Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/EcQCfHD4DLjyMzdUh7fZd75qC7s.roa
File:                     EcQCfHD4DLjyMzdUh7fZd75qC7s.roa (raw, json)
Hash identifier:          laWVocPFBiFRzto2kZ6MFchtzlNg9iUASgrXGJj6I7o=
Subject key identifier:   11:C4:02:7C:70:F8:0C:B8:F2:33:37:54:87:B7:D9:77:BE:6A:0B:BB
Certificate issuer:       /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial:       01F4E278
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/EcQCfHD4DLjyMzdUh7fZd75qC7s.roa
Signing time:             Sat 01 Jan 2022 10:56:45 +0000
ROA not before:           Sat 01 Jan 2022 10:56:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60167
IP address blocks:        185.192.48.0/22 maxlen: 22
                          2a0a:22c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32825976 (0x1f4e278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
        Validity
            Not Before: Jan  1 10:56:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=11c4027c70f80cb8f233375487b7d977be6a0bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:20:e0:91:b5:b3:da:d2:ef:13:35:6f:3e:
                    16:63:31:77:24:61:f4:50:56:de:a6:fe:92:62:90:
                    f6:f3:da:f4:6f:ac:d8:fe:c3:39:87:d0:e0:5f:ad:
                    25:ae:78:c9:06:38:97:b7:2b:e1:dd:57:c3:31:3c:
                    04:5b:5d:ee:89:ce:cd:ec:6e:c8:16:cf:4e:28:2b:
                    24:0a:d5:c9:d2:db:bd:ff:ad:e5:ed:b7:20:7e:98:
                    9d:01:2d:d6:01:1e:d6:00:07:c6:b4:f3:ef:05:fa:
                    3e:a4:dd:df:0e:0e:2b:81:37:08:de:6c:9a:fc:60:
                    1e:36:50:56:e2:f0:00:7a:c8:e6:79:5b:e0:fd:71:
                    29:a4:7b:3f:ac:c0:da:4f:fc:67:96:c3:35:ef:31:
                    70:b6:e9:cb:af:ee:2d:3d:75:ba:9a:bd:14:2a:25:
                    ba:66:fe:d2:2a:92:57:1e:4c:65:3c:c8:cd:60:db:
                    7f:85:25:36:d3:6f:cf:a8:6d:36:c8:76:74:0b:ea:
                    56:21:4d:80:e3:c9:98:73:a0:99:65:77:0e:99:6e:
                    2b:26:02:0a:5a:fd:63:87:1e:f2:a6:cb:04:0f:4e:
                    ed:4b:98:4f:04:3e:2e:2d:4a:27:9c:2b:7c:82:29:
                    38:f5:7c:d3:cd:aa:37:58:fd:62:a1:70:be:5b:74:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C4:02:7C:70:F8:0C:B8:F2:33:37:54:87:B7:D9:77:BE:6A:0B:BB
            X509v3 Authority Key Identifier:
                keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/EcQCfHD4DLjyMzdUh7fZd75qC7s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.192.48.0/22
                IPv6:
                  2a0a:22c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8a:5e:83:6c:ad:dc:a4:26:e9:ad:58:87:c9:51:94:64:1b:6f:
         fc:c5:ed:20:4c:ac:ad:9e:81:cb:b5:06:e5:96:42:4e:c3:fd:
         19:d8:a7:28:2f:64:04:e1:19:31:a2:27:27:10:47:1d:7f:99:
         b3:75:ea:bf:7f:bc:00:da:0b:20:cf:48:36:ff:4d:2c:aa:67:
         fd:6e:5f:a6:39:a1:d2:f8:a5:86:09:27:75:dc:fc:d9:f1:25:
         e4:27:a2:e8:84:ab:53:70:2e:c9:a7:36:80:3c:16:f4:b6:ba:
         99:6a:53:a5:f7:15:a7:29:f4:6c:98:7a:c4:d9:11:7f:1d:56:
         ca:d4:ca:90:43:ed:be:b7:bb:ee:14:86:88:d4:ed:d2:ec:58:
         d6:65:14:db:9f:ea:b0:6a:33:dc:04:5d:fb:51:b8:bc:ca:83:
         18:ad:12:e9:46:07:ed:56:30:60:c6:25:24:92:8a:da:e3:4f:
         a5:30:9f:f2:6f:80:44:17:83:88:07:06:03:2e:e4:c0:24:ba:
         fa:b5:94:ca:e7:c3:cc:95:9f:41:b7:15:ed:38:82:76:18:c6:
         2c:7c:4a:2f:6e:1c:7d:f7:e3:33:1b:0b:68:ad:a3:7a:19:79:
         a1:06:3d:5b:eb:c0:fb:ff:55:40:17:71:b3:d6:49:0e:c5:a1:
         10:21:3a:5b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAfTieDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
N2ZkOTkwOWQxNmJhZjExY2I5NThjOGQyNzRlMjRlYzk5NDc0MjJmMB4XDTIyMDEw
MTEwNTY0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTFjNDAyN2M3MGY4
MGNiOGYyMzMzNzU0ODdiN2Q5NzdiZTZhMGJiYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK06IOCRtbPa0u8TNW8+FmMxdyRh9FBW3qb+kmKQ9vPa9G+s
2P7DOYfQ4F+tJa54yQY4l7cr4d1XwzE8BFtd7onOzexuyBbPTigrJArVydLbvf+t
5e23IH6YnQEt1gEe1gAHxrTz7wX6PqTd3w4OK4E3CN5smvxgHjZQVuLwAHrI5nlb
4P1xKaR7P6zA2k/8Z5bDNe8xcLbpy6/uLT11upq9FColumb+0iqSVx5MZTzIzWDb
f4UlNtNvz6htNsh2dAvqViFNgOPJmHOgmWV3DpluKyYCClr9Y4ce8qbLBA9O7UuY
TwQ+Li1KJ5wrfIIpOPV8082qN1j9YqFwvlt0cl8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBQRxAJ8cPgMuPIzN1SHt9l3vmoLuzAfBgNVHSMEGDAWgBTn/ZkJ0WuvEcuV
jI0nTiTsmUdCLzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzVfMlpDZEZycnhITGxZeU5KMDRrN0psSFFpOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMzEvMWYwMWUzLTc3ZDMtNGNmNy1hZWE4LTEyMmZlZWNkZTNlYS8x
L0VjUUNmSEQ0RExqeU16ZFVoN2ZaZDc1cUM3cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzEv
MWYwMWUzLTc3ZDMtNGNmNy1hZWE4LTEyMmZlZWNkZTNlYS8xLzVfMlpDZEZycnhI
TGxZeU5KMDRrN0psSFFpOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArnAMDANBAIAAjAHAwUDKgoiwDAN
BgkqhkiG9w0BAQsFAAOCAQEAil6DbK3cpCbprViHyVGUZBtv/MXtIEysrZ6By7UG
5ZZCTsP9GdinKC9kBOEZMaInJxBHHX+Zs3Xqv3+8ANoLIM9INv9NLKpn/W5fpjmh
0vilhgknddz82fEl5Cei6ISrU3Auyac2gDwW9La6mWpTpfcVpyn0bJh6xNkRfx1W
ytTKkEPtvre77hSGiNTt0uxY1mUU25/qsGoz3ARd+1G4vMqDGK0S6UYH7VYwYMYl
JJKK2uNPpTCf8m+ARBeDiAcGAy7kwCS6+rWUyufDzJWfQbcV7TiCdhjGLHxKL24c
fffjMxsLaK2jehl5oQY9W+vA+/9VQBdxs9ZJDsWhECE6Ww==
-----END CERTIFICATE-----