Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/v1ixhbIS_mbU4_Nb0OanrVeIMzc.roa
File:                     v1ixhbIS_mbU4_Nb0OanrVeIMzc.roa (raw, json)
Hash identifier:          D+OksOUUm3LRYb1SqDl6+vWcLPLwR0LRK1FL26YRAzk=
Subject key identifier:   BF:58:B1:85:B2:12:FE:66:D4:E3:F3:5B:D0:E6:A7:AD:57:88:33:37
Certificate issuer:       /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial:       01850766268B16ABA53AE3616075AA3EE04B
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/v1ixhbIS_mbU4_Nb0OanrVeIMzc.roa
Signing time:             Mon 12 Dec 2022 17:33:33 +0000
ROA not before:           Mon 12 Dec 2022 17:33:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13030
IP address blocks:        185.242.62.0/23 maxlen: 23
                          2a09:a7c4::/30 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:07:66:26:8b:16:ab:a5:3a:e3:61:60:75:aa:3e:e0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
        Validity
            Not Before: Dec 12 17:33:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=bf58b185b212fe66d4e3f35bd0e6a7ad57883337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:08:83:39:17:4a:79:5d:5c:0f:41:51:dd:
                    43:1e:9b:b2:dd:aa:1f:3e:38:99:77:32:9f:1d:fe:
                    ec:ee:d1:a5:9e:72:11:73:07:b5:c1:51:dd:08:87:
                    f8:01:69:f6:c3:b9:b8:fa:0d:64:aa:f5:a1:cf:f0:
                    63:2a:d0:83:f2:ab:b4:4a:60:2e:68:ae:6e:0a:25:
                    c0:ff:e8:3d:43:f8:4f:d8:a5:25:bb:26:c6:69:33:
                    ae:4a:c3:ad:5a:bd:94:98:e8:77:c5:ca:7c:59:5a:
                    9c:f1:b1:d4:9f:30:91:e0:d0:3b:77:a2:f6:82:8d:
                    8c:50:66:2d:f2:b7:30:b9:a4:c6:91:a7:e3:59:c4:
                    ed:c3:56:8f:3e:2a:5e:93:e0:76:a8:1d:5a:4d:a1:
                    f5:d5:67:5e:63:6d:29:c6:2e:c6:ee:58:72:c5:71:
                    34:e8:46:b2:a1:a0:13:ba:e3:4d:6a:22:80:e0:c9:
                    48:e3:d6:7d:f1:a8:56:1e:0a:0e:07:d4:0b:aa:13:
                    e9:6b:f6:76:0a:16:05:7c:34:93:db:72:01:b3:91:
                    31:5e:1e:37:29:e9:f9:88:ec:02:76:d6:15:19:d0:
                    8a:e6:47:2e:3d:8b:09:22:3e:2b:a6:6d:8d:c6:59:
                    55:13:5d:9c:9d:1e:5a:5d:a9:c8:68:37:fc:71:8b:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:58:B1:85:B2:12:FE:66:D4:E3:F3:5B:D0:E6:A7:AD:57:88:33:37
            X509v3 Authority Key Identifier:
                keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/v1ixhbIS_mbU4_Nb0OanrVeIMzc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.242.62.0/23
                IPv6:
                  2a09:a7c4::/30

    Signature Algorithm: sha256WithRSAEncryption
         9c:1e:25:e2:20:49:d6:9d:6a:9b:07:1b:a5:84:5a:8d:af:c8:
         97:45:fc:08:eb:8d:73:ba:16:76:7d:42:bd:c5:fb:e2:65:2f:
         99:df:9c:aa:2c:bf:21:54:8c:4e:3f:ce:99:9d:06:2f:89:b1:
         22:5d:6a:dd:93:07:eb:7c:eb:1a:ae:5e:e2:6c:79:de:72:d6:
         62:3c:ea:ac:f8:a1:7d:b7:88:0a:99:f5:6f:fa:ca:b2:b0:e4:
         3c:3e:07:d6:a8:ea:93:b4:d8:e9:e1:25:3e:bb:81:69:4d:9e:
         42:c7:72:a9:35:e5:cd:f3:09:7c:32:65:2d:67:71:93:b6:1a:
         2f:75:b9:93:ac:8a:f3:48:c7:22:98:50:b6:1c:0b:7e:b8:79:
         03:8c:70:ad:09:8f:45:f8:d8:48:c3:c1:0d:97:db:ac:d0:ca:
         3c:43:32:8c:a7:49:29:60:d1:cd:52:13:e9:a8:18:da:e8:ec:
         74:2a:68:b4:5a:d9:6b:56:5b:5a:9f:a9:ef:2d:a5:be:d6:87:
         a7:dd:6a:89:d5:36:9b:13:b2:5c:50:3e:d4:0c:34:be:68:3c:
         26:a8:fb:eb:f8:c6:37:dd:89:b5:fb:10:04:68:16:bf:13:10:
         eb:59:78:6b:89:9e:c4:03:73:35:b2:18:fa:02:58:98:04:12:
         bb:7c:0b:bb
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYUHZiaLFqulOuNhYHWqPuBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmY0YjFjYmVhZjlkZDc1ZDNiNWVmM2VlOWE3NWQ1Nzk5
ZjcyODAwHhcNMjIxMjEyMTczMzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjU4YjE4NWIyMTJmZTY2ZDRlM2YzNWJkMGU2YTdhZDU3ODgzMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7EIgzkXSnldXA9BUd1DHpuy3aof
PjiZdzKfHf7s7tGlnnIRcwe1wVHdCIf4AWn2w7m4+g1kqvWhz/BjKtCD8qu0SmAu
aK5uCiXA/+g9Q/hP2KUluybGaTOuSsOtWr2UmOh3xcp8WVqc8bHUnzCR4NA7d6L2
go2MUGYt8rcwuaTGkafjWcTtw1aPPipek+B2qB1aTaH11WdeY20pxi7G7lhyxXE0
6EayoaATuuNNaiKA4MlI49Z98ahWHgoOB9QLqhPpa/Z2ChYFfDST23IBs5ExXh43
Ken5iOwCdtYVGdCK5kcuPYsJIj4rpm2NxllVE12cnR5aXanIaDf8cYujBwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFL9YsYWyEv5m1OPzW9Dmp61XiDM3MB8GA1UdIwQY
MBaAFHP/Sxy+r53XXTte8+6addV5n3KAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUt
NDM3YTM0NmIyMmY3LzEvdjFpeGhiSVNfbWJVNF9OYjBPYW5yVmVJTXpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUtNDM3YTM0NmIyMmY3
LzEvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBufI+MA0E
AgACMAcDBQIqCafEMA0GCSqGSIb3DQEBCwUAA4IBAQCcHiXiIEnWnWqbBxulhFqN
r8iXRfwI641zuhZ2fUK9xfviZS+Z35yqLL8hVIxOP86ZnQYvibEiXWrdkwfrfOsa
rl7ibHnectZiPOqs+KF9t4gKmfVv+sqysOQ8PgfWqOqTtNjp4SU+u4FpTZ5Cx3Kp
NeXN8wl8MmUtZ3GTthovdbmTrIrzSMcimFC2HAt+uHkDjHCtCY9F+NhIw8ENl9us
0Mo8QzKMp0kpYNHNUhPpqBja6Ox0Kmi0WtlrVltan6nvLaW+1oen3WqJ1TabE7Jc
UD7UDDS+aDwmqPvr+MY33Ym1+xAEaBa/ExDrWXhriZ7EA3M1shj6AliYBBK7fAu7
-----END CERTIFICATE-----