Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/4LI4K4iVLd07kxQl7P21XD6hBAI.roa
File:                     4LI4K4iVLd07kxQl7P21XD6hBAI.roa (raw, json)
Hash identifier:          6a13/mEJ5hh79rFLcSElhX0KGYFZ7vzFN43J0X4uBes=
Subject key identifier:   E0:B2:38:2B:88:95:2D:DD:3B:93:14:25:EC:FD:B5:5C:3E:A1:04:02
Certificate issuer:       /CN=b043e621fe1009701f6366843c0abc41e180c144
Certificate serial:       017C95
Authority key identifier: B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/4LI4K4iVLd07kxQl7P21XD6hBAI.roa
Signing time:             Tue 26 Apr 2022 06:44:05 +0000
ROA not before:           Tue 26 Apr 2022 06:44:05 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8708
IP address blocks:        193.111.161.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97429 (0x17c95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b043e621fe1009701f6366843c0abc41e180c144
        Validity
            Not Before: Apr 26 06:44:05 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e0b2382b88952ddd3b931425ecfdb55c3ea10402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:00:8a:cc:77:ef:09:d9:1b:3b:6f:76:cd:15:
                    aa:00:d7:af:9a:f3:28:52:37:7a:e3:d1:4d:1c:b4:
                    dd:f7:5f:1a:de:bd:e7:5d:7d:82:2d:07:30:50:35:
                    af:cd:39:62:78:68:20:5a:b4:23:36:04:dd:78:d3:
                    6a:fd:b8:11:83:44:68:2f:f9:6d:77:b8:a6:b6:f1:
                    a1:b8:63:38:d5:37:1b:e7:07:99:c9:49:de:3e:5f:
                    3a:03:27:56:87:25:42:89:99:e0:0c:42:87:74:0b:
                    91:59:2c:e8:b8:a7:fe:2c:4f:b0:71:a1:58:bf:38:
                    a5:7e:da:93:4b:9b:08:62:14:0a:a0:df:0b:8f:cc:
                    df:02:d3:f2:60:43:38:b8:52:d3:7f:42:81:cf:67:
                    a4:e7:f3:2e:7f:77:da:b0:4d:d9:9d:07:73:b6:07:
                    df:ed:fb:b9:b0:73:b4:e6:b4:6f:3c:48:f4:6d:cb:
                    02:76:6d:e8:da:a6:06:46:43:e3:19:7f:fa:fb:c9:
                    35:b0:c5:55:4f:6f:4e:12:00:b9:7f:bc:b7:0e:97:
                    7f:8e:be:9d:71:af:c5:31:ae:b7:0c:47:b5:33:19:
                    86:a3:0d:7a:a5:8c:12:6d:7a:b1:b5:0f:74:4d:d4:
                    70:93:b4:a5:d9:7e:94:d8:fc:90:3e:90:5e:29:06:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B2:38:2B:88:95:2D:DD:3B:93:14:25:EC:FD:B5:5C:3E:A1:04:02
            X509v3 Authority Key Identifier:
                keyid:B0:43:E6:21:FE:10:09:70:1F:63:66:84:3C:0A:BC:41:E1:80:C1:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/4LI4K4iVLd07kxQl7P21XD6hBAI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/395684-c872-4217-b27c-8b5ea6648176/1/sEPmIf4QCXAfY2aEPAq8QeGAwUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:d8:ff:5a:f7:d7:4c:a1:b9:92:8d:df:8f:61:ac:b6:0b:18:
