Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M32I4Ra7wA6bPnsOqZOXASou-7g.roa
File:                     M32I4Ra7wA6bPnsOqZOXASou-7g.roa (raw, json)
Hash identifier:          oIPSQJY0AG3RmT72MqB7EipuDCukF2QH8RhtIVdvQN4=
Subject key identifier:   33:7D:88:E1:16:BB:C0:0E:9B:3E:7B:0E:A9:93:97:01:2A:2E:FB:B8
Certificate issuer:       /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial:       0AADD803
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M32I4Ra7wA6bPnsOqZOXASou-7g.roa
Signing time:             Thu 16 Jun 2022 14:02:44 +0000
ROA not before:           Thu 16 Jun 2022 14:02:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     196609
IP address blocks:        195.110.14.0/23 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179165187 (0xaadd803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
        Validity
            Not Before: Jun 16 14:02:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=337d88e116bbc00e9b3e7b0ea99397012a2efbb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:4d:7f:35:65:b0:40:65:4a:a3:20:97:cb:
                    92:aa:88:44:a4:49:61:9d:d4:e7:74:8b:38:c4:17:
                    24:24:b2:0b:ce:fd:dd:6a:44:31:99:aa:41:2b:0f:
                    85:fa:b1:66:15:33:82:ab:80:34:83:20:3a:af:dc:
                    75:6e:f2:ec:1b:a1:51:73:4c:f4:c6:a2:d6:7c:88:
                    be:95:90:0e:0b:7f:67:06:bc:a8:2d:54:fc:d2:ce:
                    1e:ff:b8:bf:63:20:d4:c2:96:d0:36:62:e8:47:b5:
                    e6:51:07:76:e5:50:01:07:32:35:d5:17:71:15:82:
                    6f:2f:1f:3d:66:6a:06:aa:4c:09:e4:2e:ca:9f:1d:
                    62:d6:18:b6:cf:0e:41:81:7a:ec:e5:f3:9f:a9:5b:
                    7d:27:6a:d9:d5:b4:d4:a0:cf:ec:e3:55:b5:16:97:
                    13:a5:64:47:86:82:75:a4:cd:8d:ef:21:e4:e5:3a:
                    d8:37:50:7d:7e:7d:ef:1c:ee:d1:f0:e4:27:b5:7a:
                    eb:98:9f:e3:27:ff:32:9d:59:4b:fc:f3:ca:a9:7a:
                    ca:15:eb:75:47:fe:8f:26:d3:bc:55:42:2b:04:48:
                    c5:73:8e:ff:af:7b:1e:ce:00:dc:a1:b0:1b:2d:52:
                    58:b4:c4:87:ca:a8:ae:da:ce:39:bc:87:d3:d4:79:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7D:88:E1:16:BB:C0:0E:9B:3E:7B:0E:A9:93:97:01:2A:2E:FB:B8
            X509v3 Authority Key Identifier:
                keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/M32I4Ra7wA6bPnsOqZOXASou-7g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.110.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:47:c8:a9:2d:94:f6:18:2f:20:c0:ce:00:12:21:b1:40:
         c3:0c:cd:28:f9:55:c3:7b:73:07:01:35:34:9c:66:0c:96:67:
         25:d9:14:9b:54:fa:89:61:46:76:c9:4a:0b:d2:6f:7b:04:6a:
         90:2f:53:a7:cc:cd:54:1b:d8:6e:a6:b1:9b:97:a1:3d:2c:f7:
         9b:5d:89:47:18:31:2b:99:ee:6b:be:73:13:85:99:51:fd:29:
         b2:36:01:bc:23:10:07:65:32:28:82:69:3e:d5:86:bc:78:f5:
         f2:3e:58:b0:9a:00:13:20:c8:9d:77:75:03:e9:2e:5e:9b:c0:
         61:d2:fe:6f:12:5d:e6:11:cb:a0:96:8c:d2:c7:7f:47:54:34:
         27:25:45:59:0d:3c:cd:d8:58:87:a1:01:90:26:fc:5c:bf:9f:
         14:05:aa:dd:89:e0:44:2a:52:7a:b2:fa:1b:50:6c:aa:7d:08:
         5b:5c:a5:13:89:30:bc:e6:bf:61:a8:35:99:07:13:46:cf:c5:
         bf:98:48:29:6b:79:c0:f2:90:97:14:03:18:42:3e:51:01:ca:
         59:ad:44:d9:c0:ad:4f:28:1e:5c:63:ec:c0:da:70:93:7e:05:
         88:88:3a:33:59:9b:01:26:4d:e0:93:4a:3f:c1:75:8a:69:42:
         b4:c3:7c:3f
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECq3YAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
ZTYwOTc2OTg2ODZlMTU1NWY1MWY2Yzg4M2JjNWE1ODU0OWIyMzYyMB4XDTIyMDYx
NjE0MDI0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzM3ZDg4ZTExNmJi
YzAwZTliM2U3YjBlYTk5Mzk3MDEyYTJlZmJiODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALfxTX81ZbBAZUqjIJfLkqqIRKRJYZ3U53SLOMQXJCSyC879
3WpEMZmqQSsPhfqxZhUzgquANIMgOq/cdW7y7BuhUXNM9Mai1nyIvpWQDgt/Zwa8
qC1U/NLOHv+4v2Mg1MKW0DZi6Ee15lEHduVQAQcyNdUXcRWCby8fPWZqBqpMCeQu
yp8dYtYYts8OQYF67OXzn6lbfSdq2dW01KDP7ONVtRaXE6VkR4aCdaTNje8h5OU6
2DdQfX597xzu0fDkJ7V665if4yf/Mp1ZS/zzyql6yhXrdUf+jybTvFVCKwRIxXOO
/697Hs4A3KGwGy1SWLTEh8qortrOObyH09R5CtcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQzfYjhFrvADps+ew6pk5cBKi77uDAfBgNVHSMEGDAWgBQ+YJdphobhVV9R
9siDvFpYVJsjYjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1BtQ1hhWWFHNFZWZlVmYklnN3hhV0ZTYkkySS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTAvOTY1ODM3LTUyY2ItNDZiNC1hZWRiLWUxYmQ4OGQzZmQwNy8x
L00zMkk0UmE3d0E2YlBuc09xWk9YQVNvdS03Zy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTAv
OTY1ODM3LTUyY2ItNDZiNC1hZWRiLWUxYmQ4OGQzZmQwNy8xL1BtQ1hhWWFHNFZW
ZlVmYklnN3hhV0ZTYkkySS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcNuDjANBgkqhkiG9w0BAQsFAAOC
AQEADJ1HyKktlPYYLyDAzgASIbFAwwzNKPlVw3tzBwE1NJxmDJZnJdkUm1T6iWFG
dslKC9JvewRqkC9Tp8zNVBvYbqaxm5ehPSz3m12JRxgxK5nua75zE4WZUf0psjYB
vCMQB2UyKIJpPtWGvHj18j5YsJoAEyDInXd1A+kuXpvAYdL+bxJd5hHLoJaM0sd/
R1Q0JyVFWQ08zdhYh6EBkCb8XL+fFAWq3YngRCpSerL6G1Bsqn0IW1ylE4kwvOa/
Yag1mQcTRs/Fv5hIKWt5wPKQlxQDGEI+UQHKWa1E2cCtTygeXGPswNpwk34FiIg6
M1mbASZN4JNKP8F1imlCtMN8Pw==
-----END CERTIFICATE-----