Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/9DrtR-RLf6U1lcsrvb4Y18PzVYg.roa
File:                     9DrtR-RLf6U1lcsrvb4Y18PzVYg.roa (raw, json)
Hash identifier:          IlAvLRyQ/YbdfZ7Fle8hXc1h6FGaOl5OwgLdmROZJM4=
Subject key identifier:   F4:3A:ED:47:E4:4B:7F:A5:35:95:CB:2B:BD:BE:18:D7:C3:F3:55:88
Certificate issuer:       /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial:       0DEEA3B4
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/9DrtR-RLf6U1lcsrvb4Y18PzVYg.roa
Signing time:             Sat 01 Jan 2022 08:00:53 +0000
ROA not before:           Sat 01 Jan 2022 08:00:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209090
IP address blocks:        80.67.186.0/24 maxlen: 24
                          2001:913:5000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233743284 (0xdeea3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
        Validity
            Not Before: Jan  1 08:00:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f43aed47e44b7fa53595cb2bbdbe18d7c3f35588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:ac:4a:d5:8c:5a:4e:83:8e:e1:71:9b:c7:
                    54:57:f9:32:83:57:f6:6b:28:76:5c:42:79:3d:73:
                    8a:50:20:24:8a:e5:c8:86:2a:78:42:86:64:e3:f5:
                    f3:60:de:49:da:f9:1c:5a:fa:44:76:4e:67:22:a1:
                    e5:93:d0:84:43:d5:d3:90:bb:ce:ba:26:6d:51:cd:
                    35:1a:f4:da:38:25:0d:99:b9:64:b4:c4:9d:cf:56:
                    c2:60:e1:fb:4e:ef:58:cb:2f:29:fe:ee:02:4f:77:
                    48:88:cf:c5:19:c4:ce:ff:d6:da:ad:fd:f8:cf:00:
                    e7:bd:1b:85:d2:ac:42:3a:70:3e:56:62:ea:e9:0a:
                    c5:66:a0:f3:ba:40:84:66:d5:5a:1d:28:84:0a:56:
                    30:c4:79:e7:53:3e:48:dd:13:4b:b4:24:cb:17:7f:
                    55:fa:42:ae:43:b6:96:ba:f6:cc:55:71:49:1f:f2:
                    e1:ab:38:1f:c2:5e:69:c5:fc:3f:41:06:37:c6:e1:
                    5c:f9:6b:d7:e3:b0:1c:f2:4a:63:10:31:e3:51:aa:
                    6d:5d:ab:a3:55:ee:9c:a3:6a:d0:44:95:ad:8c:79:
                    8b:5d:03:68:87:f7:ef:05:c1:e2:1d:f2:d8:40:88:
                    3c:ab:08:e1:14:17:fe:1b:a3:a5:3b:50:e6:19:7e:
                    28:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3A:ED:47:E4:4B:7F:A5:35:95:CB:2B:BD:BE:18:D7:C3:F3:55:88
            X509v3 Authority Key Identifier:
                keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/9DrtR-RLf6U1lcsrvb4Y18PzVYg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.67.186.0/24
                IPv6:
                  2001:913:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         16:c4:8c:18:1f:e3:ad:b0:5e:08:2e:2a:b9:13:59:12:53:a8:
