Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/THDqs4xXjvaitR81Sfvuqx7SdKs.roa
File:                     THDqs4xXjvaitR81Sfvuqx7SdKs.roa (raw, json)
Hash identifier:          /pPF78eRFZUHcmerqfpKJQ5Evy12hyN8NXhErn3hsek=
Subject key identifier:   4C:70:EA:B3:8C:57:8E:F6:A2:B5:1F:35:49:FB:EE:AB:1E:D2:74:AB
Certificate issuer:       /CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
Certificate serial:       023ABB47
Authority key identifier: 1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/THDqs4xXjvaitR81Sfvuqx7SdKs.roa
Signing time:             Tue 07 Jun 2022 07:34:20 +0000
ROA not before:           Tue 07 Jun 2022 07:34:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20882
IP address blocks:        80.75.224.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37403463 (0x23abb47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a6a1413cc8965ee92416b6059f90b18778c8b38
        Validity
            Not Before: Jun  7 07:34:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4c70eab38c578ef6a2b51f3549fbeeab1ed274ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:82:d2:ef:af:2e:a3:4f:2e:70:b3:a6:55:
                    11:67:0b:b1:cf:01:b1:3d:1f:6c:a1:78:3d:79:cb:
                    7e:a6:d7:b2:c4:40:bf:dc:e5:cb:61:2a:99:18:8f:
                    5b:56:7e:57:41:83:bd:14:2a:15:52:c3:38:04:2f:
                    a5:cb:2b:5e:46:ff:ae:40:e3:22:ea:3c:f2:bf:8e:
                    39:f6:2c:de:e3:50:eb:56:9f:ed:ff:58:61:97:5b:
                    a6:c3:d2:35:b8:c6:e1:90:04:18:fe:70:2e:37:c3:
                    85:f8:da:a4:86:3d:6e:8b:50:c8:0e:d2:10:72:ad:
                    61:f3:13:29:2c:7f:d1:bd:d6:9c:00:1d:45:d9:96:
                    14:42:9e:8e:a4:93:b4:42:7a:31:81:89:56:8f:ac:
                    30:5c:f8:fc:a0:a0:1c:6a:40:8c:75:30:d0:aa:f7:
                    e4:1b:bc:6e:73:18:8c:0a:bf:89:54:46:ca:e6:29:
                    15:0f:2a:db:fa:bf:db:19:c1:43:26:d0:28:bf:76:
                    10:ba:e4:dc:0c:ab:4d:1c:6c:af:73:c3:3b:d3:4c:
                    7d:c6:1e:3f:4f:77:ed:c3:46:d1:7e:03:e7:45:bd:
                    22:7c:cf:14:b5:b0:15:07:ef:5b:b0:26:cf:08:69:
                    ce:56:46:7a:bd:f1:ca:f3:47:7a:1d:fa:13:67:a7:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:70:EA:B3:8C:57:8E:F6:A2:B5:1F:35:49:FB:EE:AB:1E:D2:74:AB
            X509v3 Authority Key Identifier:
                keyid:1A:6A:14:13:CC:89:65:EE:92:41:6B:60:59:F9:0B:18:77:8C:8B:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GmoUE8yJZe6SQWtgWfkLGHeMizg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/THDqs4xXjvaitR81Sfvuqx7SdKs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/59a43f-881a-48ed-9c3e-82c085a92777/1/GmoUE8yJZe6SQWtgWfkLGHeMizg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:3e:3d:b7:1d:cc:aa:c2:e4:6b:4f:c4:21:ac:3f:ff:98:fc:
