Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/bulBebSqHG1uyzv-Yeab1TaGhkU.roa
File:                     bulBebSqHG1uyzv-Yeab1TaGhkU.roa (raw, json)
Hash identifier:          yG0rfrgXM7J/xyPCDlRL+PE82dsXX4tENcUW+sHLX7Y=
Subject key identifier:   6E:E9:41:79:B4:AA:1C:6D:6E:CB:3B:FE:61:E6:9B:D5:36:86:86:45
Certificate issuer:       /CN=3238786e9f70e6db74230d72675a483bd24ef256
Certificate serial:       04DD753E
Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/bulBebSqHG1uyzv-Yeab1TaGhkU.roa
Signing time:             Mon 03 Jan 2022 03:35:47 +0000
ROA not before:           Mon 03 Jan 2022 03:35:47 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204562
IP address blocks:        185.245.240.0/22 maxlen: 24
                          2a0d:6e80::/29 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81622334 (0x4dd753e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256
        Validity
            Not Before: Jan  3 03:35:47 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6ee94179b4aa1c6d6ecb3bfe61e69bd536868645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:c6:bb:a2:14:7f:e6:bc:b5:30:ba:a7:b2:
                    4c:0d:ba:a7:19:07:f5:39:a8:be:55:f9:fe:b7:3d:
                    d1:7a:48:a3:48:17:37:e4:26:47:0f:bc:13:9e:1c:
                    9d:43:45:01:0c:51:2c:23:2d:eb:ed:00:7d:e0:29:
                    d2:fb:f7:d5:0f:9a:87:cc:74:5e:9f:5f:de:ff:7b:
                    0a:90:f6:67:e0:76:01:60:e5:5a:fc:6a:96:f2:a7:
                    70:d5:07:c4:8a:52:ca:42:2f:1f:dd:c5:b4:67:ea:
                    bb:29:f2:32:c9:39:19:da:c2:ba:dd:ad:02:55:d0:
                    93:cf:ae:95:88:73:96:91:5c:23:ef:b8:90:21:9c:
                    1e:b8:82:77:59:95:29:b2:96:7c:1a:d5:fc:13:99:
                    92:f1:29:27:39:b2:f6:19:86:1a:cb:b8:0a:6f:6d:
                    42:92:13:39:21:05:56:d8:43:74:2e:2b:bc:7d:f8:
                    07:38:fd:35:79:77:fa:69:47:47:2d:c9:1b:34:7f:
                    a5:fd:52:37:c6:44:ff:14:4d:c7:92:a3:9e:83:89:
                    3d:32:fc:34:62:f0:99:68:dc:7e:43:54:a4:e4:3a:
                    66:1a:65:56:de:8b:21:0f:59:05:d9:5e:ee:8c:ca:
                    e1:75:c3:d0:4b:7e:37:5a:24:db:e2:41:8c:ed:bc:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E9:41:79:B4:AA:1C:6D:6E:CB:3B:FE:61:E6:9B:D5:36:86:86:45
            X509v3 Authority Key Identifier:
                keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/bulBebSqHG1uyzv-Yeab1TaGhkU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.240.0/22
                IPv6:
