Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/W4x1fDNCFJCLmTr2ojmjn_7qxMc.roa
File:                     W4x1fDNCFJCLmTr2ojmjn_7qxMc.roa (raw, json)
Hash identifier:          o+bwI0qGVAVo9LaKzPZi123w2+p+IOMPyZNPb3j8770=
Subject key identifier:   5B:8C:75:7C:33:42:14:90:8B:99:3A:F6:A2:39:A3:9F:FE:EA:C4:C7
Certificate issuer:       /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial:       0687CA
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/W4x1fDNCFJCLmTr2ojmjn_7qxMc.roa
Signing time:             Thu 09 Jun 2022 17:16:03 +0000
ROA not before:           Thu 09 Jun 2022 17:16:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     56802
IP address blocks:        31.134.192.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427978 (0x687ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
        Validity
            Not Before: Jun  9 17:16:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5b8c757c334214908b993af6a239a39ffeeac4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:2e:53:ea:1b:ba:49:ef:1f:20:f4:74:e6:
                    bf:04:b4:90:23:5e:52:d3:a1:b3:75:58:a9:33:77:
                    a1:f2:58:da:fd:b5:99:f9:1a:4f:ae:7a:6e:8d:b4:
                    74:47:a6:e8:91:46:76:17:a8:98:a3:04:68:06:64:
                    ff:e2:73:de:b0:fc:62:85:84:85:99:a7:d2:f3:ad:
                    7a:e2:72:c1:1e:15:94:2b:a5:f3:81:db:79:10:ec:
                    57:49:a9:cd:f5:e7:da:64:7e:e5:ae:e4:ea:28:62:
                    db:58:5a:72:7d:77:cb:67:62:7d:1b:0a:04:64:59:
                    2b:cf:29:e5:a8:de:35:4e:26:50:3a:00:c4:ff:c1:
                    f3:76:9f:e4:38:f7:f7:b8:cc:b6:c4:1a:50:d1:13:
                    14:46:1f:52:0e:d1:6a:9f:80:5f:e8:55:ea:67:68:
                    30:75:ef:cc:45:25:a7:7b:28:ad:80:ec:4e:88:03:
                    18:30:2b:25:aa:db:2d:0c:fd:a5:d1:ff:6d:90:a1:
                    75:e1:7c:a0:be:5e:14:87:aa:1b:11:cb:a5:22:86:
                    c6:1d:23:e9:29:51:df:ef:07:2c:a3:4d:41:2a:23:
                    8b:70:77:ac:13:47:f4:96:09:f3:c3:c5:e4:6f:df:
                    33:b6:62:e6:a8:08:48:dc:d8:b5:e2:e2:58:94:33:
                    61:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8C:75:7C:33:42:14:90:8B:99:3A:F6:A2:39:A3:9F:FE:EA:C4:C7
            X509v3 Authority Key Identifier:
                keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/W4x1fDNCFJCLmTr2ojmjn_7qxMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.134.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:60:8d:41:6c:3b:36:0e:a8:f7:e7:ce:78:b9:90:84:55:d9:
         dd:e4:52:5a:c4:a4:e1:4b:50:b5:b6:62:71:4d:41:99:06:3b:
         ee:f4:17:54:f5:b2:88:5a:f5:7a:0b:68:cf:30:bd:7d:e8:eb:
         8c:f9:d7:68:84:c1:83:9a:20:6f:ae:46:8f:7a:1a:29:6c:ad:
         85:14:6f:1d:f5:81:06:c1:64:bc:99:a2:51:08:55:ba:a7:fb:
         93:56:a8:5d:a6:bf:c4:81:8e:b7:d9:28:4a:23:77:ee:83:e6:
         b3:24:64:37:77:b3:97:c9:fb:1e:0f:d8:8a:78:51:9a:68:7e:
         36:8c:83:19:98:bd:43:d9:f9:c3:29:62:71:18:01:9d:25:f7:
         e1:94:33:c1:84:5f:9a:ce:59:49:01:51:88:91:2f:3a:37:51:
         3d:0b:cb:b9:9d:2c:3a:1c:72:42:05:3a:5e:d1:af:13:e1:f1:
         64:a5:6a:6d:a0:a9:c6:13:f9:e9:f4:ba:7f:45:a6:2a:30:2c:
         09:01:ed:9c:3a:bc:1d:de:0c:58:d1:43:1f:00:f8:44:65:c6:
         ed:c7:3b:fb:7e:3d:73:39:93:9b:20:26:e8:b6:6c:58:53:54:
         4c:92:df:8f:cd:25:a8:bb:3b:bd:d1:5b:ab:b1:fe:83:96:e3:
         3f:d2:08:e3
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDBofKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU1
MjA0NDZmNzlmZmMyZDdjM2E5ZWYzNDBjZTlkZTI1NzIzYTcxOWEwHhcNMjIwNjA5
MTcxNjAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg1YjhjNzU3YzMzNDIx
NDkwOGI5OTNhZjZhMjM5YTM5ZmZlZWFjNGM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnCsuU+obuknvHyD0dOa/BLSQI15S06GzdVipM3eh8lja/bWZ
+RpPrnpujbR0R6bokUZ2F6iYowRoBmT/4nPesPxihYSFmafS86164nLBHhWUK6Xz
gdt5EOxXSanN9efaZH7lruTqKGLbWFpyfXfLZ2J9GwoEZFkrzynlqN41TiZQOgDE
/8Hzdp/kOPf3uMy2xBpQ0RMURh9SDtFqn4Bf6FXqZ2gwde/MRSWneyitgOxOiAMY
MCslqtstDP2l0f9tkKF14Xygvl4Uh6obEculIobGHSPpKVHf7wcso01BKiOLcHes
E0f0lgnzw8Xkb98ztmLmqAhI3Ni14uJYlDNhQwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFFuMdXwzQhSQi5k69qI5o5/+6sTHMB8GA1UdIwQYMBaAFOUgRG95/8LXw6nv
NAzp3iVyOnGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
NVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMtMGUwZTEzN2U1NTkxLzEv
VzR4MWZETkNGSkNMbVRyMm9qbWpuXzdxeE1jLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8w
MTFlZjItNzAxMi00YTZlLThhMWMtMGUwZTEzN2U1NTkxLzEvNVNCRWIzbl93dGZE
cWU4MERPbmVKWEk2Y1pvLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH4bAMA0GCSqGSIb3DQEBCwUAA4IB
AQBwYI1BbDs2Dqj35854uZCEVdnd5FJaxKThS1C1tmJxTUGZBjvu9BdU9bKIWvV6
C2jPML196OuM+ddohMGDmiBvrkaPehopbK2FFG8d9YEGwWS8maJRCFW6p/uTVqhd
pr/EgY632ShKI3fug+azJGQ3d7OXyfseD9iKeFGaaH42jIMZmL1D2fnDKWJxGAGd
JffhlDPBhF+azllJAVGIkS86N1E9C8u5nSw6HHJCBTpe0a8T4fFkpWptoKnGE/np
9Lp/RaYqMCwJAe2cOrwd3gxY0UMfAPhEZcbtxzv7fj1zOZObICbotmxYU1RMkt+P
zSWouzu90Vursf6DluM/0gjj
-----END CERTIFICATE-----