         a1:41:bf:dd:df:9d:e4:9b:64:fb:b6:32:78:8b:9e:21:b6:19:
         c0:49:48:9e:70:46:65:02:44:b8:10:49:9e:6a:1d:3c:b2:b5:
         97:ba:0e:1d:60:15:f9:29:a5:8d:94:a4:64:b6:0f:1f:fe:bb:
         1d:da:98:33:47:89:8a:59:04:08:19:12:4d:4b:73:18:b3:23:
         40:a6:e9:b6:ab:3d:05:8a:65:e7:4b:49:21:5e:1d:f7:0b:c4:
         eb:94:9f:c1:5e:f4:15:07:3e:29:31:09:8a:d8:6d:2b:b7:c0:
         9b:10:7c:a6:07:ec:46:70:60:17:47:72:70:c1:18:78:58:6b:
         07:2a:6a:80:58:45:ff:4d:6c:95:bd:9b:7f:3e:1e:d5:df:d8:
         3e:4a:0b:6d:5f:91:7a:da:c1:26:05:a5:9b:cd:dc:0d:45:60:
         19:e5:c5:c2:1e:54:02:bb:6c:9f:d6:8f:f2:33:4c:87:af:74:
         d1:5c:5c:61:5f:72:a6:20:f8:58:60:92:37:fe:d0:c7:8c:28:
         b7:8c:21:86:48:78:ba:e4:8b:7c:2a:e0:2f:e0:50:96:bf:99:
         72:60:59:96:9d:0c:02:66:8b:1a:31:8b:04:78:e9:4a:4e:d0:
         87:d7:2b:62
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIEDe6jtDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MmVkMmZiYjcyMTNmYmYzMmFkNGMwODdmOGIwYjIyY2VjZWY0ZmVhMB4XDTIyMDEw
MTA4MDA1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjQzYWVkNDdlNDRi
N2ZhNTM1OTVjYjJiYmRiZTE4ZDdjM2YzNTU4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMmqrErVjFpOg47hcZvHVFf5MoNX9msodlxCeT1zilAgJIrl
yIYqeEKGZOP182DeSdr5HFr6RHZOZyKh5ZPQhEPV05C7zrombVHNNRr02jglDZm5
ZLTEnc9WwmDh+07vWMsvKf7uAk93SIjPxRnEzv/W2q39+M8A570bhdKsQjpwPlZi
6ukKxWag87pAhGbVWh0ohApWMMR551M+SN0TS7Qkyxd/VfpCrkO2lrr2zFVxSR/y
4as4H8JeacX8P0EGN8bhXPlr1+OwHPJKYxAx41GqbV2ro1XunKNq0ESVrYx5i10D
aIf37wXB4h3y2ECIPKsI4RQX/hujpTtQ5hl+KN0CAwEAAaOCAhkwggIVMB0GA1Ud
DgQWBBT0Ou1H5Et/pTWVyyu9vhjXw/NViDAfBgNVHSMEGDAWgBRy7S+7chP78yrU
wIf4sLIs7O9P6jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2N1MHZ1M0lULV9NcTFNQ0gtTEN5TE96dlQtby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2MvZTVhODkyLTIzZjUtNDlmYS1iNmE5LWE2NTIzM2IzZTk3NS8x
LzlEcnRSLVJMZjZVMWxjc3J2YjRZMThQelZZZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Mv
ZTVhODkyLTIzZjUtNDlmYS1iNmE5LWE2NTIzM2IzZTk3NS8xL2N1MHZ1M0lULV9N
cTFNQ0gtTEN5TE96dlQtby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAv
BggrBgEFBQcBBwEB/wQgMB4wDAQCAAEwBgMEAFBDujAOBAIAAjAIAwYEIAEJE1Aw
DQYJKoZIhvcNAQELBQADggEBABbEjBgf462wXgguKrkTWRJTqKFBv93fneSbZPu2
MniLniG2GcBJSJ5wRmUCRLgQSZ5qHTyytZe6Dh1gFfkppY2UpGS2Dx/+ux3amDNH
iYpZBAgZEk1LcxizI0Cm6barPQWKZedLSSFeHfcLxOuUn8Fe9BUHPikxCYrYbSu3
wJsQfKYH7EZwYBdHcnDBGHhYawcqaoBYRf9NbJW9m38+HtXf2D5KC21fkXrawSYF
pZvN3A1FYBnlxcIeVAK7bJ/Wj/IzTIevdNFcXGFfcqYg+Fhgkjf+0MeMKLeMIYZI
eLrki3wq4C/gUJa/mXJgWZadDAJmixoxiwR46UpO0IfXK2I=
-----END CERTIFICATE-----