                  2a0d:6e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         53:84:24:09:c8:1b:26:f3:1e:01:57:86:fa:1e:ef:13:c1:8a:
         9e:ce:4e:be:d8:01:9f:c5:6b:0f:1d:8d:42:07:61:bd:06:ff:
         3e:89:a6:af:5b:66:c0:ac:89:52:4d:f7:d2:7c:75:22:d3:9b:
         f4:b5:d3:e6:18:b6:e0:32:d3:b5:4d:73:24:c6:7b:cc:f1:f9:
         93:e4:74:df:fc:ba:e2:e2:fd:12:92:f8:14:a4:f6:d1:4b:f8:
         20:8c:25:2d:0e:1f:f0:aa:71:d3:19:eb:9e:13:fb:26:5c:7b:
         2c:fd:c7:59:2e:de:1e:e3:e4:44:80:84:10:36:36:e4:af:a9:
         ef:4a:d6:47:4d:cb:c0:7b:fa:95:74:e0:4c:be:d9:2d:45:68:
         2b:1f:55:6f:ef:96:ef:98:03:a1:bc:63:c2:ec:f8:43:19:96:
         12:30:98:0c:dc:4d:80:7b:4d:84:d3:c7:22:d5:09:62:aa:1e:
         71:65:ca:bb:ae:72:a9:c9:8f:e1:ba:74:11:17:11:67:ab:e7:
         39:dc:66:a8:ea:da:55:75:04:4d:f8:1c:33:42:fe:5a:13:7a:
         c6:48:d8:96:3c:9b:40:9b:84:12:5b:06:f3:26:7c:3c:1e:b8:
         41:7a:d9:71:17:16:35:51:48:bb:c5:76:27:ba:65:1c:23:0a:
         f3:b4:1d:e4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBN11PjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MjM4Nzg2ZTlmNzBlNmRiNzQyMzBkNzI2NzVhNDgzYmQyNGVmMjU2MB4XDTIyMDEw
MzAzMzU0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmVlOTQxNzliNGFh
MWM2ZDZlY2IzYmZlNjFlNjliZDUzNjg2ODY0NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQjxruiFH/mvLUwuqeyTA26pxkH9TmovlX5/rc90XpIo0gX
N+QmRw+8E54cnUNFAQxRLCMt6+0AfeAp0vv31Q+ah8x0Xp9f3v97CpD2Z+B2AWDl
WvxqlvKncNUHxIpSykIvH93FtGfquynyMsk5GdrCut2tAlXQk8+ulYhzlpFcI++4
kCGcHriCd1mVKbKWfBrV/BOZkvEpJzmy9hmGGsu4Cm9tQpITOSEFVthDdC4rvH34
Bzj9NXl3+mlHRy3JGzR/pf1SN8ZE/xRNx5KjnoOJPTL8NGLwmWjcfkNUpOQ6Zhpl
Vt6LIQ9ZBdle7ozK4XXD0Et+N1ok2+JBjO28vYMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRu6UF5tKocbW7LO/5h5pvVNoaGRTAfBgNVHSMEGDAWgBQyOHhun3Dm23Qj
DXJnWkg70k7yVjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01qaDRicDl3NXR0MEl3MXlaMXBJTzlKTzhsWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDUvOWE5NTA2LTIwZDQtNGFiNy1iNTYzLWUyZDNkOTRjYzIzOC8x
L2J1bEJlYlNxSEcxdXl6di1ZZWFiMVRhR2hrVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUv
OWE5NTA2LTIwZDQtNGFiNy1iNTYzLWUyZDNkOTRjYzIzOC8xL01qaDRicDl3NXR0
MEl3MXlaMXBJTzlKTzhsWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArn18DANBAIAAjAHAwUDKg1ugDAN
BgkqhkiG9w0BAQsFAAOCAQEAU4QkCcgbJvMeAVeG+h7vE8GKns5OvtgBn8VrDx2N
QgdhvQb/Pommr1tmwKyJUk330nx1ItOb9LXT5hi24DLTtU1zJMZ7zPH5k+R03/y6
4uL9EpL4FKT20Uv4IIwlLQ4f8Kpx0xnrnhP7Jlx7LP3HWS7eHuPkRICEEDY25K+p
70rWR03LwHv6lXTgTL7ZLUVoKx9Vb++W75gDobxjwuz4QxmWEjCYDNxNgHtNhNPH
ItUJYqoecWXKu65yqcmP4bp0ERcRZ6vnOdxmqOraVXUETfgcM0L+WhN6xkjYljyb
QJuEElsG8yZ8PB64QXrZcRcWNVFIu8V2J7plHCMK87Qd5A==
-----END CERTIFICATE-----