Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/cX009kH5D6Prv710IruUMEom1Ww.roa
File:                     cX009kH5D6Prv710IruUMEom1Ww.roa (raw, json)
Hash identifier:          x8fk5nyIRrbuX/eiPwb9EAuha7Bt4UPcCt97AHBTZpo=
Subject key identifier:   71:7D:34:F6:41:F9:0F:A3:EB:BF:BD:74:22:BB:94:30:4A:26:D5:6C
Certificate issuer:       /CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Certificate serial:       018364923B1F3D318B97F610FD1B6A5836A8
Authority key identifier: A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/cX009kH5D6Prv710IruUMEom1Ww.roa
Signing time:             Thu 22 Sep 2022 09:40:48 +0000
ROA not before:           Thu 22 Sep 2022 09:40:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210363
IP address blocks:        212.46.49.0/24 maxlen: 24
                          2a0c:5e80::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:64:92:3b:1f:3d:31:8b:97:f6:10:fd:1b:6a:58:36:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
        Validity
            Not Before: Sep 22 09:40:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=717d34f641f90fa3ebbfbd7422bb94304a26d56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:69:74:c1:11:11:97:75:b0:99:7f:e0:e8:5c:
                    42:f5:39:bf:3f:55:bd:92:db:df:d0:42:b7:f2:10:
                    89:f7:9c:60:2f:29:ef:51:a7:2a:0d:ee:a8:9f:fc:
                    62:a2:35:98:f8:05:7f:d1:01:9f:3a:8e:a8:01:cb:
                    2f:28:13:71:76:dc:1b:ee:e7:31:17:55:69:70:56:
                    3a:69:f5:f3:4d:7f:51:c2:a9:d3:90:f8:c5:a9:72:
                    16:86:20:4d:f0:13:e1:2f:76:ee:9b:fb:b5:1c:3c:
                    66:ed:4d:62:68:b5:e3:d0:2d:de:04:6e:bb:3e:70:
                    0b:e2:5e:38:f7:ff:df:2a:ea:c9:2a:15:72:b8:4f:
                    a8:13:96:80:3d:7c:95:23:66:eb:f6:a7:9a:46:05:
                    1e:95:07:6b:32:7c:60:16:6d:1b:d0:ea:8d:53:6a:
                    d2:29:22:46:eb:35:bb:c2:44:9f:ca:67:0c:d2:b7:
                    fc:bd:fa:1c:8c:3a:68:ee:d1:f0:f1:4a:38:f6:f5:
                    6e:0c:70:70:a8:c5:e2:cc:e7:9e:1f:c4:6f:1d:b9:
                    98:92:e5:8c:38:48:b1:05:ce:6f:1d:77:1e:c5:b4:
                    b3:52:a2:b6:ae:d6:3d:7c:34:61:63:7b:b8:54:19:
                    8d:4a:7b:76:87:6d:50:75:b2:ff:6f:a0:53:9c:60:
                    1f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7D:34:F6:41:F9:0F:A3:EB:BF:BD:74:22:BB:94:30:4A:26:D5:6C
            X509v3 Authority Key Identifier:
                keyid:A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/cX009kH5D6Prv710IruUMEom1Ww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.49.0/24
