Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/NyRDWUA1ne0zUV0DuB49axVnk2Q.roa
File:                     NyRDWUA1ne0zUV0DuB49axVnk2Q.roa (raw, json)
Hash identifier:          fcZ7Uu2pWDNBPr+yTMzJuR0/b5yV4DsJQy8/Sv+rSR8=
Subject key identifier:   37:24:43:59:40:35:9D:ED:33:51:5D:03:B8:1E:3D:6B:15:67:93:64
Certificate issuer:       /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial:       0B02493B
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/NyRDWUA1ne0zUV0DuB49axVnk2Q.roa
Signing time:             Thu 02 Jun 2022 09:46:20 +0000
ROA not before:           Thu 02 Jun 2022 09:46:20 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     205773
IP address blocks:        93.93.172.0/22 maxlen: 22
                          2a06:68c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184699195 (0xb02493b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
        Validity
            Not Before: Jun  2 09:46:20 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3724435940359ded33515d03b81e3d6b15679364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e0:6a:d4:4c:bd:3c:a5:95:97:34:13:02:1f:
                    64:66:6f:46:a9:71:a2:f5:8b:43:ab:f6:54:c2:ab:
                    91:fa:bc:c9:58:60:7c:94:16:93:cb:52:7f:94:7a:
                    f1:fb:23:ca:5c:ea:1d:19:49:8e:65:af:6f:4d:03:
                    43:f8:5c:4e:8f:cb:1b:85:83:ce:d8:6c:1b:bb:fa:
                    e0:4c:fe:84:b5:45:26:f9:a7:8c:9d:df:a6:9b:07:
                    43:60:dc:31:2c:5e:ff:45:88:f6:2d:a4:8c:df:29:
                    a4:72:a9:d2:34:2b:ba:33:60:ea:0c:0c:3c:71:24:
                    9f:09:30:f5:f4:14:87:47:b8:7c:f9:48:27:1c:e2:
                    27:64:3c:c9:4d:67:97:81:18:53:9b:7a:67:fb:dd:
                    07:99:79:5f:b3:42:35:13:71:52:84:fa:77:e1:24:
                    8c:a8:d4:d1:62:6e:d0:7b:82:5b:75:c6:46:a5:52:
                    43:df:3f:3a:96:9b:71:b6:96:5e:8a:76:eb:20:35:
                    cf:7b:59:01:b6:50:97:99:06:79:86:cd:91:c0:0c:
                    6d:22:8e:48:7b:a1:20:32:92:50:ad:5f:41:b2:86:
                    83:5b:cb:34:46:40:f0:c5:73:3d:70:06:44:b0:29:
                    26:9d:99:08:1a:7f:d2:5d:f2:c3:e8:ba:54:30:49:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:24:43:59:40:35:9D:ED:33:51:5D:03:B8:1E:3D:6B:15:67:93:64
            X509v3 Authority Key Identifier:
                keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/NyRDWUA1ne0zUV0DuB49axVnk2Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.172.0/22
                IPv6:
                  2a06:68c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         99:8a:c0:1e:56:32:38:30:bc:29:d7:b1:49:5d:87:47:92:c3:
         26:5a:f7:19:79:bd:76:55:81:d4:44:55:99:a1:12:87:fd:95:
         02:a2:52:71:59:3c:71:af:07:13:84:f3:3c:e6:49:b5:54:80:
         82:3c:7d:c8:4f:8c:f3:80:b7:a3:6d:85:2e:86:92:38:a5:5b:
         cf:fe:6f:9e:ed:26:2c:2c:74:3e:54:4e:0c:4f:53:5f:cc:16:
         55:13:3a:d9:af:c4:82:06:47:2a:3f:1d:3a:62:a2:0b:f0:c4:
         7a:5b:54:5c:5b:28:be:c7:a3:a1:74:a2:cb:a2:d9:bd:14:0f:
         19:f2:93:a8:2c:c0:86:53:86:15:02:af:16:eb:58:20:dd:97:
         4b:27:68:72:2d:54:eb:52:a9:48:7a:4b:07:00:b1:f5:f6:64:
         81:73:30:5a:fc:c8:ed:70:72:45:18:86:e5:11:2a:1e:07:7c:
         e3:09:c9:d8:2f:80:5c:ed:d1:06:ee:c3:4e:19:f4:ef:c3:ea:
         ea:a0:5f:1e:b9:11:30:e2:cd:71:17:79:9b:06:8b:90:1e:0d:
         0a:3d:60:f2:6e:b9:e8:12:12:2d:7a:ce:89:e8:8b:64:be:7d:
         9f:5e:39:04:2f:db:29:18:0c:bf:0a:16:fa:40:83:e4:76:85:
         3c:49:9c:f0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECwJJOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
OTYyZGM2OTQwNzYwYjdmYmMyZWE0MzY3Y2M1M2JjMjMwYTY0ZjliMB4XDTIyMDYw
MjA5NDYyMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzcyNDQzNTk0MDM1
OWRlZDMzNTE1ZDAzYjgxZTNkNmIxNTY3OTM2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMfgatRMvTyllZc0EwIfZGZvRqlxovWLQ6v2VMKrkfq8yVhg
fJQWk8tSf5R68fsjylzqHRlJjmWvb00DQ/hcTo/LG4WDzthsG7v64Ez+hLVFJvmn
jJ3fppsHQ2DcMSxe/0WI9i2kjN8ppHKp0jQrujNg6gwMPHEknwkw9fQUh0e4fPlI
JxziJ2Q8yU1nl4EYU5t6Z/vdB5l5X7NCNRNxUoT6d+EkjKjU0WJu0HuCW3XGRqVS
Q98/OpabcbaWXop26yA1z3tZAbZQl5kGeYbNkcAMbSKOSHuhIDKSUK1fQbKGg1vL
NEZA8MVzPXAGRLApJp2ZCBp/0l3yw+i6VDBJUBECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQ3JENZQDWd7TNRXQO4Hj1rFWeTZDAfBgNVHSMEGDAWgBQJYtxpQHYLf7wu
pDZ8xTvCMKZPmzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NXTGNhVUIyQzMtOExxUTJmTVU3d2pDbVQ1cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzAvMjBmZjBmLTYxOGYtNGNiNi1iYzdmLTY1NDE5NzdmNjVmOS8x
L055UkRXVUExbmUwelVWMER1QjQ5YXhWbmsyUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAv
MjBmZjBmLTYxOGYtNGNiNi1iYzdmLTY1NDE5NzdmNjVmOS8xL0NXTGNhVUIyQzMt
OExxUTJmTVU3d2pDbVQ1cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAl1drDANBAIAAjAHAwUDKgZowDAN
BgkqhkiG9w0BAQsFAAOCAQEAmYrAHlYyODC8KdexSV2HR5LDJlr3GXm9dlWB1ERV
maESh/2VAqJScVk8ca8HE4TzPOZJtVSAgjx9yE+M84C3o22FLoaSOKVbz/5vnu0m
LCx0PlRODE9TX8wWVRM62a/EggZHKj8dOmKiC/DEeltUXFsovsejoXSiy6LZvRQP
GfKTqCzAhlOGFQKvFutYIN2XSydoci1U61KpSHpLBwCx9fZkgXMwWvzI7XByRRiG
5REqHgd84wnJ2C+AXO3RBu7DThn078Pq6qBfHrkRMOLNcRd5mwaLkB4NCj1g8m65
6BISLXrOieiLZL59n145BC/bKRgMvwoW+kCD5HaFPEmc8A==
-----END CERTIFICATE-----