Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/M_HyyVY3Wr-jvZ-cPny6-aHBreU.roa
File:                     M_HyyVY3Wr-jvZ-cPny6-aHBreU.roa (raw, json)
Hash identifier:          vkMIyFJ5GbO8ACRTm+2+wLgvZWHYl+tWulDdUeEye74=
Subject key identifier:   33:F1:F2:C9:56:37:5A:BF:A3:BD:9F:9C:3E:7C:BA:F9:A1:C1:AD:E5
Certificate issuer:       /CN=21409e170842785e5e787c3ac27a8844bab76c11
Certificate serial:       0B1650E8
Authority key identifier: 21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/M_HyyVY3Wr-jvZ-cPny6-aHBreU.roa
Signing time:             Sat 01 Jan 2022 00:53:51 +0000
ROA not before:           Sat 01 Jan 2022 00:53:51 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47828
IP address blocks:        91.199.134.0/24 maxlen: 24
                          2001:67c:1824::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186011880 (0xb1650e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21409e170842785e5e787c3ac27a8844bab76c11
        Validity
            Not Before: Jan  1 00:53:51 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=33f1f2c956375abfa3bd9f9c3e7cbaf9a1c1ade5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:6c:91:34:a7:bc:13:8b:cb:a8:cc:b9:ef:
                    3b:6c:55:22:73:0d:a3:58:66:25:9e:87:8d:12:19:
                    4c:5a:80:02:2e:34:94:88:8b:6f:7c:69:c7:c7:90:
                    d3:2e:95:a3:7b:94:f6:f0:96:4e:65:39:f2:45:8b:
                    02:65:9f:37:47:70:12:84:dc:68:7e:a4:77:c3:9f:
                    ea:2a:86:cd:43:ab:6f:29:c2:e2:07:87:87:fc:e5:
                    ac:a3:b5:ac:b2:b4:b1:cf:f2:3c:67:94:8c:2a:ca:
                    c5:83:f5:98:20:62:2c:72:ce:aa:e5:56:ac:7a:17:
                    a4:4e:ee:0f:23:ca:95:87:d2:fa:a4:01:fd:9c:2a:
                    f0:21:61:fc:a4:bd:6c:8d:01:0e:3e:72:1d:c5:c6:
                    c7:37:31:0a:b8:1d:dd:9a:38:42:f8:b4:bf:96:c0:
                    37:64:14:0f:7d:1c:75:07:3f:e7:5d:d5:f0:56:79:
                    a7:5f:59:b1:61:bc:5d:5f:61:76:02:16:8c:5f:4b:
                    38:14:4b:37:af:9b:fd:64:0a:44:5f:01:60:6e:34:
                    78:a4:2e:f2:5a:cb:90:16:4f:2c:8b:29:aa:9e:66:
                    cc:2f:0e:47:33:d7:f8:7c:f4:85:5a:3c:22:eb:1f:
                    94:46:f5:87:59:4b:97:29:fe:0e:8f:99:12:f9:70:
                    5e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F1:F2:C9:56:37:5A:BF:A3:BD:9F:9C:3E:7C:BA:F9:A1:C1:AD:E5
            X509v3 Authority Key Identifier:
                keyid:21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/M_HyyVY3Wr-jvZ-cPny6-aHBreU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.199.134.0/24
                IPv6:
