Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/U9APYwF4YFIf4DPR_LGwqnjttTw.roa
File:                     U9APYwF4YFIf4DPR_LGwqnjttTw.roa (raw, json)
Hash identifier:          GtLJCdmuORB443oHAdd0y/XOo1TP/UPui/faRIz25+0=
Subject key identifier:   53:D0:0F:63:01:78:60:52:1F:E0:33:D1:FC:B1:B0:AA:78:ED:B5:3C
Certificate issuer:       /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial:       0474F03E
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/U9APYwF4YFIf4DPR_LGwqnjttTw.roa
Signing time:             Sat 01 Jan 2022 14:01:37 +0000
ROA not before:           Sat 01 Jan 2022 14:01:37 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49409
IP address blocks:        185.179.246.0/24 maxlen: 24
                          2a10:4d40::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74772542 (0x474f03e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
        Validity
            Not Before: Jan  1 14:01:37 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=53d00f63017860521fe033d1fcb1b0aa78edb53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:81:eb:20:2d:be:22:12:a4:92:e3:2a:75:
                    d8:06:85:02:0c:ae:c0:e9:20:b6:3b:52:59:ac:b7:
                    c2:a0:26:08:8e:cb:45:ef:5a:6a:6d:7f:82:34:75:
                    98:40:1d:e6:48:40:80:e0:85:82:47:90:d5:a7:e8:
                    cb:64:a8:8b:5d:0d:b9:38:bb:58:55:08:8d:36:cf:
                    92:76:e5:c7:04:d6:26:2a:6b:7f:dd:24:37:71:88:
                    5e:75:f3:99:66:11:44:db:04:fb:61:3a:66:ea:e4:
                    5f:e2:d1:b7:38:11:54:19:fe:51:4f:f5:01:34:6d:
                    de:41:cf:18:25:61:9b:57:76:06:5a:18:e1:14:c0:
                    34:62:91:37:1b:5b:8d:84:1c:1c:de:cd:f9:b0:25:
                    6d:b5:b3:84:60:59:33:e1:0b:dd:a3:a0:17:94:8a:
                    2a:53:80:07:8b:dd:45:6f:d5:d0:6f:58:cb:51:62:
                    5a:7d:9d:6a:18:ee:90:b9:de:6a:e9:5e:23:99:b4:
                    16:74:45:86:1e:ee:39:c0:20:00:01:bb:7f:d4:5a:
                    91:0f:11:e3:e6:19:77:5b:d0:9e:cc:cc:d6:a1:2b:
                    bd:ef:c8:52:48:97:6c:4b:22:ad:a4:b0:f9:39:d3:
                    14:c1:c7:8f:d2:2f:49:05:74:74:d1:cf:6f:e9:6c:
                    56:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D0:0F:63:01:78:60:52:1F:E0:33:D1:FC:B1:B0:AA:78:ED:B5:3C
            X509v3 Authority Key Identifier:
                keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/U9APYwF4YFIf4DPR_LGwqnjttTw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.179.246.0/24
                IPv6:
                  2a10:4d40::/29

    Signature Algorithm: sha256WithRSAEncryption
