Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/sE5ZYEkSCBKhWTcXHsrO0O8q9PI.roa
File:                     sE5ZYEkSCBKhWTcXHsrO0O8q9PI.roa (raw, json)
Hash identifier:          lySbsRmaCvEDCVDB/rXJ0dbD1QVU6kxkVK9DGQsFTag=
Subject key identifier:   B0:4E:59:60:49:12:08:12:A1:59:37:17:1E:CA:CE:D0:EF:2A:F4:F2
Certificate issuer:       /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial:       01833AE330FF0E1E49E0ECF9722621F2DD46
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/sE5ZYEkSCBKhWTcXHsrO0O8q9PI.roa
Signing time:             Wed 14 Sep 2022 07:25:11 +0000
ROA not before:           Wed 14 Sep 2022 07:25:11 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     49697
IP address blocks:        46.251.230.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:3a:e3:30:ff:0e:1e:49:e0:ec:f9:72:26:21:f2:dd:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
        Validity
            Not Before: Sep 14 07:25:11 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b04e596049120812a15937171ecaced0ef2af4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a9:b6:c3:e9:37:f4:74:da:fc:e9:db:67:28:
                    08:d9:52:27:ae:bf:80:15:8e:8f:56:3e:20:d3:27:
                    f9:8b:95:9d:63:e2:14:18:54:17:d5:70:3b:c5:01:
                    2d:88:46:7b:a4:ba:58:a6:a8:f2:aa:9f:b4:2d:6f:
                    95:43:79:83:84:4e:6c:d2:b1:49:40:60:c9:50:2d:
                    bc:f3:13:7f:a3:c6:18:8f:bd:11:ed:28:92:66:6d:
                    74:87:88:09:4d:43:b1:fb:74:99:45:2b:32:59:31:
                    ac:d6:a5:b8:23:17:52:ac:73:e0:de:b0:25:fe:29:
                    5c:da:8c:c4:ed:83:85:0c:6d:d1:75:aa:1d:b2:83:
                    7b:1f:60:91:a0:65:53:d6:a8:7d:38:96:cd:9d:9d:
                    3b:7f:bf:13:55:8d:40:09:5a:5f:c0:47:30:c7:0d:
                    84:5f:ee:a5:d0:35:60:12:9c:da:71:03:7e:55:ce:
                    43:a5:8b:16:9c:da:68:b0:8c:67:92:7a:3a:0a:ba:
                    a0:21:c2:b0:b1:39:99:3c:b9:cd:00:99:07:a4:0d:
                    bf:dd:b4:3b:8a:a7:87:25:b7:53:80:83:29:84:3c:
                    a2:8e:1f:71:3b:27:24:58:f5:b3:99:a6:c2:ec:8c:
                    ad:26:f5:9f:85:b7:bb:65:ac:68:59:ff:9e:f6:1f:
                    f3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4E:59:60:49:12:08:12:A1:59:37:17:1E:CA:CE:D0:EF:2A:F4:F2
            X509v3 Authority Key Identifier:
                keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/sE5ZYEkSCBKhWTcXHsrO0O8q9PI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.251.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:62:1c:03:87:48:ee:09:7e:b0:06:83:2e:c8:c7:a6:47:3c:
         ea:92:b5:6b:21:f9:71:d1:76:86:ee:32:44:13:02:e3:36:13:
         6c:64:f7:9e:57:5e:a2:3f:f4:2e:0d:7f:73:1f:ff:49:fe:80:
         85:d0:33:09:ed:a3:8b:13:1e:8f:e8:74:38:3a:aa:38:b3:e7:
         b5:48:4e:52:e6:d2:75:be:62:57:c8:bd:ea:4d:11:f5:dd:39:
         17:15:2b:f4:04:b3:52:36:b4:21:77:ff:9f:51:56:e7:31:89:
         e8:b7:1c:dc:f3:4c:01:73:c4:d7:42:1d:0e:4e:bb:5a:e8:38:
         ae:ba:3f:42:12:b7:7e:05:8b:3e:97:09:a1:69:51:5e:b3:f0:
         e7:6e:13:a2:ad:f6:0a:34:d8:6c:08:de:7d:2d:54:70:a6:22:
         80:bf:b6:cd:9b:7b:f5:48:f8:da:e0:96:61:f0:cc:93:a2:29:
         43:12:17:ee:b2:11:63:d5:ad:90:7a:5e:8a:de:1e:4a:ec:11:
         38:b3:f4:27:f5:e2:d0:47:bd:52:cb:6e:95:5d:bc:86:dc:9f:
         27:35:8c:08:e0:d4:e7:0a:13:e2:14:7e:83:39:14:e2:fb:90:
         40:26:cf:f5:16:12:5b:06:5f:cf:37:8e:76:10:8d:bd:7b:1f:
         02:43:c8:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYM64zD/Dh5J4Oz5ciYh8t1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTZkNTYwYTA4YTAxM2YzZmUwZTY2ZGFkYWY2ZmQwMmJl
YWY0M2YwHhcNMjIwOTE0MDcyNTExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDRlNTk2MDQ5MTIwODEyYTE1OTM3MTcxZWNhY2VkMGVmMmFmNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3am2w+k39HTa/OnbZygI2VInrr+A
FY6PVj4g0yf5i5WdY+IUGFQX1XA7xQEtiEZ7pLpYpqjyqp+0LW+VQ3mDhE5s0rFJ
QGDJUC288xN/o8YYj70R7SiSZm10h4gJTUOx+3SZRSsyWTGs1qW4IxdSrHPg3rAl
/ilc2ozE7YOFDG3RdaodsoN7H2CRoGVT1qh9OJbNnZ07f78TVY1ACVpfwEcwxw2E
X+6l0DVgEpzacQN+Vc5DpYsWnNposIxnkno6CrqgIcKwsTmZPLnNAJkHpA2/3bQ7
iqeHJbdTgIMphDyijh9xOyckWPWzmabC7IytJvWfhbe7ZaxoWf+e9h/zNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLBOWWBJEggSoVk3Fx7KztDvKvTyMB8GA1UdIwQY
MBaAFC7m1WCgigE/P+Dmba2vb9Ar6vQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2It
NzM0OTVmYzA4ZmM0LzEvc0U1WllFa1NDQktoV1RjWEhzck8wTzhxOVBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2ItNzM0OTVmYzA4ZmM0
LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvvmMA0G
CSqGSIb3DQEBCwUAA4IBAQAeYhwDh0juCX6wBoMuyMemRzzqkrVrIflx0XaG7jJE
EwLjNhNsZPeeV16iP/QuDX9zH/9J/oCF0DMJ7aOLEx6P6HQ4Oqo4s+e1SE5S5tJ1
vmJXyL3qTRH13TkXFSv0BLNSNrQhd/+fUVbnMYnotxzc80wBc8TXQh0OTrta6Diu
uj9CErd+BYs+lwmhaVFes/DnbhOirfYKNNhsCN59LVRwpiKAv7bNm3v1SPja4JZh
8MyToilDEhfushFj1a2Qel6K3h5K7BE4s/Qn9eLQR71Sy26VXbyG3J8nNYwI4NTn
ChPiFH6DORTi+5BAJs/1FhJbBl/PN452EI29ex8CQ8gh
-----END CERTIFICATE-----