Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/k6q9A27hrBmv3MlvJ5tmxPdCyLU.roa
File:                     k6q9A27hrBmv3MlvJ5tmxPdCyLU.roa (raw, json)
Hash identifier:          JhX4BZivTCS+04Lm5gvFP3MUP6ZZjpYL5voWl29AFAA=
Subject key identifier:   93:AA:BD:03:6E:E1:AC:19:AF:DC:C9:6F:27:9B:66:C4:F7:42:C8:B5
Certificate issuer:       /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial:       03C29A07
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/k6q9A27hrBmv3MlvJ5tmxPdCyLU.roa
Signing time:             Sat 01 Jan 2022 03:53:23 +0000
ROA not before:           Sat 01 Jan 2022 03:53:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43003
IP address blocks:        62.93.120.0/21 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63085063 (0x3c29a07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
        Validity
            Not Before: Jan  1 03:53:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=93aabd036ee1ac19afdcc96f279b66c4f742c8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5e:cc:0b:c6:16:9b:34:26:03:a9:dd:2b:9f:
                    2a:e2:19:64:44:00:9c:18:56:2e:7a:83:c5:b0:a8:
                    01:2b:f3:7f:ef:61:e1:9f:44:34:fa:80:9d:77:c2:
                    18:b0:56:66:7f:94:4c:7b:35:22:15:6c:e9:31:33:
                    80:de:34:d2:16:ff:6d:4c:0c:3f:aa:44:a8:92:e3:
                    f5:b3:2e:8d:83:6e:8c:25:33:56:fb:8e:63:6b:03:
                    ac:25:fd:7c:91:47:5e:40:f9:70:35:2b:c0:69:23:
                    1f:5d:7c:39:e4:91:f2:af:6e:4e:98:23:54:cb:44:
                    fc:e5:c7:6e:cf:5a:fa:d1:81:42:50:3c:39:59:5c:
                    1c:b6:c6:21:0b:fa:ad:4c:bc:d9:a5:1a:0a:b3:e7:
                    63:96:49:c3:4c:63:4e:24:9c:cd:40:a9:23:d3:ec:
                    0f:e1:1e:aa:23:65:57:8d:1d:56:2c:c8:38:bd:f0:
                    7b:73:ba:c8:5b:ab:88:dc:7f:17:fe:1b:78:19:65:
                    1c:67:cd:8c:70:aa:eb:78:ca:59:bf:d2:0a:aa:12:
                    63:c0:70:dc:1d:80:fe:ad:72:6a:b9:7d:48:df:88:
                    a7:8f:7a:3c:50:df:d0:9e:99:fa:db:8b:e3:b1:f3:
                    1c:e0:29:72:fb:5e:7e:ef:cc:00:6c:d7:c3:0b:5d:
                    3d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AA:BD:03:6E:E1:AC:19:AF:DC:C9:6F:27:9B:66:C4:F7:42:C8:B5
            X509v3 Authority Key Identifier:
                keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/k6q9A27hrBmv3MlvJ5tmxPdCyLU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.93.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:25:66:f6:d2:8f:b0:4b:ae:2b:ef:b9:10:92:04:9e:29:eb:
         09:56:01:4a:68:42:bc:0e:93:dd:fb:1d:3e:27:eb:a1:bc:73:
         75:0c:a6:9e:d5:9b:9a:23:3f:9c:23:21:98:7e:56:4c:38:04:
         6d:00:54:3f:d3:5d:6f:14:c2:51:ab:c1:08:0c:e1:03:47:39:
         52:ce:af:56:e9:e5:5c:10:c5:5a:c4:63:00:5c:a4:f4:2e:0d:
         49:ab:b2:fa:79:cf:3d:26:37:8c:e6:8c:6d:b0:53:f8:e9:1d:
         82:c3:d5:42:38:9a:c9:3c:20:32:fe:4f:24:81:38:35:1f:6b:
         b8:3d:f0:92:97:c5:4f:70:8d:dd:97:fe:78:ff:f8:a0:08:3a:
         29:d4:54:ec:c9:0b:cf:89:bf:f2:b6:cf:6d:d7:26:c7:41:e6:
         31:c8:4d:0b:df:75:30:f1:5a:0a:81:d9:f0:28:60:b6:08:c0:
         5e:3a:cc:40:27:cc:73:a4:b3:2c:72:cb:7e:30:da:d2:fa:d9:
         a5:3e:00:89:cc:51:c3:ee:93:c5:8e:12:fd:77:3c:40:64:c3:
         db:1c:a7:83:56:88:2e:6d:4f:bc:28:3f:ed:c1:46:0f:bb:ac:
         c1:94:0f:8e:95:83:61:7c:ff:00:b4:14:fa:96:92:f3:fe:46:
         d6:04:a4:7e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA8KaBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ZWFiNTM2NDBiMDkzMTkyNGI3M2Y3NjA5MjU4NDUxNTBhNmNjY2E1MB4XDTIyMDEw
MTAzNTMyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTNhYWJkMDM2ZWUx
YWMxOWFmZGNjOTZmMjc5YjY2YzRmNzQyYzhiNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJpezAvGFps0JgOp3SufKuIZZEQAnBhWLnqDxbCoASvzf+9h
4Z9ENPqAnXfCGLBWZn+UTHs1IhVs6TEzgN400hb/bUwMP6pEqJLj9bMujYNujCUz
VvuOY2sDrCX9fJFHXkD5cDUrwGkjH118OeSR8q9uTpgjVMtE/OXHbs9a+tGBQlA8
OVlcHLbGIQv6rUy82aUaCrPnY5ZJw0xjTiSczUCpI9PsD+EeqiNlV40dVizIOL3w
e3O6yFuriNx/F/4beBllHGfNjHCq63jKWb/SCqoSY8Bw3B2A/q1yarl9SN+Ip496
PFDf0J6Z+tuL47HzHOApcvtefu/MAGzXwwtdPQ8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSTqr0DbuGsGa/cyW8nm2bE90LItTAfBgNVHSMEGDAWgBRuq1NkCwkxkktz
92CSWEUVCmzMpTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JxdFRaQXNKTVpKTGNfZGdrbGhGRlFwc3pLVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvMmEzOGU2LTI5NGUtNGZhMy1hNWEwLTUzMDQ2MzIzOTUxZi8x
L2s2cTlBMjdockJtdjNNbHZKNXRteFBkQ3lMVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
MmEzOGU2LTI5NGUtNGZhMy1hNWEwLTUzMDQ2MzIzOTUxZi8xL2JxdFRaQXNKTVpK
TGNfZGdrbGhGRlFwc3pLVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAz5deDANBgkqhkiG9w0BAQsFAAOC
AQEALSVm9tKPsEuuK++5EJIEninrCVYBSmhCvA6T3fsdPifrobxzdQymntWbmiM/
nCMhmH5WTDgEbQBUP9NdbxTCUavBCAzhA0c5Us6vVunlXBDFWsRjAFyk9C4NSauy
+nnPPSY3jOaMbbBT+OkdgsPVQjiayTwgMv5PJIE4NR9ruD3wkpfFT3CN3Zf+eP/4
oAg6KdRU7MkLz4m/8rbPbdcmx0HmMchNC991MPFaCoHZ8ChgtgjAXjrMQCfMc6Sz
LHLLfjDa0vrZpT4AicxRw+6TxY4S/Xc8QGTD2xyng1aILm1PvCg/7cFGD7uswZQP
jpWDYXz/ALQU+paS8/5G1gSkfg==
-----END CERTIFICATE-----