         02:97:69:08:90:c4:fe:08:05:bc:40:5f:98:0d:20:b2:9f:cf:
         5a:b5:f6:4a:e5:8b:91:51:a7:cc:0d:6c:b1:2c:f9:4d:af:e7:
         bb:f0:38:0d:0e:9d:25:cd:9f:b3:07:7d:db:7b:84:2e:05:d2:
         5f:72:f4:47:d8:07:12:91:16:a3:1f:96:0b:83:46:3b:fe:bc:
         4d:16:a4:87:e4:a9:5e:aa:82:4b:7c:d9:47:4b:df:cf:5a:78:
         3c:e5:c1:d0:b6:77:80:13:8f:6e:18:6c:35:05:42:3c:fd:05:
         dd:19:1b:8d:89:2c:5c:64:f5:0d:a1:5a:45:96:53:0e:ec:a2:
         51:31:ea:cc:a2:75:32:e8:a4:d0:03:c7:e2:d4:be:e5:43:27:
         61:7f:2c:c4:fb:af:d9:5e:2e:6c:a9:dc:87:5b:a3:4c:96:a3:
         4b:04:49:e9:38:fe:a5:f9:d3:5f:0a:f6:32:5c:2b:88:dd:b0:
         25:94:a7:c5:94:9c:f9:22:37:58:1c:61:07:fd:8f:3d:ff:1f:
         62:23:b3:b9:a9:7d:00:ff:7e:3e:07:2f:fd:d5:0d:1f:9a:04:
         77:cc:93:04:39:8a:e8:33:25:4f:c7:77:2d:c2:00:73:23:85:
         ed:df:3c:ef:84:f9:d3:b7:2d:fb:16:19:64:22:c4:79:e2:6e:
         3c:4c:7d:70
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBHTwPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NTE2NzRmZWU1NTU2NzI4MTc1ZWZiNTZlYWE4Yjk5ZjM4MTVhZmE3MB4XDTIyMDEw
MTE0MDEzN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTNkMDBmNjMwMTc4
NjA1MjFmZTAzM2QxZmNiMWIwYWE3OGVkYjUzYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALL1gesgLb4iEqSS4yp12AaFAgyuwOkgtjtSWay3wqAmCI7L
Re9aam1/gjR1mEAd5khAgOCFgkeQ1afoy2Soi10NuTi7WFUIjTbPknblxwTWJipr
f90kN3GIXnXzmWYRRNsE+2E6ZurkX+LRtzgRVBn+UU/1ATRt3kHPGCVhm1d2BloY
4RTANGKRNxtbjYQcHN7N+bAlbbWzhGBZM+EL3aOgF5SKKlOAB4vdRW/V0G9Yy1Fi
Wn2dahjukLneauleI5m0FnRFhh7uOcAgAAG7f9RakQ8R4+YZd1vQnszM1qErve/I
UkiXbEsiraSw+TnTFMHHj9IvSQV0dNHPb+lsVsUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRT0A9jAXhgUh/gM9H8sbCqeO21PDAfBgNVHSMEGDAWgBTFFnT+5VVnKBde
+1bqqLmfOBWvpzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3hSWjBfdVZWWnlnWFh2dFc2cWk1bnpnVnI2Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmQvNWZiMDg5LTI1ODktNGM3MS1iMDI2LTNjYmUxYWYzYjgyYy8x
L1U5QVBZd0Y0WUZJZjREUFJfTEd3cW5qdHRUdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmQv
NWZiMDg5LTI1ODktNGM3MS1iMDI2LTNjYmUxYWYzYjgyYy8xL3hSWjBfdVZWWnln
WFh2dFc2cWk1bnpnVnI2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALmz9jANBAIAAjAHAwUDKhBNQDAN
BgkqhkiG9w0BAQsFAAOCAQEAApdpCJDE/ggFvEBfmA0gsp/PWrX2SuWLkVGnzA1s
sSz5Ta/nu/A4DQ6dJc2fswd923uELgXSX3L0R9gHEpEWox+WC4NGO/68TRakh+Sp
XqqCS3zZR0vfz1p4POXB0LZ3gBOPbhhsNQVCPP0F3RkbjYksXGT1DaFaRZZTDuyi
UTHqzKJ1Muik0APH4tS+5UMnYX8sxPuv2V4ubKnch1ujTJajSwRJ6Tj+pfnTXwr2
MlwriN2wJZSnxZSc+SI3WBxhB/2PPf8fYiOzual9AP9+Pgcv/dUNH5oEd8yTBDmK
6DMlT8d3LcIAcyOF7d8874T507ct+xYZZCLEeeJuPEx9cA==
-----END CERTIFICATE-----