                IPv6:
                  2a0c:5e80::/29

    Signature Algorithm: sha256WithRSAEncryption
         84:7c:f2:a8:87:63:13:8e:9f:c5:63:6c:ae:a6:0c:d9:33:e8:
         5d:42:23:66:15:1b:27:eb:8b:73:27:3e:48:9e:d0:69:a0:f6:
         4f:e7:06:f4:ad:24:f7:ed:ee:56:00:36:61:e5:18:37:56:6a:
         24:9d:8f:17:97:8a:30:bc:8c:8a:cc:a4:90:35:d1:f4:55:54:
         42:37:1d:e1:4e:df:09:d6:19:0c:25:17:77:d7:c9:10:cd:e0:
         31:44:d7:c3:38:b3:fa:ca:69:0d:af:e6:6c:3e:7e:e9:b3:27:
         5d:2a:a7:5e:2b:c0:bf:30:ec:67:22:df:66:bf:cd:8a:8c:b1:
         b1:ad:6d:1c:01:d3:1a:60:5d:46:4d:72:a9:3c:31:f9:b0:ac:
         be:47:43:82:62:fb:92:8b:14:7b:1b:57:2e:d2:7b:60:f7:43:
         67:ad:39:64:b0:44:d7:cc:04:da:84:db:1f:25:ee:e6:e2:55:
         d1:f2:34:75:aa:84:4e:57:df:91:46:93:c1:e2:3f:68:52:8c:
         5f:4e:c8:f4:b0:af:ed:e3:d8:e8:ba:ec:3c:8a:db:52:c5:d5:
         5d:64:56:10:93:bf:f6:0c:a4:a6:30:d5:97:a1:c2:45:16:70:
         9b:96:da:c6:e2:cf:c8:97:ff:70:b0:84:d9:be:72:30:a4:7d:
         01:84:96:2f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYNkkjsfPTGLl/YQ/RtqWDaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDZkZmZmYWIxZDUxOGMxMzJmNmQ1NmQ4ZDRhMzFkOTA1
OWY0YmYwHhcNMjIwOTIyMDk0MDQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTdkMzRmNjQxZjkwZmEzZWJiZmJkNzQyMmJiOTQzMDRhMjZkNTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2l0wRERl3WwmX/g6FxC9Tm/P1W9
ktvf0EK38hCJ95xgLynvUacqDe6on/xiojWY+AV/0QGfOo6oAcsvKBNxdtwb7ucx
F1VpcFY6afXzTX9RwqnTkPjFqXIWhiBN8BPhL3bum/u1HDxm7U1iaLXj0C3eBG67
PnAL4l449//fKurJKhVyuE+oE5aAPXyVI2br9qeaRgUelQdrMnxgFm0b0OqNU2rS
KSJG6zW7wkSfymcM0rf8vfocjDpo7tHw8Uo49vVuDHBwqMXizOeeH8RvHbmYkuWM
OEixBc5vHXcexbSzUqK2rtY9fDRhY3u4VBmNSnt2h21QdbL/b6BTnGAf8QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHF9NPZB+Q+j67+9dCK7lDBKJtVsMB8GA1UdIwQY
MBaAFKIG3/+rHVGMEy9tVtjUox2QWfS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEt
NjcxYTFmMGFmMDU5LzEvY1gwMDlrSDVENlBydjcxMElydVVNRW9tMVd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mNTkzMWUtMGY4NC00MGJkLWFkMGEtNjcxYTFmMGFmMDU5
LzEvb2diZl82c2RVWXdUTDIxVzJOU2pIWkJaOUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1C4xMA0E
AgACMAcDBQMqDF6AMA0GCSqGSIb3DQEBCwUAA4IBAQCEfPKoh2MTjp/FY2yupgzZ
M+hdQiNmFRsn64tzJz5IntBpoPZP5wb0rST37e5WADZh5Rg3VmoknY8Xl4owvIyK
zKSQNdH0VVRCNx3hTt8J1hkMJRd318kQzeAxRNfDOLP6ymkNr+ZsPn7psyddKqde
K8C/MOxnIt9mv82KjLGxrW0cAdMaYF1GTXKpPDH5sKy+R0OCYvuSixR7G1cu0ntg
90NnrTlksETXzATahNsfJe7m4lXR8jR1qoROV9+RRpPB4j9oUoxfTsj0sK/t49jo
uuw8ittSxdVdZFYQk7/2DKSmMNWXocJFFnCbltrG4s/Il/9wsITZvnIwpH0BhJYv
-----END CERTIFICATE-----