Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/2YSp_znt7b2weLtXD1rc4rO0fZ8.roa
File:                     2YSp_znt7b2weLtXD1rc4rO0fZ8.roa (raw, json)
Hash identifier:          9k/NUxAKeXmtZGawx6pqY1NA3VndKhy/R+Wp0OoYGK8=
Subject key identifier:   D9:84:A9:FF:39:ED:ED:BD:B0:78:BB:57:0F:5A:DC:E2:B3:B4:7D:9F
Certificate issuer:       /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial:       08AC61A7
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/2YSp_znt7b2weLtXD1rc4rO0fZ8.roa
Signing time:             Sat 01 Jan 2022 14:01:06 +0000
ROA not before:           Sat 01 Jan 2022 14:01:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207564
IP address blocks:        185.115.247.0/24 maxlen: 24
                          2001:4da8:c010::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145514919 (0x8ac61a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
        Validity
            Not Before: Jan  1 14:01:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d984a9ff39ededbdb078bb570f5adce2b3b47d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:54:17:37:38:8e:d9:ee:a5:5e:b3:a2:b5:
                    0b:0b:4f:00:78:0b:fd:d9:ef:03:ed:6e:26:7e:7b:
                    d7:28:d8:f5:9e:04:d2:51:85:70:5d:cd:37:08:71:
                    02:f5:bb:a5:23:bd:74:7d:5a:83:57:c8:10:9b:ee:
                    18:1b:25:92:3c:c7:37:99:6a:4e:1d:c5:6a:41:55:
                    99:79:00:4e:1e:f0:30:26:4f:0a:4a:96:97:da:cc:
                    d4:7a:d1:1b:b1:81:81:27:2b:4d:69:a4:3a:28:ee:
                    1c:56:84:37:a2:9e:56:44:ec:17:8c:8d:11:2b:d4:
                    10:87:1e:33:a8:1c:51:31:e8:4a:b2:4c:5e:3c:84:
                    28:b6:fb:7e:d3:8d:e7:d2:a9:cb:7a:8d:88:9d:f6:
                    17:5a:46:38:91:80:52:18:74:94:82:23:b2:b5:5d:
                    6a:d5:4a:9a:dc:ca:4d:d5:c0:e7:61:8e:9f:96:d4:
                    bd:62:63:32:2a:e9:28:55:ec:42:24:c7:9d:73:5b:
                    49:d6:47:41:44:98:3a:9a:b5:3c:8a:4f:81:67:f0:
                    10:7a:66:9b:da:8f:c5:19:17:d3:59:e3:d9:19:d3:
                    2f:3c:fa:34:c9:6c:23:0d:04:5c:dd:0c:a9:8f:26:
                    b8:49:3d:50:58:45:0c:fc:f3:c1:1f:f9:ec:dc:e9:
                    2b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:84:A9:FF:39:ED:ED:BD:B0:78:BB:57:0F:5A:DC:E2:B3:B4:7D:9F
            X509v3 Authority Key Identifier:
                keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/2YSp_znt7b2weLtXD1rc4rO0fZ8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.247.0/24
                IPv6:
                  2001:4da8:c010::/44

    Signature Algorithm: sha256WithRSAEncryption