         4c:4f:93:53:b6:84:6d:42:69:24:15:6a:d4:a4:2b:8e:a4:cb:
         05:8a:8c:e0:ba:10:02:03:c5:33:45:6c:2d:4c:24:49:eb:de:
         f8:ec:4f:19:5e:78:51:b2:9d:ff:a9:02:11:62:07:1b:06:43:
         8c:b2:36:fe:d8:68:38:ec:b6:b7:61:d9:fc:92:5e:8b:dd:bf:
         a8:0b:27:c7:30:11:02:cc:10:04:5e:61:09:7c:fe:6c:62:4c:
         77:6b:bc:cb:93:11:c4:37:41:c2:3b:3f:d7:e0:08:31:39:75:
         f5:20:53:2a:0f:8c:b4:1b:95:65:9d:5e:7e:0b:be:53:f3:9e:
         d0:20:99:7b:8e:d1:c8:e4:16:3e:26:e8:23:38:ee:01:b3:ae:
         3b:12:a4:52:7d:b0:bc:96:77:f8:b2:32:2d:23:2e:45:41:1c:
         0b:eb:c5:ec:0c:11:73:de:37:b1:a2:f8:02:86:99:55:0b:43:
         7b:a7:6e:65:88:b5:62:88:15:53:8b:60:5f:67:2d:92:61:4b:
         3e:0a:32:40:6e:46:8b:10:85:e5:ca:cf:ae:77:0b:fa:25:43:
         c3:fc:23:71:ea:12:03:94:11:d8:6d:0e:de:27:e5:51:8b:b1:
         b3:c9:1a:25
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAjq7RzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YTZhMTQxM2NjODk2NWVlOTI0MTZiNjA1OWY5MGIxODc3OGM4YjM4MB4XDTIyMDYw
NzA3MzQyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGM3MGVhYjM4YzU3
OGVmNmEyYjUxZjM1NDlmYmVlYWIxZWQyNzRhYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMKNgtLvry6jTy5ws6ZVEWcLsc8BsT0fbKF4PXnLfqbXssRA
v9zly2EqmRiPW1Z+V0GDvRQqFVLDOAQvpcsrXkb/rkDjIuo88r+OOfYs3uNQ61af
7f9YYZdbpsPSNbjG4ZAEGP5wLjfDhfjapIY9botQyA7SEHKtYfMTKSx/0b3WnAAd
RdmWFEKejqSTtEJ6MYGJVo+sMFz4/KCgHGpAjHUw0Kr35Bu8bnMYjAq/iVRGyuYp
FQ8q2/q/2xnBQybQKL92ELrk3AyrTRxsr3PDO9NMfcYeP0937cNG0X4D50W9InzP
FLWwFQfvW7AmzwhpzlZGer3xyvNHeh36E2ennBkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRMcOqzjFeO9qK1HzVJ++6rHtJ0qzAfBgNVHSMEGDAWgBQaahQTzIll7pJB
a2BZ+QsYd4yLODAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0dtb1VFOHlKWmU2U1FXdGdXZmtMR0hlTWl6Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmQvNTlhNDNmLTg4MWEtNDhlZC05YzNlLTgyYzA4NWE5Mjc3Ny8x
L1RIRHFzNHhYanZhaXRSODFTZnZ1cXg3U2RLcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQv
NTlhNDNmLTg4MWEtNDhlZC05YzNlLTgyYzA4NWE5Mjc3Ny8xL0dtb1VFOHlKWmU2
U1FXdGdXZmtMR0hlTWl6Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBFBL4DANBgkqhkiG9w0BAQsFAAOC
AQEACD49tx3MqsLka0/EIaw//5j8TE+TU7aEbUJpJBVq1KQrjqTLBYqM4LoQAgPF
M0VsLUwkSeve+OxPGV54UbKd/6kCEWIHGwZDjLI2/thoOOy2t2HZ/JJei92/qAsn
xzARAswQBF5hCXz+bGJMd2u8y5MRxDdBwjs/1+AIMTl19SBTKg+MtBuVZZ1efgu+
U/Oe0CCZe47RyOQWPiboIzjuAbOuOxKkUn2wvJZ3+LIyLSMuRUEcC+vF7AwRc943
saL4AoaZVQtDe6duZYi1YogVU4tgX2ctkmFLPgoyQG5GixCF5crPrncL+iVDw/wj
ceoSA5QR2G0O3iflUYuxs8kaJQ==
-----END CERTIFICATE-----