e:cc:08:7b:f9:36:09:6a:89:
                    a0:97:3d:e2:6d:35:72:83:e0:a2:8a:5f:14:34:60:
                    1a:9b:0a:6c:76:0a:50:fd:5a:1d:29:7e:35:0d:11:
                    90:e0:1e:93:8d:9a:aa:bc:ac:cd:ca:30:2a:ea:94:
                    56:1c:8a:f9:4f:36:83:20:5d:06:90:c7:87:bf:f2:
                    83:64:a5:ef:4c:1b:9f:55:96:08:58:69:79:d5:3a:
                    71:a2:26:8f:5b:4c:e6:73:69:f6:06:ee:71:51:2a:
                    bf:42:82:96:77:cc:88:59:57:4b:bf:c8:67:e2:a1:
                    75:46:a7:f2:5c:42:b6:7b:27:1a:5c:6a:f2:c2:99:
                    47:2d:07:17:23:1b:27:8c:a2:5d:e3:9c:e9:44:8d:
                    fe:cb:fa:8a:a2:ff:b7:f0:1f:03:76:a3:bc:f8:c9:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F9:1F:3A:3A:00:D8:BD:7F:66:AC:88:AC:5A:78:F9:4B:DE:2D:00
            X509v3 Authority Key Identifier:
                keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/ovkfOjoA2L1_ZqyIrFp4-UveLQA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.0.0/24
                IPv6:
                  2a02:5420:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:aa:06:c3:de:cc:3a:f9:a6:52:88:0f:cb:37:09:00:60:7e:
         a0:4c:b7:08:53:8a:af:da:78:c9:00:8f:34:8e:28:45:6d:ce:
         cc:b1:a9:f7:52:c9:38:a3:71:92:6f:b3:97:ef:8a:5b:82:63:
         ab:8e:93:77:5f:cd:c6:cc:84:c6:d1:03:16:6b:c5:f5:65:4d:
         ad:1f:f8:c7:01:9b:46:5e:ed:43:5c:65:d0:56:11:e8:65:32:
         f6:e1:d4:ec:39:c5:4d:9f:a5:b8:4a:7f:21:0c:52:c0:1a:4d:
         1f:42:ac:df:ef:4d:ce:34:7e:4a:4a:12:56:c5:ae:db:a7:fe:
         b4:2a:7f:51:cd:50:c5:5a:a2:1f:0f:77:dd:d1:12:23:f6:4c:
         4e:40:3e:ee:ca:63:be:1b:e9:fc:58:59:75:73:6d:22:52:24:
         e6:df:27:93:fc:89:33:44:4b:2b:64:30:cd:97:37:5c:44:f6:
         f7:10:36:1a:dc:b3:8e:3d:29:e2:71:48:95:81:53:17:29:bb:
         89:9d:9a:ed:c6:3b:9e:d9:77:ce:44:5f:8e:69:c8:99:48:e8:
         4e:11:af:ef:75:81:6e:f6:16:65:e8:2d:9b:1e:af:87:96:77:
         b4:51:43:68:d0:08:95:2c:6f:76:73:7b:d3:40:f3:a5:b8:da:
         09:8b:0d:a3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEDwSRDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ZTY1ZGFiMjM5NDBjYjM5NGY5YWFhNjY0ZmVhNGQ2ZjhmNDJlMzE4MB4XDTIyMDEw
MTA4MDEyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTJmOTFmM2EzYTAw
ZDhiZDdmNjZhYzg4YWM1YTc4Zjk0YmRlMmQwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMaS/Jati4Gw27k7jkonC5C+DU77OI7+k80+5gF/corCxBC3
PtMMqcojwyWwoOusltDsxZ20VkxvaiNz/ZqAneBHM1nG8rNnN4vCSf0elNpJh+HH
rSDO8VIiS7yEK04mjswIe/k2CWqJoJc94m01coPgoopfFDRgGpsKbHYKUP1aHSl+
NQ0RkOAek42aqryszcowKuqUVhyK+U82gyBdBpDHh7/yg2Sl70wbn1WWCFhpedU6
caImj1tM5nNp9gbucVEqv0KClnfMiFlXS7/IZ+KhdUan8lxCtnsnGlxq8sKZRy0H
FyMbJ4yiXeOc6USN/sv6iqL/t/AfA3ajvPjJnskCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSi+R86OgDYvX9mrIisWnj5S94tADAfBgNVHSMEGDAWgBR+ZdqyOUDLOU+a
qmZP6k1vj0LjGDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2ZtWGFzamxBeXpsUG1xcG1ULXBOYjQ5QzR4Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDAvNThlYmIxLWRiZWMtNDdmOS1iYjk2LTg0OWNmY2FiYjY1Ny8x
L292a2ZPam9BMkwxX1pxeUlyRnA0LVV2ZUxRQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDAv
NThlYmIxLWRiZWMtNDdmOS1iYjk2LTg0OWNmY2FiYjY1Ny8xL2ZtWGFzamxBeXps
UG1xcG1ULXBOYjQ5QzR4Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALlzADAPBAIAAjAJAwcAKgJUIAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQA6qgbD3sw6+aZSiA/LNwkAYH6gTLcIU4qv2njJ
AI80jihFbc7Msan3Usk4o3GSb7OX74pbgmOrjpN3X83GzITG0QMWa8X1ZU2tH/jH
AZtGXu1DXGXQVhHoZTL24dTsOcVNn6W4Sn8hDFLAGk0fQqzf703ONH5KShJWxa7b
p/60Kn9RzVDFWqIfD3fd0RIj9kxOQD7uymO+G+n8WFl1c20iUiTm3yeT/IkzREsr
ZDDNlzdcRPb3EDYa3LOOPSnicUiVgVMXKbuJnZrtxjue2XfORF+OaciZSOhOEa/v
dYFu9hZl6C2bHq+Hlne0UUNo0AiVLG92c3vTQPOluNoJiw2j
-----END CERTIFICATE-----