Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SyV0zrpFe9SCJkGzKBW3ed567gw.roa
File:                     SyV0zrpFe9SCJkGzKBW3ed567gw.roa (raw, json)
Hash identifier:          7jvrE8pdbUNgBWWb23XpBOzEiuPauCyUAA/DmU4Nmfw=
Subject key identifier:   4B:25:74:CE:BA:45:7B:D4:82:26:41:B3:28:15:B7:79:DE:7A:EE:0C
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       0184763AA18D54AC0591A756EBAFA263EA0C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SyV0zrpFe9SCJkGzKBW3ed567gw.roa
Signing time:             Mon 14 Nov 2022 13:01:04 +0000
ROA not before:           Mon 14 Nov 2022 13:01:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     211772
IP address blocks:        2a0b:b81::/46 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:76:3a:a1:8d:54:ac:05:91:a7:56:eb:af:a2:63:ea:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Nov 14 13:01:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4b2574ceba457bd4822641b32815b779de7aee0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:18:4e:22:c4:c9:52:f9:5b:cd:75:59:e3:
                    ed:79:5e:8d:b9:b7:06:03:fd:4b:0c:42:c2:8f:f6:
                    b8:90:26:67:c8:d2:1b:38:6c:62:e5:c1:0d:ef:56:
                    99:f7:6e:ef:f7:59:8c:e9:07:fc:ca:20:da:0d:b0:
                    fe:68:0c:0a:2e:4b:51:72:61:26:a7:b0:2b:2d:7c:
                    91:c8:42:fe:78:4e:17:9b:c5:16:63:1a:c7:fb:d8:
                    0c:ce:64:d5:fa:df:5f:ba:bc:56:5e:e3:0d:a8:17:
                    d0:b5:ff:c7:22:7c:4f:e0:17:68:85:61:32:d3:14:
                    62:77:35:72:04:88:d9:ed:89:56:26:b1:2e:a3:13:
                    4f:cf:02:0f:5f:fb:d0:f1:d7:25:a0:8f:d6:e8:16:
                    c4:ce:4f:e8:33:c1:32:7c:d5:dd:22:73:dd:78:01:
                    1a:bf:f0:0d:9e:0f:ef:ec:53:e6:f0:4c:47:8a:63:
                    ef:f1:67:b2:29:2a:16:8b:39:9b:dc:8a:fd:32:0b:
                    2b:b3:c8:3d:f6:00:ff:19:28:12:78:15:28:a3:9e:
                    4d:11:e0:a4:c0:7d:95:3f:95:cc:8a:32:fc:2b:70:
                    d1:b7:f6:0d:f7:21:df:1b:48:5b:f3:ea:67:79:4a:
                    cf:06:3b:9b:5a:29:cc:e5:47:cb:80:f7:48:7b:d3:
                    5f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:25:74:CE:BA:45:7B:D4:82:26:41:B3:28:15:B7:79:DE:7A:EE:0C
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SyV0zrpFe9SCJkGzKBW3ed567gw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:b81::/46

    Signature Algorithm: sha256WithRSAEncryption
         36:fb:8a:1c:c8:db:2f:15:af:c0:e1:00:33:af:66:1e:1e:7e:
         2c:56:b7:cd:2c:ed:ef:ca:72:2d:f7:51:6b:57:c9:15:0b:3a:
         83:fa:a8:de:df:7f:b1:d7:90:ff:60:ea:6f:7d:03:8f:e6:b8:
         df:54:5c:4d:b3:f3:f4:b4:ba:ea:5d:48:33:80:68:b0:36:81:
         ed:12:54:21:26:e8:4d:1a:37:95:55:57:57:b9:49:c7:3c:7a:
         fb:32:01:87:8f:aa:33:e0:1b:3a:14:10:d6:8e:b4:74:da:0c:
         12:65:4d:16:ee:52:7a:a2:a3:18:ba:47:fd:ca:96:c1:e8:b4:
         a5:42:2d:6c:f7:d3:d0:25:4a:64:e9:ed:83:c7:05:b1:b3:a8:
         5d:83:d8:ab:5a:54:36:bd:bb:ec:59:08:da:8d:ea:6a:73:99:
         be:c4:46:80:8c:4f:bf:00:79:b5:2a:22:26:d2:19:b4:11:f0:
         4e:20:1b:3f:51:56:de:a5:55:c4:9b:c5:94:ba:95:bd:f4:19:
         e6:2b:5d:53:e4:b4:1e:90:da:2c:61:a4:06:34:be:c0:7a:7b:
         c3:59:77:87:fe:b4:97:e0:b1:a9:ee:22:9c:07:f2:9a:a3:01:
         86:6a:44:0b:e0:b0:31:94:77:4d:69:06:db:03:e9:0d:13:b9:
         91:90:e1:b9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYR2OqGNVKwFkadW66+iY+oMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjIxMTE0MTMwMTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjI1NzRjZWJhNDU3YmQ0ODIyNjQxYjMyODE1Yjc3OWRlN2FlZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp8YTiLEyVL5W811WePteV6NubcG
A/1LDELCj/a4kCZnyNIbOGxi5cEN71aZ927v91mM6Qf8yiDaDbD+aAwKLktRcmEm
p7ArLXyRyEL+eE4Xm8UWYxrH+9gMzmTV+t9furxWXuMNqBfQtf/HInxP4BdohWEy
0xRidzVyBIjZ7YlWJrEuoxNPzwIPX/vQ8dcloI/W6BbEzk/oM8EyfNXdInPdeAEa
v/ANng/v7FPm8ExHimPv8WeyKSoWizmb3Ir9Mgsrs8g99gD/GSgSeBUoo55NEeCk
wH2VP5XMijL8K3DRt/YN9yHfG0hb8+pneUrPBjubWinM5UfLgPdIe9NfxQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEsldM66RXvUgiZBsygVt3neeu4MMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvU3lWMHpycEZlOVNDSmtHektCVzNlZDU2N2d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKgsLgQAA
MA0GCSqGSIb3DQEBCwUAA4IBAQA2+4ocyNsvFa/A4QAzr2YeHn4sVrfNLO3vynIt
91FrV8kVCzqD+qje33+x15D/YOpvfQOP5rjfVFxNs/P0tLrqXUgzgGiwNoHtElQh
JuhNGjeVVVdXuUnHPHr7MgGHj6oz4Bs6FBDWjrR02gwSZU0W7lJ6oqMYukf9ypbB
6LSlQi1s99PQJUpk6e2DxwWxs6hdg9irWlQ2vbvsWQjajepqc5m+xEaAjE+/AHm1
KiIm0hm0EfBOIBs/UVbepVXEm8WUupW99BnmK11T5LQekNosYaQGNL7AenvDWXeH
/rSX4LGp7iKcB/KaowGGakQL4LAxlHdNaQbbA+kNE7mRkOG5
-----END CERTIFICATE-----