         9a:a7:e0:cd:59:97:94:51:b4:99:94:37:e0:d2:62:c7:d2:19:
         6a:7e:24:eb:16:8c:3e:68:dd:8e:85:a7:82:1f:5d:42:dd:fb:
         f5:20:9f:d8:a9:da:12:7f:85:ac:0b:2a:80:dc:9a:4f:ae:de:
         88:ba:cf:6f:87:f8:61:4e:43:30:c0:73:e3:7d:ec:9c:db:06:
         fa:b4:4e:da:8b:21:4d:6c:4a:03:07:f6:0d:02:78:4d:23:47:
         e1:58:7b:67:c4:f3:60:4a:f6:d5:a1:fc:80:af:6f:1f:14:09:
         92:37:98:1d:12:1a:92:5c:ce:3e:f0:35:a3:cc:64:03:44:f5:
         fd:24:80:4e:ca:30:1d:4c:50:64:79:53:47:56:04:ac:28:ba:
         70:4c:e4:ca:be:8e:d7:e7:a3:05:b7:30:b9:df:e8:2e:2a:62:
         9f:4d:3c:6a:0d:2d:17:08:5a:a4:dd:5c:ea:36:40:65:82:42:
         d5:f9:44:5b:66:40:b9:3b:85:74:ea:f3:d5:e7:c1:56:b4:d6:
         d2:6f:c0:90:28:83:79:7d:bf:c2:08:62:ba:05:3a:00:5a:fe:
         2a:1c:8e:e4:9f:9c:2e:5a:5f:4e:11:a3:bc:57:36:25:5a:53:
         3e:93:70:9e:e2:79:74:d3:c0:df:21:f4:c3:85:7a:5c:0d:ca:
         5b:41:bc:a4
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECKxhpzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ZTdkNmY1NWExM2IwMDFlNzQwMWY0MGVhYWFlYjgyZjY3YmQ0MjJlMB4XDTIyMDEw
MTE0MDEwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDk4NGE5ZmYzOWVk
ZWRiZGIwNzhiYjU3MGY1YWRjZTJiM2I0N2Q5ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+fVBc3OI7Z7qVes6K1CwtPAHgL/dnvA+1uJn571yjY9Z4E
0lGFcF3NNwhxAvW7pSO9dH1ag1fIEJvuGBslkjzHN5lqTh3FakFVmXkATh7wMCZP
CkqWl9rM1HrRG7GBgScrTWmkOijuHFaEN6KeVkTsF4yNESvUEIceM6gcUTHoSrJM
XjyEKLb7ftON59Kpy3qNiJ32F1pGOJGAUhh0lIIjsrVdatVKmtzKTdXA52GOn5bU
vWJjMirpKFXsQiTHnXNbSdZHQUSYOpq1PIpPgWfwEHpmm9qPxRkX01nj2RnTLzz6
NMlsIw0EXN0MqY8muEk9UFhFDPzzwR/57NzpK5MCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTZhKn/Oe3tvbB4u1cPWtzis7R9nzAfBgNVHSMEGDAWgBQufW9VoTsAHnQB
9A6qrrgvZ71CLjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0xuMXZWYUU3QUI1MEFmUU9xcTY0TDJlOVFpNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDEvZmNmZDhjLTg4NzEtNGQ2YS1iNGE1LWQ2NWI2NTRjOTljNS8x
LzJZU3Bfem50N2Iyd2VMdFhEMXJjNHJPMGZaOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEv
ZmNmZDhjLTg4NzEtNGQ2YS1iNGE1LWQ2NWI2NTRjOTljNS8xL0xuMXZWYUU3QUI1
MEFmUU9xcTY0TDJlOVFpNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALlz9zAPBAIAAjAJAwcEIAFNqMAQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCap+DNWZeUUbSZlDfg0mLH0hlqfiTrFow+aN2O
haeCH11C3fv1IJ/YqdoSf4WsCyqA3JpPrt6Ius9vh/hhTkMwwHPjfeyc2wb6tE7a
iyFNbEoDB/YNAnhNI0fhWHtnxPNgSvbVofyAr28fFAmSN5gdEhqSXM4+8DWjzGQD
RPX9JIBOyjAdTFBkeVNHVgSsKLpwTOTKvo7X56MFtzC53+guKmKfTTxqDS0XCFqk
3VzqNkBlgkLV+URbZkC5O4V06vPV58FWtNbSb8CQKIN5fb/CCGK6BToAWv4qHI7k
n5wuWl9OEaO8VzYlWlM+k3Ce4nl008DfIfTDhXpcDcpbQbyk
-----END CERTIFICATE-----