Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/bJJ-7veXxrVP04HWzq4xOJEGmWs.roa
File:                     bJJ-7veXxrVP04HWzq4xOJEGmWs.roa (raw, json)
Hash identifier:          sIYoLloQMR0jPHD7fZopqIMqKQBrapMN5SQQF3rfb2c=
Subject key identifier:   6C:92:7E:EE:F7:97:C6:B5:4F:D3:81:D6:CE:AE:31:38:91:06:99:6B
Certificate issuer:       /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial:       387DC563
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/bJJ-7veXxrVP04HWzq4xOJEGmWs.roa
Signing time:             Sat 01 Jan 2022 05:54:17 +0000
ROA not before:           Sat 01 Jan 2022 05:54:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34073
IP address blocks:        85.254.88.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947766627 (0x387dc563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
        Validity
            Not Before: Jan  1 05:54:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=6c927eeef797c6b54fd381d6ceae31389106996b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:48:c0:7b:d6:c5:d9:43:53:48:da:54:03:
                    fd:26:5d:29:b4:35:78:70:c3:18:73:7f:10:33:02:
                    fd:e3:c9:4a:c6:3e:4d:74:d4:71:53:92:48:7f:b8:
                    56:40:60:27:91:55:cc:b8:2b:9e:95:08:b3:19:1b:
                    ea:ea:e5:2b:95:87:28:37:a2:0b:11:39:89:e4:7c:
                    a7:fc:e7:1b:a0:f7:92:9d:9c:9a:37:e0:6d:8a:e2:
                    c2:6c:94:55:02:88:ac:05:10:56:9d:b9:19:9f:a0:
                    6b:de:9f:2a:a9:72:9a:d9:5c:bd:06:6d:19:f1:0f:
                    4c:ef:c7:1c:ec:0c:fa:10:e8:51:34:fc:7e:6e:62:
                    0d:82:7a:44:18:cc:6a:f3:3e:3d:b2:20:f1:7e:5f:
                    60:4b:55:e9:98:35:ac:bf:4c:91:3f:68:dc:14:85:
                    78:92:11:27:c0:3e:d9:3f:5a:f1:03:39:75:3e:23:
                    50:80:b5:c8:0d:8b:93:f4:83:d4:dd:cb:2b:06:47:
                    f2:b7:76:b7:79:9a:58:84:4a:fe:4e:c9:05:d9:09:
                    c4:3c:8d:8c:7e:55:4d:d3:f6:da:17:e3:c2:b4:a1:
                    16:8a:dd:e5:bb:f8:29:5e:87:53:33:9a:b3:59:40:
                    1e:44:1e:58:11:9c:cc:96:78:67:19:fc:c5:cc:68:
                    54:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:92:7E:EE:F7:97:C6:B5:4F:D3:81:D6:CE:AE:31:38:91:06:99:6B
            X509v3 Authority Key Identifier:
                keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/bJJ-7veXxrVP04HWzq4xOJEGmWs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.254.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:4a:99:f6:f9:a3:73:29:ef:71:b1:a6:2c:06:d1:51:5f:72:
         2f:1e:70:62:7a:8b:84:f5:93:9f:d2:c4:96:46:c4:d3:71:06:
         8b:44:de:21:fe:1e:7e:94:8e:08:d8:df:85:76:0c:0d:8d:96:
         cb:9f:b6:ff:30:fa:36:68:ba:f4:e6:fc:45:b4:20:78:17:79:
         aa:fd:87:2c:72:74:14:a6:bd:5e:c6:d8:57:70:ed:62:9f:59:
         a1:34:90:1d:4f:3b:25:4f:c5:e7:95:a9:8b:05:08:46:36:1c:
         16:74:6f:6f:07:77:ba:1f:bb:33:a7:bb:e5:e7:46:73:d9:29:
         2a:dc:26:17:4c:54:a5:07:9a:c1:1d:e6:db:53:fd:90:ed:41:
         73:e6:24:eb:54:4e:e4:e1:54:ab:9b:52:66:0f:e7:1d:b7:6d:
         43:e4:3d:3b:44:c9:c9:85:1f:e9:e9:9c:db:71:e0:5b:73:11:
         c4:fb:f9:e6:fb:81:99:0b:51:b9:17:93:a9:43:5b:67:10:bb:
         24:e1:0e:0a:62:4c:e6:23:c6:fd:76:89:f5:b8:9b:f4:68:74:
         0c:c1:11:8e:02:63:6d:85:c8:19:dc:90:9d:2a:c5:c2:0e:3c:
         b3:3e:01:fc:77:f7:7a:ab:b8:8e:de:65:1b:52:65:da:95:2d:
         fb:35:26:8f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEOH3FYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjA5NTJjOGJhOGRhZGIxZDM0ZGU2YzZhOTM4NjRhNjA5ZmM0MWVjMB4XDTIyMDEw
MTA1NTQxN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmM5MjdlZWVmNzk3
YzZiNTRmZDM4MWQ2Y2VhZTMxMzg5MTA2OTk2YjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJgMSMB71sXZQ1NI2lQD/SZdKbQ1eHDDGHN/EDMC/ePJSsY+
TXTUcVOSSH+4VkBgJ5FVzLgrnpUIsxkb6urlK5WHKDeiCxE5ieR8p/znG6D3kp2c
mjfgbYriwmyUVQKIrAUQVp25GZ+ga96fKqlymtlcvQZtGfEPTO/HHOwM+hDoUTT8
fm5iDYJ6RBjMavM+PbIg8X5fYEtV6Zg1rL9MkT9o3BSFeJIRJ8A+2T9a8QM5dT4j
UIC1yA2Lk/SD1N3LKwZH8rd2t3maWIRK/k7JBdkJxDyNjH5VTdP22hfjwrShFord
5bv4KV6HUzOas1lAHkQeWBGczJZ4Zxn8xcxoVNsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRskn7u95fGtU/TgdbOrjE4kQaZazAfBgNVHSMEGDAWgBSrCVLIuo2tsdNN
5sapOGSmCfxB7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3F3bFN5THFOcmJIVFRlYkdxVGhrcGduOFFldy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvMzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2Zi8x
L2JKSi03dmVYeHJWUDA0SFd6cTR4T0pFR21Xcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
MzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2Zi8xL3F3bFN5THFOcmJI
VFRlYkdxVGhrcGduOFFldy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlX+WDANBgkqhkiG9w0BAQsFAAOC
AQEAOkqZ9vmjcynvcbGmLAbRUV9yLx5wYnqLhPWTn9LElkbE03EGi0TeIf4efpSO
CNjfhXYMDY2Wy5+2/zD6Nmi69Ob8RbQgeBd5qv2HLHJ0FKa9XsbYV3DtYp9ZoTSQ
HU87JU/F55WpiwUIRjYcFnRvbwd3uh+7M6e75edGc9kpKtwmF0xUpQeawR3m21P9
kO1Bc+Yk61RO5OFUq5tSZg/nHbdtQ+Q9O0TJyYUf6emc23HgW3MRxPv55vuBmQtR
uReTqUNbZxC7JOEOCmJM5iPG/XaJ9bib9Gh0DMERjgJjbYXIGdyQnSrFwg48sz4B
/Hf3equ4jt5lG1Jl2pUt+zUmjw==
-----END CERTIFICATE-----