Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/szSL75slbBnF-Dol43NsZ4l8DFo.roa
File:                     szSL75slbBnF-Dol43NsZ4l8DFo.roa (raw, json)
Hash identifier:          Oo3W9wOVMpl2FeaH6YO0KzcEZ+z54isRrQIu6pXfz4w=
Subject key identifier:   B3:34:8B:EF:9B:25:6C:19:C5:F8:3A:25:E3:73:6C:67:89:7C:0C:5A
Certificate issuer:       /CN=0c16bb527a52859e0f69b88d2fedede1bde9ff2d
Certificate serial:       5F8D84
Authority key identifier: 0C:16:BB:52:7A:52:85:9E:0F:69:B8:8D:2F:ED:ED:E1:BD:E9:FF:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DBa7UnpShZ4PabiNL-3t4b3p_y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/szSL75slbBnF-Dol43NsZ4l8DFo.roa
Signing time:             Sun 06 Mar 2022 07:59:44 +0000
ROA not before:           Sun 06 Mar 2022 07:59:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201106
IP address blocks:        193.105.95.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6262148 (0x5f8d84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c16bb527a52859e0f69b88d2fedede1bde9ff2d
        Validity
            Not Before: Mar  6 07:59:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b3348bef9b256c19c5f83a25e3736c67897c0c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a1:70:dc:92:44:62:18:42:0f:56:51:6d:1a:
                    cb:8e:80:c3:18:d4:e7:23:9a:be:93:f5:15:88:58:
                    60:10:76:1d:07:0f:57:e6:7e:31:5c:d6:49:67:05:
                    7e:f9:b9:40:b2:3f:b1:e4:bb:38:b7:1c:a2:10:91:
                    f9:37:39:b3:64:92:78:61:ac:3d:43:3c:35:91:3a:
                    24:7a:23:fe:57:9e:de:48:e8:b6:f3:49:d1:a2:e5:
                    49:ce:2c:72:ae:40:57:45:4c:f1:48:a7:11:9e:d4:
                    e3:a5:51:66:e1:61:e8:ea:29:62:de:cf:68:5e:f8:
                    38:89:94:4c:5c:15:3f:86:96:02:20:e0:2f:0b:af:
                    18:a0:02:26:16:9f:6e:78:82:d5:1e:37:b8:2b:3c:
                    04:5e:5d:7b:68:83:ac:62:fb:c3:47:3e:56:c3:b6:
                    b7:59:e4:2b:61:c1:4a:41:01:dc:26:31:7d:06:ce:
                    2c:53:f6:0a:8c:df:71:76:c2:e1:cf:b7:e4:d3:a0:
                    7f:5b:e5:25:66:57:41:89:1e:b6:6f:52:a8:c5:84:
                    c9:86:30:8b:8d:24:a2:e3:4b:8e:c8:6d:af:c7:89:
                    2d:3c:5e:24:97:05:3c:14:7c:7b:a7:c2:8b:2a:62:
                    d4:67:fc:1a:91:af:ee:54:1e:c1:2b:90:20:b8:1e:
                    c4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:34:8B:EF:9B:25:6C:19:C5:F8:3A:25:E3:73:6C:67:89:7C:0C:5A
            X509v3 Authority Key Identifier:
                keyid:0C:16:BB:52:7A:52:85:9E:0F:69:B8:8D:2F:ED:ED:E1:BD:E9:FF:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBa7UnpShZ4PabiNL-3t4b3p_y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/szSL75slbBnF-Dol43NsZ4l8DFo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b433e-4c88-43f2-8bf2-2468836f154b/1/DBa7UnpShZ4PabiNL-3t4b3p_y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:ff:2f:77:23:d4:7f:90:ec:11:1d:13:03:c6:4f:b3:a9:1e:
