Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/sUyVGS-cZzgb-rLGoGRG6LzzcPI.roa
File:                     sUyVGS-cZzgb-rLGoGRG6LzzcPI.roa (raw, json)
Hash identifier:          DDoPnH9HwCTfIymqwi7GleAMNbl3NV65K2PaXRJ4nqY=
Subject key identifier:   B1:4C:95:19:2F:9C:67:38:1B:FA:B2:C6:A0:64:46:E8:BC:F3:70:F2
Certificate issuer:       /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial:       346D6AEF
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/sUyVGS-cZzgb-rLGoGRG6LzzcPI.roa
Signing time:             Sat 01 Jan 2022 08:06:08 +0000
ROA not before:           Sat 01 Jan 2022 08:06:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     200884
IP address blocks:        94.126.50.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879586031 (0x346d6aef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
        Validity
            Not Before: Jan  1 08:06:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b14c95192f9c67381bfab2c6a06446e8bcf370f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:44:ec:57:31:76:f0:75:f1:46:a3:3d:8d:
                    6b:33:cf:36:61:fe:26:63:28:10:4f:dd:7f:85:1d:
                    35:7f:4e:47:45:1a:3c:ca:29:12:5e:8f:20:d4:11:
                    54:2c:49:fa:7d:17:a2:97:13:98:88:5c:fd:8b:36:
                    87:e8:20:c9:54:40:4c:df:a7:85:14:86:38:d7:10:
                    3a:ab:b4:ee:9b:34:1a:36:4c:ef:2a:23:8b:5f:ae:
                    c7:5a:f6:82:22:41:3c:37:86:8c:93:e1:32:ab:eb:
                    3b:ff:a7:fe:25:30:28:15:0d:0c:80:38:16:a7:0e:
                    5b:f7:e2:18:28:f6:91:02:ec:c4:aa:c4:dd:b0:36:
                    a5:e1:95:e4:48:ac:9a:f8:a2:47:ee:17:ce:6e:4e:
                    45:a6:8d:cc:74:68:3d:d6:66:90:46:13:b5:33:3c:
                    e9:d2:cc:e0:21:4b:43:8a:4c:c9:b6:b0:3f:3c:c5:
                    24:73:08:a6:7f:26:8f:ae:ea:b2:ef:92:3e:a0:5a:
                    33:56:b4:75:76:71:81:51:11:1b:09:8b:5c:12:c9:
                    d8:90:a4:07:35:1f:56:ad:bc:55:01:1d:b2:c3:87:
                    48:d1:33:98:a6:4a:ab:85:05:19:dd:b7:ef:0f:23:
                    3a:92:e4:02:e4:e9:61:fe:a5:79:76:ac:88:36:78:
                    c3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4C:95:19:2F:9C:67:38:1B:FA:B2:C6:A0:64:46:E8:BC:F3:70:F2
            X509v3 Authority Key Identifier:
                keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/sUyVGS-cZzgb-rLGoGRG6LzzcPI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.126.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:0c:6d:f8:97:ae:38:71:e5:fb:40:ff:59:15:c2:81:46:3d:
         7b:a9:e5:f7:b9:aa:27:0b:cb:bf:24:a9:ad:d7:ac:6e:f0:37:
         6d:6a:e8:82:51:df:b7:5e:88:ce:af:ea:10:1e:ab:13:35:0e:
         3b:44:53:7b:d8:d9:4f:38:e0:09:fc:18:e6:43:39:ff:4d:fb:
         90:9f:e5:84:3f:ce:bf:0a:99:e1:5e:35:93:a9:11:be:b0:9f:
         d3:42:27:af:d0:3a:a6:9c:82:67:3f:02:e9:ed:1f:bf:2d:df:
         c0:10:26:66:52:a6:c4:36:42:ad:cb:49:65:c7:1c:21:27:c8:
         10:c7:99:9a:09:a1:8d:bd:63:80:ac:c6:b6:65:13:a1:56:fe:
         14:9e:09:a5:58:48:bf:e5:a0:51:88:dd:60:b5:1d:ba:1d:60:
         a8:1a:f3:d2:0d:af:a2:88:c4:d9:56:a0:48:0b:70:a4:5c:65:
         15:69:e5:f0:21:1b:be:69:4b:68:0f:06:ed:4c:b4:ef:40:69:
         0e:f9:e1:ad:14:0a:14:ce:83:a7:cc:83:34:cb:9d:0a:20:e8:
         16:a5:a4:56:08:54:cc:07:7e:97:1a:b8:90:f5:ac:bc:6c:c2:
         56:51:98:5c:df:4c:d6:fd:b4:7f:10:fc:ca:5e:c0:d9:f4:71:
         57:8b:cf:66
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIENG1q7zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YzU3Y2IzYTFlNTNlNzYyOWVlM2I5ZjI2NzJkNDU3MWVmODVkMmM4MB4XDTIyMDEw
MTA4MDYwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjE0Yzk1MTkyZjlj
NjczODFiZmFiMmM2YTA2NDQ2ZThiY2YzNzBmMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL+zROxXMXbwdfFGoz2NazPPNmH+JmMoEE/df4UdNX9OR0Ua
PMopEl6PINQRVCxJ+n0XopcTmIhc/Ys2h+ggyVRATN+nhRSGONcQOqu07ps0GjZM
7yoji1+ux1r2giJBPDeGjJPhMqvrO/+n/iUwKBUNDIA4FqcOW/fiGCj2kQLsxKrE
3bA2peGV5EismviiR+4Xzm5ORaaNzHRoPdZmkEYTtTM86dLM4CFLQ4pMybawPzzF
JHMIpn8mj67qsu+SPqBaM1a0dXZxgVERGwmLXBLJ2JCkBzUfVq28VQEdssOHSNEz
mKZKq4UFGd237w8jOpLkAuTpYf6leXasiDZ4wxUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSxTJUZL5xnOBv6ssagZEbovPNw8jAfBgNVHSMEGDAWgBQMV8s6HlPnYp7j
ufJnLUVx74XSyDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0RGZkxPaDVUNTJLZTQ3bnlaeTFGY2UtRjBzZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvNmMxZTAxLTE1OTUtNDdiMC05ZTAzLWNmNzIzMmRkZWJlYy8x
L3NVeVZHUy1jWnpnYi1yTEdvR1JHNkx6emNQSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
NmMxZTAxLTE1OTUtNDdiMC05ZTAzLWNmNzIzMmRkZWJlYy8xL0RGZkxPaDVUNTJL
ZTQ3bnlaeTFGY2UtRjBzZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV5+MjANBgkqhkiG9w0BAQsFAAOC
AQEAywxt+JeuOHHl+0D/WRXCgUY9e6nl97mqJwvLvySprdesbvA3bWroglHft16I
zq/qEB6rEzUOO0RTe9jZTzjgCfwY5kM5/037kJ/lhD/OvwqZ4V41k6kRvrCf00In
r9A6ppyCZz8C6e0fvy3fwBAmZlKmxDZCrctJZcccISfIEMeZmgmhjb1jgKzGtmUT
oVb+FJ4JpVhIv+WgUYjdYLUduh1gqBrz0g2voojE2VagSAtwpFxlFWnl8CEbvmlL
aA8G7Uy070BpDvnhrRQKFM6Dp8yDNMudCiDoFqWkVghUzAd+lxq4kPWsvGzCVlGY
XN9M1v20fxD8yl7A2fRxV4vPZg==
-----END CERTIFICATE-----