Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/9FDqlN66wmFsyKSeNXK12cs6Dno.roa
File:                     9FDqlN66wmFsyKSeNXK12cs6Dno.roa (raw, json)
Hash identifier:          gDiAC3iWKkeE9ol2W6vGoRGwlGtDEwJIlz08irFQI9A=
Subject key identifier:   F4:50:EA:94:DE:BA:C2:61:6C:C8:A4:9E:35:72:B5:D9:CB:3A:0E:7A
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       048E23CF
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/9FDqlN66wmFsyKSeNXK12cs6Dno.roa
Signing time:             Wed 02 Mar 2022 10:58:12 +0000
ROA not before:           Wed 02 Mar 2022 10:58:12 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207105
IP address blocks:        194.181.47.0/24 maxlen: 24
                          2001:a10:185::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76424143 (0x48e23cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Mar  2 10:58:12 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f450ea94debac2616cc8a49e3572b5d9cb3a0e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:2d:6e:39:e1:65:03:2a:99:64:f2:36:c8:
                    f1:f3:4a:63:25:42:6b:30:08:9c:28:e9:28:72:8a:
                    d4:9e:4c:e1:85:14:27:7c:b5:c3:09:08:11:e7:58:
                    3c:e6:f2:e9:79:1a:fd:4a:ad:48:f3:1c:60:51:17:
                    51:b3:f5:df:5d:51:b7:d3:bf:7e:23:de:7a:63:00:
                    8e:3d:f7:54:96:c3:8a:4e:6f:fe:d3:85:6e:6e:34:
                    81:ef:e2:90:e4:08:c5:5a:f8:a2:a4:81:7d:b8:13:
                    93:36:7a:fc:3b:a3:fb:af:3c:46:7a:e6:29:30:d4:
                    cc:19:03:be:86:55:48:5e:92:69:a1:b9:f7:bf:26:
                    81:de:44:0c:ad:81:d4:63:97:e7:dc:da:68:9f:2c:
                    9e:b8:4d:31:86:f3:01:40:17:b3:5a:eb:16:1d:c5:
                    6d:f2:62:ea:c5:c8:26:67:d7:5b:18:55:52:01:85:
                    ea:f5:1c:a0:b1:2f:6e:f9:8b:c7:f5:38:c1:db:7c:
                    e9:c0:82:4d:78:c7:29:10:6e:a3:f3:1e:04:86:56:
                    08:9b:e3:a7:ff:4c:0b:cb:c7:46:b5:a7:0c:59:a7:
                    36:2a:26:58:de:0e:a8:e2:ae:ed:84:48:bb:31:be:
                    bd:1b:00:e3:c6:07:38:ab:b5:89:96:2a:76:17:f2:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:50:EA:94:DE:BA:C2:61:6C:C8:A4:9E:35:72:B5:D9:CB:3A:0E:7A
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/9FDqlN66wmFsyKSeNXK12cs6Dno.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.181.47.0/24
                IPv6:
                  2001:a10:185::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:21:26:91:a1:a4:9a:bc:25:c5:dc:9c:ea:3c:62:69:60:3e:
         55:02:69:e5:39:c0:b2:76:9d:de:74:74:26:66:21:37:e5:98:
         9f:be:ee:9c:b6:6d:eb:2b:4c:d5:6f:22:1c:cf:85:82:fb:e3:
         df:f7:a9:57:27:c8:46:73:1f:51:38:2c:fa:70:6c:18:e7:f8:
         4e:a1:ac:56:29:44:9a:34:92:54:7d:8e:ea:37:99:fc:60:60:
         e5:0e:41:cd:d8:f4:0c:ba:f2:41:d4:11:8a:62:03:a7:87:d3:
         53:8c:08:68:11:ef:eb:93:04:27:b5:cd:9f:57:f3:d7:c7:f1:
         91:28:c7:b2:94:21:82:e3:8d:4c:02:a6:92:48:7c:05:b2:70:
         3a:b2:14:94:7c:9f:0a:75:0e:69:fb:06:25:88:d4:fe:d2:58:
         6f:39:f2:c6:a7:d4:e0:2d:79:13:a5:30:0c:62:5a:1b:d9:b1:
         45:f2:01:67:1e:e9:f2:73:41:b5:d0:51:de:19:96:13:90:d6:
         86:ea:88:d8:c0:ed:d0:d2:4a:ab:88:57:5b:e7:a2:38:cf:e2:
         8b:44:65:db:0f:f5:dd:b2:cf:81:17:10:d1:e1:14:0c:80:4c:
         40:dc:c5:8f:ee:af:7b:40:56:6b:c4:4d:f0:69:27:2b:49:08:
         f6:03:c9:c8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBI4jzzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MGM0MDk2MTNmZWEwYTJiNDQyY2UxMTJlOWNiZGI0ODVlMDExODhmMB4XDTIyMDMw
MjEwNTgxMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjQ1MGVhOTRkZWJh
YzI2MTZjYzhhNDllMzU3MmI1ZDljYjNhMGU3YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANNCLW454WUDKplk8jbI8fNKYyVCazAInCjpKHKK1J5M4YUU
J3y1wwkIEedYPOby6Xka/UqtSPMcYFEXUbP1311Rt9O/fiPeemMAjj33VJbDik5v
/tOFbm40ge/ikOQIxVr4oqSBfbgTkzZ6/Duj+688RnrmKTDUzBkDvoZVSF6SaaG5
978mgd5EDK2B1GOX59zaaJ8snrhNMYbzAUAXs1rrFh3FbfJi6sXIJmfXWxhVUgGF
6vUcoLEvbvmLx/U4wdt86cCCTXjHKRBuo/MeBIZWCJvjp/9MC8vHRrWnDFmnNiom
WN4OqOKu7YRIuzG+vRsA48YHOKu1iZYqdhfyNBECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBT0UOqU3rrCYWzIpJ41crXZyzoOejAfBgNVHSMEGDAWgBQwxAlhP+oKK0Qs
4RLpy9tIXgEYjzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01NUUpZVF9xQ2l0RUxPRVM2Y3ZiU0Y0QkdJOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTEvYjc4ZmI1LWFmY2EtNGRiNy04ODg2LWMwNjcxYmY0Y2YzZS8x
LzlGRHFsTjY2d21Gc3lLU2VOWEsxMmNzNkRuby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTEv
Yjc4ZmI1LWFmY2EtNGRiNy04ODg2LWMwNjcxYmY0Y2YzZS8xL01NUUpZVF9xQ2l0
RUxPRVM2Y3ZiU0Y0QkdJOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMK1LzAPBAIAAjAJAwcAIAEKEAGF
MA0GCSqGSIb3DQEBCwUAA4IBAQBgISaRoaSavCXF3JzqPGJpYD5VAmnlOcCydp3e
dHQmZiE35Zifvu6ctm3rK0zVbyIcz4WC++Pf96lXJ8hGcx9ROCz6cGwY5/hOoaxW
KUSaNJJUfY7qN5n8YGDlDkHN2PQMuvJB1BGKYgOnh9NTjAhoEe/rkwQntc2fV/PX
x/GRKMeylCGC441MAqaSSHwFsnA6shSUfJ8KdQ5p+wYliNT+0lhvOfLGp9TgLXkT
pTAMYlob2bFF8gFnHunyc0G10FHeGZYTkNaG6ojYwO3Q0kqriFdb56I4z+KLRGXb
D/Xdss+BFxDR4RQMgExA3MWP7q97QFZrxE3waScrSQj2A8nI
-----END CERTIFICATE-----