Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/HhxmS-qp9W2xd_UMOz1ZZk40wpE.roa
File:                     HhxmS-qp9W2xd_UMOz1ZZk40wpE.roa (raw, json)
Hash identifier:          FsSN5IEQ9NAa2c5sOjQxSjg7QfeH8wn6NOnMxvBijQw=
Subject key identifier:   1E:1C:66:4B:EA:A9:F5:6D:B1:77:F5:0C:3B:3D:59:66:4E:34:C2:91
Certificate issuer:       /CN=947320d030930178e6f7ceef91d2ab8784d3dc16
Certificate serial:       0183F2070D55B68FEDCA85493C50DB08E18F
Authority key identifier: 94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/HhxmS-qp9W2xd_UMOz1ZZk40wpE.roa
Signing time:             Wed 19 Oct 2022 20:54:51 +0000
ROA not before:           Wed 19 Oct 2022 20:54:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62005
IP address blocks:        185.123.53.0/24 maxlen: 24
                          193.109.120.0/24 maxlen: 24
                          2a10:1fc0:1::/48 maxlen: 48
                          2a10:1fc0:2::/48 maxlen: 48
                          2a10:1fc0:5::/48 maxlen: 48
                          2a10:1fc0:10::/48 maxlen: 48
                          2a10:1fc0:8::/48 maxlen: 48
                          2a10:1fc0:b::/48 maxlen: 48
                          2a10:1fc0:3::/48 maxlen: 48
                          2a10:1fc0:6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f2:07:0d:55:b6:8f:ed:ca:85:49:3c:50:db:08:e1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947320d030930178e6f7ceef91d2ab8784d3dc16
        Validity
            Not Before: Oct 19 20:54:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=1e1c664beaa9f56db177f50c3b3d59664e34c291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4f:28:15:8c:01:b9:05:02:96:e9:66:8a:18:
                    94:9e:c3:95:8a:96:60:7c:ae:0a:c8:fd:e2:f5:60:
                    8d:76:82:32:55:20:db:cb:6f:1c:d0:5a:38:76:a3:
                    de:0d:0d:ce:b8:20:2f:04:6b:32:bb:68:95:2d:d6:
                    9d:9d:4c:e6:83:e3:9c:85:9b:24:87:8e:df:93:fb:
                    a4:99:18:7f:89:ec:a7:81:12:18:8b:e3:09:7d:f3:
                    e2:b7:4a:09:af:5b:2d:75:93:d6:5a:16:db:91:97:
                    7b:55:7e:e1:69:42:73:e9:f6:16:65:27:b8:a9:c9:
                    17:0e:09:df:11:95:b5:eb:f0:bc:b7:ff:e9:13:38:
                    b7:c0:58:44:46:fa:15:a4:84:25:d6:84:a1:21:c8:
                    52:0a:e9:eb:6c:86:f8:a6:f4:ef:fc:de:1e:7b:ff:
                    be:ad:15:8c:b1:3b:0e:b5:9e:7a:70:c0:5d:ce:a9:
                    50:7e:b3:e3:e5:19:e4:98:a7:4e:a5:93:fe:70:9e:
                    35:51:ca:8a:33:fb:2f:c9:10:0b:2d:55:96:6b:6b:
                    b2:e5:4e:30:fd:1a:29:e7:3e:a5:ae:2d:bc:10:87:
                    af:02:2b:d2:3c:91:3a:88:0d:5f:c0:fa:13:2e:f1:
                    2a:96:83:ab:2f:62:6b:9c:6a:25:73:c9:e1:af:ed:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1C:66:4B:EA:A9:F5:6D:B1:77:F5:0C:3B:3D:59:66:4E:34:C2:91
            X509v3 Authority Key Identifier:
                keyid:94:73:20:D0:30:93:01:78:E6:F7:CE:EF:91:D2:AB:87:84:D3:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHMg0DCTAXjm987vkdKrh4TT3BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/HhxmS-qp9W2xd_UMOz1ZZk40wpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/82e876-c997-4605-87aa-8ac4a21938b4/1/lHMg0DCTAXjm987vkdKrh4TT3BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.123.53.0/24