         61:3c:59:54:58:54:b8:3a:f2:1c:3b:e5:f9:2b:53:dc:43:46:
         f5:b8:25:ef:5c:35:52:a3:76:5c:df:a1:d5:54:69:4e:93:f2:
         e4:f7:b1:f7:68:5d:29:59:88:88:33:38:08:76:3d:d1:40:99:
         01:bd:13:25:9e:d6:2c:45:71:67:90:d8:1f:4a:90:73:ce:3f:
         60:1b:de:f6:a3:75:69:a9:13:43:98:87:cb:6b:e7:8c:7f:b5:
         ad:23:0c:52:b3:c4:cb:b2:ea:e0:e5:d6:4d:93:5e:37:d3:2c:
         63:11:43:68:2d:86:14:19:e4:07:07:7f:84:70:3a:35:99:9c:
         fb:96:d3:66:a7:0a:dc:90:5c:3d:3d:d2:7a:10:ef:4a:17:5b:
         79:9c:fd:5d:b2:b9:8d:06:bf:6b:e7:34:0b:c3:b4:12:8c:90:
         7f:c6:e0:7c:a6:ec:95:aa:83:fa:8e:49:57:27:f9:9c:32:d6:
         c8:36:88:b8:8c:85:db:84:7d:4c:57:19:b9:57:d3:13:18:82:
         71:e5:c2:11:78:c2:3e:88:ed:35:6e:13:43:c4:0e:12:d4:51:
         17:d8:c7:1f:0d:b2:3e:72:1d:a9:2f:d5:b2:6b:f2:f7:67:35:
         d2:71:5b:df
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAXyVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
NDNlNjIxZmUxMDA5NzAxZjYzNjY4NDNjMGFiYzQxZTE4MGMxNDQwHhcNMjIwNDI2
MDY0NDA1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhlMGIyMzgyYjg4OTUy
ZGRkM2I5MzE0MjVlY2ZkYjU1YzNlYTEwNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlwCKzHfvCdkbO292zRWqANevmvMoUjd649FNHLTd918a3r3n
XX2CLQcwUDWvzTlieGggWrQjNgTdeNNq/bgRg0RoL/ltd7imtvGhuGM41Tcb5weZ
yUnePl86AydWhyVCiZngDEKHdAuRWSzouKf+LE+wcaFYvzilftqTS5sIYhQKoN8L
j8zfAtPyYEM4uFLTf0KBz2ek5/Muf3fasE3ZnQdztgff7fu5sHO05rRvPEj0bcsC
dm3o2qYGRkPjGX/6+8k1sMVVT29OEgC5f7y3Dpd/jr6dca/FMa63DEe1MxmGow16
pYwSbXqxtQ90TdRwk7Sl2X6U2PyQPpBeKQbIJwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFOCyOCuIlS3dO5MUJez9tVw+oQQCMB8GA1UdIwQYMBaAFLBD5iH+EAlwH2Nm
hDwKvEHhgMFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
c0VQbUlmNFFDWEFmWTJhRVBBcThRZUdBd1VRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wMC8zOTU2ODQtYzg3Mi00MjE3LWIyN2MtOGI1ZWE2NjQ4MTc2LzEv
NExJNEs0aVZMZDA3a3hRbDdQMjFYRDZoQkFJLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8z
OTU2ODQtYzg3Mi00MjE3LWIyN2MtOGI1ZWE2NjQ4MTc2LzEvc0VQbUlmNFFDWEFm
WTJhRVBBcThRZUdBd1VRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW+hMA0GCSqGSIb3DQEBCwUAA4IB
AQCY2P9a99dMobmSjd+PYay2CxhhPFlUWFS4OvIcO+X5K1PcQ0b1uCXvXDVSo3Zc
36HVVGlOk/Lk97H3aF0pWYiIMzgIdj3RQJkBvRMlntYsRXFnkNgfSpBzzj9gG972
o3VpqRNDmIfLa+eMf7WtIwxSs8TLsurg5dZNk1430yxjEUNoLYYUGeQHB3+EcDo1
mZz7ltNmpwrckFw9PdJ6EO9KF1t5nP1dsrmNBr9r5zQLw7QSjJB/xuB8puyVqoP6
jklXJ/mcMtbINoi4jIXbhH1MVxm5V9MTGIJx5cIReMI+iO01bhNDxA4S1FEX2Mcf
DbI+ch2pL9Wya/L3ZzXScVvf
-----END CERTIFICATE-----