                  2001:67c:1824::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:9d:60:4d:4c:ef:a3:6a:70:56:74:3a:e6:68:19:a7:6a:27:
         03:2a:1d:bf:15:9d:c6:88:ec:25:c5:0f:76:a3:44:db:8b:1a:
         18:82:da:2f:59:fa:ea:36:0b:9c:16:28:44:6f:27:bc:c6:9e:
         c8:8a:58:ff:12:92:65:05:22:ac:68:c3:27:05:d8:a5:b0:17:
         e0:56:8b:5f:61:29:cb:b7:4a:fc:e4:0e:17:6f:61:97:cd:b3:
         a2:b5:70:d5:00:c0:ba:1c:e9:07:6c:1b:9b:46:b4:4a:8e:f7:
         70:95:41:27:8c:17:7f:ca:80:ef:11:bb:ef:d4:86:24:ef:1a:
         a5:55:3b:db:de:68:20:82:01:39:db:1f:1b:3c:5b:9f:e9:f7:
         8c:1a:68:c8:0e:d6:25:6c:57:5f:98:6f:00:8a:a8:27:e7:0b:
         53:24:fa:43:34:b2:44:12:2a:a2:38:ad:00:4f:07:f5:00:22:
         5c:4f:4d:1f:4f:51:bf:46:bf:35:27:f9:dd:79:18:4a:7e:d6:
         29:e8:44:56:37:84:aa:dd:1f:f2:0e:83:1d:81:82:fa:76:d7:
         a6:a5:f5:78:e2:63:83:cd:f8:79:ea:6c:a0:e6:9e:c7:99:8f:
         92:23:21:50:23:9e:51:e4:8e:68:20:61:8c:a0:bc:11:76:08:
         9a:96:8f:a9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECxZQ6DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
MTQwOWUxNzA4NDI3ODVlNWU3ODdjM2FjMjdhODg0NGJhYjc2YzExMB4XDTIyMDEw
MTAwNTM1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzNmMWYyYzk1NjM3
NWFiZmEzYmQ5ZjljM2U3Y2JhZjlhMWMxYWRlNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALR5bJE0p7wTi8uozLnvO2xVInMNo1hmJZ6HjRIZTFqAAi40
lIiLb3xpx8eQ0y6Vo3uU9vCWTmU58kWLAmWfN0dwEoTcaH6kd8Of6iqGzUOrbynC
4geHh/zlrKO1rLK0sc/yPGeUjCrKxYP1mCBiLHLOquVWrHoXpE7uDyPKlYfS+qQB
/Zwq8CFh/KS9bI0BDj5yHcXGxzcxCrgd3Zo4Qvi0v5bAN2QUD30cdQc/513V8FZ5
p19ZsWG8XV9hdgIWjF9LOBRLN6+b/WQKRF8BYG40eKQu8lrLkBZPLIspqp5mzC8O
RzPX+Hz0hVo8IusflEb1h1lLlyn+Do+ZEvlwXh0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQz8fLJVjdav6O9n5w+fLr5ocGt5TAfBgNVHSMEGDAWgBQhQJ4XCEJ4Xl54
fDrCeohEurdsETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0lVQ2VGd2hDZUY1ZWVIdzZ3bnFJUkxxM2JCRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjIvNmFiOGVlLWU4ZjctNGY4OS05OGQ3LTBlMTM2YmU5YmYzNi8x
L01fSHl5VlkzV3ItanZaLWNQbnk2LWFIQnJlVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjIv
NmFiOGVlLWU4ZjctNGY4OS05OGQ3LTBlMTM2YmU5YmYzNi8xL0lVQ2VGd2hDZUY1
ZWVIdzZ3bnFJUkxxM2JCRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAFvHhjAPBAIAAjAJAwcAIAEGfBgk
MA0GCSqGSIb3DQEBCwUAA4IBAQCenWBNTO+janBWdDrmaBmnaicDKh2/FZ3GiOwl
xQ92o0TbixoYgtovWfrqNgucFihEbye8xp7Iilj/EpJlBSKsaMMnBdilsBfgVotf
YSnLt0r85A4Xb2GXzbOitXDVAMC6HOkHbBubRrRKjvdwlUEnjBd/yoDvEbvv1IYk
7xqlVTvb3mggggE52x8bPFuf6feMGmjIDtYlbFdfmG8Aiqgn5wtTJPpDNLJEEiqi
OK0ATwf1ACJcT00fT1G/Rr81J/ndeRhKftYp6ERWN4Sq3R/yDoMdgYL6dtempfV4
4mODzfh56myg5p7HmY+SIyFQI55R5I5oIGGMoLwRdgialo+p
-----END CERTIFICATE-----