                  193.109.120.0/24
                IPv6:
                  2a10:1fc0:1::-2a10:1fc0:3:ffff:ffff:ffff:ffff:ffff
                  2a10:1fc0:5::-2a10:1fc0:6:ffff:ffff:ffff:ffff:ffff
                  2a10:1fc0:8::/48
                  2a10:1fc0:b::/48
                  2a10:1fc0:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:db:39:26:ce:9e:ed:fb:8c:4c:ab:93:5d:2b:7f:c5:e6:47:
         65:2e:86:cc:31:60:60:6e:d7:9a:a3:fc:42:1f:b2:1b:77:97:
         1f:27:65:63:b6:81:1c:55:04:1c:20:a2:5b:ff:0a:fc:0d:3d:
         0a:fe:46:31:3f:3c:3f:21:4f:c0:ee:e0:ce:07:6b:da:10:da:
         eb:ac:a9:0a:a8:a1:f1:3d:f3:d5:46:3f:cd:02:f9:05:52:c0:
         0d:c6:56:86:be:a2:17:4d:c8:69:5f:71:dc:ed:db:a7:79:2c:
         81:bb:4b:4a:7b:d5:9f:ef:ae:e6:04:eb:70:a1:35:e9:95:27:
         11:58:f3:04:0d:cb:a9:0c:73:54:de:c3:03:d4:9d:14:2b:28:
         99:ac:87:05:a0:79:23:88:df:9f:db:4c:8d:6d:7f:7b:26:02:
         17:e2:f9:31:92:cb:50:2a:a6:e6:1f:4d:d0:c8:5c:85:c3:06:
         cc:b9:96:fb:d3:f9:09:37:ea:d2:8e:f6:ce:68:8f:e9:33:fd:
         3b:09:e2:76:6a:28:3e:bd:7f:48:51:ed:24:d1:d7:df:7d:11:
         36:a7:b8:27:a6:77:aa:7d:e2:f7:cc:b4:d0:12:84:87:99:83:
         7d:76:17:9f:8c:ae:7a:cc:9f:62:af:c2:53:35:15:b6:c5:6c:
         5f:33:91:16
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAYPyBw1Vto/tyoVJPFDbCOGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NzMyMGQwMzA5MzAxNzhlNmY3Y2VlZjkxZDJhYjg3ODRk
M2RjMTYwHhcNMjIxMDE5MjA1NDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTFjNjY0YmVhYTlmNTZkYjE3N2Y1MGMzYjNkNTk2NjRlMzRjMjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU8oFYwBuQUClulmihiUnsOVipZg
fK4KyP3i9WCNdoIyVSDby28c0Fo4dqPeDQ3OuCAvBGsyu2iVLdadnUzmg+OchZsk
h47fk/ukmRh/ieyngRIYi+MJffPit0oJr1stdZPWWhbbkZd7VX7haUJz6fYWZSe4
qckXDgnfEZW16/C8t//pEzi3wFhERvoVpIQl1oShIchSCunrbIb4pvTv/N4ee/++
rRWMsTsOtZ56cMBdzqlQfrPj5RnkmKdOpZP+cJ41UcqKM/svyRALLVWWa2uy5U4w
/Rop5z6lri28EIevAivSPJE6iA1fwPoTLvEqloOrL2JrnGolc8nhr+0KzQIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFB4cZkvqqfVtsXf1DDs9WWZONMKRMB8GA1UdIwQY
MBaAFJRzINAwkwF45vfO75HSq4eE09wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEt
OGFjNGEyMTkzOGI0LzEvSGh4bVMtcXA5VzJ4ZF9VTU96MVpaazQwd3BFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84MmU4NzYtYzk5Ny00NjA1LTg3YWEtOGFjNGEyMTkzOGI0
LzEvbEhNZzBEQ1RBWGptOTg3dmtkS3JoNFRUM0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzASBAIAATAMAwQAuXs1AwQA
wW14MEkEAgACMEMwEgMHACoQH8AAAQMHAioQH8AAADASAwcAKhAfwAAFAwcAKhAf
wAAGAwcAKhAfwAAIAwcAKhAfwAALAwcAKhAfwAAQMA0GCSqGSIb3DQEBCwUAA4IB
AQBd2zkmzp7t+4xMq5NdK3/F5kdlLobMMWBgbteao/xCH7Ibd5cfJ2VjtoEcVQQc
IKJb/wr8DT0K/kYxPzw/IU/A7uDOB2vaENrrrKkKqKHxPfPVRj/NAvkFUsANxlaG
vqIXTchpX3Hc7duneSyBu0tKe9Wf767mBOtwoTXplScRWPMEDcupDHNU3sMD1J0U
KyiZrIcFoHkjiN+f20yNbX97JgIX4vkxkstQKqbmH03QyFyFwwbMuZb70/kJN+rS
jvbOaI/pM/07CeJ2aig+vX9IUe0k0dfffRE2p7gnpneqfeL3zLTQEoSHmYN9dhef
jK56zJ9ir8JTNRW2xWxfM5EW
-----END CERTIFICATE-----