Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/UciSkma_CUeZekDNa37lWDBX12o.roa
File:                     UciSkma_CUeZekDNa37lWDBX12o.roa (raw, json)
Hash identifier:          C9wsDaYpwt1tXba/74Lm6xRR1Y2kRAowkYJMPsVmhqI=
Subject key identifier:   51:C8:92:92:66:BF:09:47:99:7A:40:CD:6B:7E:E5:58:30:57:D7:6A
Certificate issuer:       /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial:       01835A6D3BA1E527D75CA53AE500B87C8FE2
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/UciSkma_CUeZekDNa37lWDBX12o.roa
Signing time:             Tue 20 Sep 2022 10:24:11 +0000
ROA not before:           Tue 20 Sep 2022 10:24:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9199
IP address blocks:        185.57.46.0/23 maxlen: 23
                          2a04:7580::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:5a:6d:3b:a1:e5:27:d7:5c:a5:3a:e5:00:b8:7c:8f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
        Validity
            Not Before: Sep 20 10:24:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=51c8929266bf0947997a40cd6b7ee5583057d76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:90:53:77:00:ef:d0:31:70:6a:8d:f8:8f:
                    b3:33:2f:d8:ff:4d:d9:63:5a:38:7e:e1:b9:15:8d:
                    02:69:f6:b4:63:54:f0:b6:7f:da:b8:ce:87:94:e6:
                    b5:f4:8f:52:02:f9:f0:2f:00:7d:6d:c8:78:82:e5:
                    94:25:0d:4a:20:1e:0f:ca:87:7f:43:e4:14:7a:93:
                    58:78:ec:4b:11:b9:21:24:21:27:8e:b7:8a:33:39:
                    89:6c:1e:2c:5b:15:f6:a0:f3:23:76:7a:f4:d0:26:
                    f7:70:1b:0d:76:5c:1d:c7:6a:9a:e7:e5:c6:69:f5:
                    63:11:2e:e7:22:ae:d8:f2:9c:35:e6:92:94:47:d3:
                    77:2c:ac:c6:6b:f5:83:c8:31:e8:7d:64:7f:3d:cd:
                    25:3c:48:ad:fc:8c:e4:4b:16:40:18:48:25:6f:7c:
                    74:6a:c0:40:d7:a3:61:00:d2:4d:c5:f9:35:90:9d:
                    6b:57:37:97:3a:78:56:db:2d:bd:b6:97:fa:f9:7f:
                    73:76:88:fa:c7:1d:d8:75:5b:59:58:ca:4c:28:4d:
                    8a:43:25:a8:51:89:a6:53:0a:2a:43:ad:d4:b8:c8:
                    0e:ab:c5:f6:fb:62:aa:19:91:db:89:92:ab:60:97:
                    55:35:70:f0:1f:25:4a:93:a1:43:e4:3e:12:85:da:
                    9d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C8:92:92:66:BF:09:47:99:7A:40:CD:6B:7E:E5:58:30:57:D7:6A
            X509v3 Authority Key Identifier:
                keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/UciSkma_CUeZekDNa37lWDBX12o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.57.46.0/23
                IPv6:
                  2a04:7580::/29

    Signature Algorithm: sha256WithRSAEncryption
         ab:58:3d:3c:01:9d:bf:e3:5e:4a:2e:4f:e1:52:27:7e:80:f6:
         ee:b4:c7:fd:68:a2:c4:d8:ad:aa:b0:ec:5c:0d:7f:ba:3d:15:
         9c:52:aa:55:8d:d1:27:51:df:58:2d:5e:db:13:f6:47:c4:66:
         94:c2:8a:a2:03:53:73:64:c0:a2:e1:4d:e2:37:d5:ad:3b:a7:
         07:c3:ec:48:25:33:31:a0:c9:56:bb:69:e4:86:36:06:8b:8c:
         fb:ec:d5:aa:03:91:26:26:bf:b3:f7:4c:e1:50:72:c9:c4:82:
         85:2b:3d:bc:65:59:d9:5a:d8:dd:7d:d5:b9:12:ea:56:75:dc:
         00:47:f4:3a:39:32:95:9a:66:13:0f:7f:91:60:38:72:77:9f:
         2c:dc:59:39:7d:ef:71:fd:82:3a:aa:87:ab:18:f6:28:e9:3a:
         df:11:92:59:1d:6a:42:61:4c:0d:3f:fe:65:c0:fd:09:ca:9a:
         82:6d:14:59:24:35:09:95:9c:b8:20:9e:d3:38:11:bb:7e:0d:
         77:4c:c7:a3:82:d3:5d:b3:65:c0:69:de:8e:b3:95:9f:ce:16:
         11:94:d5:c1:15:fa:bc:7e:00:a0:82:51:c3:d6:26:e9:e2:74:
         1c:0c:2f:1b:de:bb:90:49:14:2c:87:48:96:82:5b:7a:7d:10:
         0b:a7:b8:c2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYNabTuh5SfXXKU65QC4fI/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNGIwZWVkMmM1YTc4N2FkODdmYjQ5ZjA0ZDNmZGYzZDBm
NDlkNGMwHhcNMjIwOTIwMTAyNDExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWM4OTI5MjY2YmYwOTQ3OTk3YTQwY2Q2YjdlZTU1ODMwNTdkNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSSQU3cA79AxcGqN+I+zMy/Y/03Z
Y1o4fuG5FY0Cafa0Y1Twtn/auM6HlOa19I9SAvnwLwB9bch4guWUJQ1KIB4Pyod/
Q+QUepNYeOxLEbkhJCEnjreKMzmJbB4sWxX2oPMjdnr00Cb3cBsNdlwdx2qa5+XG
afVjES7nIq7Y8pw15pKUR9N3LKzGa/WDyDHofWR/Pc0lPEit/IzkSxZAGEglb3x0
asBA16NhANJNxfk1kJ1rVzeXOnhW2y29tpf6+X9zdoj6xx3YdVtZWMpMKE2KQyWo
UYmmUwoqQ63UuMgOq8X2+2KqGZHbiZKrYJdVNXDwHyVKk6FD5D4ShdqdtwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFHIkpJmvwlHmXpAzWt+5VgwV9dqMB8GA1UdIwQY
MBaAFANLDu0sWnh62H+0nwTT/fPQ9J1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEt
ZTA4NTI3NWFhMzY0LzEvVWNpU2ttYV9DVWVaZWtETmEzN2xXREJYMTJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEtZTA4NTI3NWFhMzY0
LzEvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuTkuMA0E
AgACMAcDBQMqBHWAMA0GCSqGSIb3DQEBCwUAA4IBAQCrWD08AZ2/415KLk/hUid+
gPbutMf9aKLE2K2qsOxcDX+6PRWcUqpVjdEnUd9YLV7bE/ZHxGaUwoqiA1NzZMCi
4U3iN9WtO6cHw+xIJTMxoMlWu2nkhjYGi4z77NWqA5EmJr+z90zhUHLJxIKFKz28
ZVnZWtjdfdW5EupWddwAR/Q6OTKVmmYTD3+RYDhyd58s3Fk5fe9x/YI6qoerGPYo
6TrfEZJZHWpCYUwNP/5lwP0JypqCbRRZJDUJlZy4IJ7TOBG7fg13TMejgtNds2XA
ad6Os5WfzhYRlNXBFfq8fgCgglHD1ibp4nQcDC8b3ruQSRQsh0iWglt6fRALp7jC
-----END CERTIFICATE-----