         b0:2f:b8:57:55:78:bf:f7:4c:d1:3e:06:48:88:33:d3:f9:a6:
         5c:01:2a:b4:68:5d:6e:95:63:3a:d9:cc:a2:bc:00:7b:1a:77:
         b4:fe:f7:36:57:30:3e:ed:53:f8:40:be:f0:b0:5b:be:c6:5e:
         f3:28:8a:83:eb:11:46:d6:b2:bc:1c:53:e9:ce:1d:b9:1a:92:
         0d:49:a0:fe:9f:9a:35:38:0b:4c:2c:60:b3:00:f4:ba:07:2e:
         4f:9c:66:08:be:23:f9:a7:e2:cc:80:1c:ca:03:b5:e3:3d:42:
         fd:75:df:1e:14:ef:24:10:d4:2d:4c:dc:40:bb:15:59:ad:a9:
         61:b2:11:21:64:ea:87:d0:ee:4e:de:04:c0:79:d4:40:e9:eb:
         c0:25:22:93:b1:88:b7:3c:50:23:9a:0d:40:aa:57:67:3a:93:
         e7:db:94:78:ab:41:d7:b7:13:30:85:14:ca:90:8b:c8:26:4c:
         6e:1b:9d:d3:27:e3:4b:fd:88:74:a2:0a:5c:e5:f3:fd:06:7c:
         90:c4:cd:2b:0d:14:2c:76:60:75:24:a8:b5:ab:64:6d:3b:0e:
         06:3d:a3:d6:71:e6:64:70:5c:fc:28:9a:93:ad:1c:8b:b1:e1:
         83:4a:83:59
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDX42EMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDBj
MTZiYjUyN2E1Mjg1OWUwZjY5Yjg4ZDJmZWRlZGUxYmRlOWZmMmQwHhcNMjIwMzA2
MDc1OTQ0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhiMzM0OGJlZjliMjU2
YzE5YzVmODNhMjVlMzczNmM2Nzg5N2MwYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0KFw3JJEYhhCD1ZRbRrLjoDDGNTnI5q+k/UViFhgEHYdBw9X
5n4xXNZJZwV++blAsj+x5Ls4txyiEJH5NzmzZJJ4Yaw9Qzw1kTokeiP+V57eSOi2
80nRouVJzixyrkBXRUzxSKcRntTjpVFm4WHo6ili3s9oXvg4iZRMXBU/hpYCIOAv
C68YoAImFp9ueILVHje4KzwEXl17aIOsYvvDRz5Ww7a3WeQrYcFKQQHcJjF9Bs4s
U/YKjN9xdsLhz7fk06B/W+UlZldBiR62b1KoxYTJhjCLjSSi40uOyG2vx4ktPF4k
lwU8FHx7p8KLKmLUZ/waka/uVB7BK5AguB7EMQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFLM0i++bJWwZxfg6JeNzbGeJfAxaMB8GA1UdIwQYMBaAFAwWu1J6UoWeD2m4
jS/t7eG96f8tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
REJhN1VucFNoWjRQYWJpTkwtM3Q0YjNwX3kwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8yNS8zYjQzM2UtNGM4OC00M2YyLThiZjItMjQ2ODgzNmYxNTRiLzEv
c3pTTDc1c2xiQm5GLURvbDQzTnNaNGw4REZvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8z
YjQzM2UtNGM4OC00M2YyLThiZjItMjQ2ODgzNmYxNTRiLzEvREJhN1VucFNoWjRQ
YWJpTkwtM3Q0YjNwX3kwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWlfMA0GCSqGSIb3DQEBCwUAA4IB
AQDI/y93I9R/kOwRHRMDxk+zqR6wL7hXVXi/90zRPgZIiDPT+aZcASq0aF1ulWM6
2cyivAB7Gne0/vc2VzA+7VP4QL7wsFu+xl7zKIqD6xFG1rK8HFPpzh25GpINSaD+
n5o1OAtMLGCzAPS6By5PnGYIviP5p+LMgBzKA7XjPUL9dd8eFO8kENQtTNxAuxVZ
ralhshEhZOqH0O5O3gTAedRA6evAJSKTsYi3PFAjmg1AqldnOpPn25R4q0HXtxMw
hRTKkIvIJkxuG53TJ+NL/Yh0ogpc5fP9BnyQxM0rDRQsdmB1JKi1q2RtOw4GPaPW
ceZkcFz8KJqTrRyLseGDSoNZ
-----END CERTIFICATE-----