Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/E9v5QhEMG-I3tTgvZrXom03PsVg.roa
File:                     E9v5QhEMG-I3tTgvZrXom03PsVg.roa (raw, json)
Hash identifier:          CLJ1tZHIdFl8KyDpjTPOVhcXs0OtpJ/NRIadcADh6RE=
Subject key identifier:   13:DB:F9:42:11:0C:1B:E2:37:B5:38:2F:66:B5:E8:9B:4D:CF:B1:58
Certificate issuer:       /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial:       018553185645D7AC337C46ED8A79B44A0ABB
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/E9v5QhEMG-I3tTgvZrXom03PsVg.roa
Signing time:             Tue 27 Dec 2022 10:19:41 +0000
ROA not before:           Tue 27 Dec 2022 10:19:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31172
IP address blocks:        87.239.100.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:53:18:56:45:d7:ac:33:7c:46:ed:8a:79:b4:4a:0a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
        Validity
            Not Before: Dec 27 10:19:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=13dbf942110c1be237b5382f66b5e89b4dcfb158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f1:ed:cc:b0:2c:6b:b9:d0:1d:93:ed:a0:37:
                    fc:f3:51:dd:65:3e:e0:2e:e8:19:8c:64:7a:31:43:
                    69:df:c9:de:0f:b9:d3:8a:d7:cf:c8:03:89:01:39:
                    dd:5b:ee:0d:e2:ec:a4:0d:d3:d6:6d:f2:bd:26:cb:
                    74:35:88:ef:e4:3c:5a:31:32:2e:e6:b6:b5:b4:4f:
                    70:2d:82:a3:bc:69:98:a5:ca:6f:84:d8:fa:af:41:
                    33:3f:a9:1a:38:cb:cb:2c:0e:36:e0:24:85:be:49:
                    49:14:41:1f:74:13:f7:6e:5a:d1:22:14:ee:39:30:
                    0e:cd:69:57:30:13:64:fc:db:cb:fd:d8:fe:22:57:
                    52:ae:33:e4:7c:bd:b4:26:21:5b:f2:5d:71:a6:1c:
                    9b:72:d4:40:76:ef:24:14:28:ec:74:21:7d:9d:9d:
                    bf:0d:7a:68:58:62:9d:dc:86:64:20:3b:91:8c:d0:
                    57:4c:b2:ec:a1:13:89:7c:47:8d:d2:23:55:fb:64:
                    9e:7d:85:db:41:59:b1:12:09:1e:3b:a7:79:dd:ad:
                    1a:54:15:62:d9:96:f0:3a:f1:98:ab:f5:80:a7:2e:
                    5e:e3:2c:3d:fb:5c:a7:f1:8b:2f:44:56:26:7b:fe:
                    70:53:c0:b4:8c:72:e7:82:bf:00:3d:6d:f1:0f:c2:
                    99:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DB:F9:42:11:0C:1B:E2:37:B5:38:2F:66:B5:E8:9B:4D:CF:B1:58
            X509v3 Authority Key Identifier:
                keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/E9v5QhEMG-I3tTgvZrXom03PsVg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.239.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:76:78:54:e6:ba:8b:97:0f:9c:55:af:55:f8:ae:00:58:ef:
         75:ed:96:d2:cc:8c:c1:6c:86:72:17:00:32:97:82:27:25:50:
         42:47:94:b1:1b:a9:fc:8d:51:df:0b:66:53:2c:db:5d:4f:16:
         92:8d:24:65:42:22:5b:9c:ce:04:6c:2d:3e:10:1b:90:d7:68:
         8a:45:ed:f5:27:c3:a2:08:10:67:c8:7a:86:bb:46:44:4e:8a:
         1e:05:57:49:10:75:97:0a:d4:58:e1:5a:1b:e5:65:c0:b9:56:
         9a:d1:60:f5:4b:91:f9:c6:68:31:ef:23:f0:bf:a9:dc:73:1f:
         59:c9:6a:67:5c:e0:f8:1d:04:fc:23:75:d0:96:e7:3d:f9:82:
         54:3b:de:ca:fb:dc:39:6f:da:0a:f9:15:fb:5a:df:1d:b0:26:
         e1:e9:7d:5b:6c:07:8c:ba:34:45:d8:67:ed:ba:73:68:57:2d:
         45:6f:de:93:99:ee:15:15:79:65:64:2c:c5:ba:f2:b5:4e:1b:
         0c:73:cc:0d:2d:dc:94:dc:27:f5:38:66:66:0f:d8:48:1f:25:
         43:1d:4f:46:72:48:78:4b:3b:b4:06:63:b3:6f:dd:9a:47:bc:
         f7:2b:1b:50:d1:b4:a2:52:e1:3a:f8:8f:a9:14:71:dc:75:03:
         c9:c6:21:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVTGFZF16wzfEbtinm0Sgq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmVkYTY5NTJiMDNlOGJhNDU5OTdiZTYxNWQ3YWJlZTE3
ODRmODMwHhcNMjIxMjI3MTAxOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2RiZjk0MjExMGMxYmUyMzdiNTM4MmY2NmI1ZTg5YjRkY2ZiMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPHtzLAsa7nQHZPtoDf881HdZT7g
LugZjGR6MUNp38neD7nTitfPyAOJATndW+4N4uykDdPWbfK9Jst0NYjv5DxaMTIu
5ra1tE9wLYKjvGmYpcpvhNj6r0EzP6kaOMvLLA424CSFvklJFEEfdBP3blrRIhTu
OTAOzWlXMBNk/NvL/dj+IldSrjPkfL20JiFb8l1xphybctRAdu8kFCjsdCF9nZ2/
DXpoWGKd3IZkIDuRjNBXTLLsoROJfEeN0iNV+2SefYXbQVmxEgkeO6d53a0aVBVi
2ZbwOvGYq/WApy5e4yw9+1yn8YsvRFYme/5wU8C0jHLngr8APW3xD8KZ+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBPb+UIRDBviN7U4L2a16JtNz7FYMB8GA1UdIwQY
MBaAFH4u2mlSsD6LpFmXvmFder7heE+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEt
MmYyMzAwYjZlM2Q5LzEvRTl2NVFoRU1HLUkzdFRndlpyWG9tMDNQc1ZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEtMmYyMzAwYjZlM2Q5
LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCV+9kMA0G
CSqGSIb3DQEBCwUAA4IBAQCOdnhU5rqLlw+cVa9V+K4AWO917ZbSzIzBbIZyFwAy
l4InJVBCR5SxG6n8jVHfC2ZTLNtdTxaSjSRlQiJbnM4EbC0+EBuQ12iKRe31J8Oi
CBBnyHqGu0ZETooeBVdJEHWXCtRY4Vob5WXAuVaa0WD1S5H5xmgx7yPwv6nccx9Z
yWpnXOD4HQT8I3XQluc9+YJUO97K+9w5b9oK+RX7Wt8dsCbh6X1bbAeMujRF2Gft
unNoVy1Fb96Tme4VFXllZCzFuvK1ThsMc8wNLdyU3Cf1OGZmD9hIHyVDHU9Gckh4
Szu0BmOzb92aR7z3KxtQ0bSiUuE6+I+pFHHcdQPJxiEb
-----END CERTIFICATE-----