Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/1-PKIafoSaylNYs2v2r-rx2McdlM.roa
File:                     1-PKIafoSaylNYs2v2r-rx2McdlM.roa (raw, json)
Hash identifier:          uwNQiBFUm3/k9oZUbZp7mC8eZ3i5Bc7CeWXFhhb2i20=
Subject key identifier:   F8:F2:88:69:FA:12:6B:29:4D:62:CD:AF:DA:BF:AB:C7:63:1C:76:53
Certificate issuer:       /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial:       1623CFC5
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/1-PKIafoSaylNYs2v2r-rx2McdlM.roa
Signing time:             Sat 01 Jan 2022 15:02:50 +0000
ROA not before:           Sat 01 Jan 2022 15:02:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60129
IP address blocks:        185.249.240.0/22 maxlen: 22
                          185.56.24.0/22 maxlen: 22
                          2a0b:4780::/29 maxlen: 29
                          2a02:4fe0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371445701 (0x1623cfc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
        Validity
            Not Before: Jan  1 15:02:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8f28869fa126b294d62cdafdabfabc7631c7653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:ce:9a:d9:e0:fd:96:87:a2:b8:10:7c:d6:
                    45:ec:65:fc:9b:3c:fc:20:dc:6b:37:9b:73:b5:d4:
                    2b:0c:dc:fc:c2:4b:65:0c:c3:ae:f5:e9:13:52:5b:
                    26:93:07:cd:62:ad:7f:94:2b:b8:2e:f4:92:c5:95:
                    4c:71:24:67:7a:f5:ed:d2:3b:65:a1:ad:fe:40:8c:
                    e4:33:86:aa:96:9b:8f:d6:6a:d0:88:21:64:c5:cb:
                    38:a9:86:7e:c2:85:a6:08:50:40:6f:18:7c:e6:86:
                    bc:e6:97:4e:6b:40:42:eb:5c:55:13:9a:c2:4e:60:
                    06:dc:b6:24:b5:4a:ce:ea:2c:9e:fb:74:8f:f6:0f:
                    64:84:63:80:3c:ad:38:e4:4e:96:3a:87:c6:03:c1:
                    90:18:a8:49:9c:38:61:49:5c:0a:51:bc:10:41:b4:
                    45:9d:12:d9:80:7c:c3:04:22:9a:81:bf:5f:8d:5b:
                    f4:c1:06:f3:2e:fd:4a:74:fe:58:be:8c:33:a2:d5:
                    d4:47:2f:12:20:4f:87:ec:ae:56:ce:4f:6b:d9:0a:
                    26:22:41:c8:81:52:ae:e7:ed:2c:6f:61:0c:37:0f:
                    b3:5e:12:51:8f:9a:bd:36:e4:ae:44:d2:f9:33:7b:
                    a0:e2:99:e4:ec:08:b4:ee:45:05:63:b4:c2:d2:ea:
                    4f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F2:88:69:FA:12:6B:29:4D:62:CD:AF:DA:BF:AB:C7:63:1C:76:53
            X509v3 Authority Key Identifier:
                keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/1-PKIafoSaylNYs2v2r-rx2McdlM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.56.24.0/22
                  185.249.240.0/22
                IPv6:
                  2a02:4fe0::/32
                  2a0b:4780::/29

    Signature Algorithm: sha256WithRSAEncryption
         09:5a:a4:d8:b8:df:db:21:d0:1b:b8:6b:d0:bb:29:36:d3:6d:
         37:e9:3b:e8:55:02:c5:ba:11:7a:70:8b:20:c9:c2:15:6f:8f:
         03:36:7a:ea:eb:53:f4:38:3e:c2:aa:00:14:b1:fc:31:f3:6e:
         d4:eb:40:cb:30:5f:fc:97:37:3c:3d:f8:51:c6:44:af:8d:ae:
         3c:74:ba:3b:f8:a4:16:53:7c:6c:4e:c8:72:dc:e7:30:11:fa:
         c6:9c:47:3b:50:2b:ab:ba:16:7f:d3:1d:24:d6:a2:95:a9:dc:
         cc:ea:45:55:d0:3a:a4:41:c2:c7:4f:1f:e6:47:e4:12:16:5a:
         bb:f7:e6:39:6f:46:e1:2b:9c:7b:78:0e:ec:12:00:cb:9c:f2:
         ae:b2:f2:e6:52:4c:0f:8d:d1:72:5d:31:26:8d:2c:35:47:0e:
         ae:67:04:2c:b1:35:2c:75:f8:56:9c:4c:b8:cf:53:01:0d:6a:
         38:ca:20:86:4a:20:7b:10:64:fa:b9:68:6e:ac:03:05:af:d7:
         95:6d:cd:5b:ce:a7:fa:0b:f0:ed:e1:b7:43:05:4b:ba:a0:45:
         53:50:ac:0a:42:fe:d5:48:8f:14:7c:c2:fa:56:fb:db:7b:ba:
         72:22:e1:79:fc:a6:da:34:ef:83:75:13:a8:ef:bb:98:90:26:
         a9:6f:95:8a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIEFiPPxTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MTc4NzAwZjE2MTllYzFjZDM0ZDk3MDAzOTIxNTNlYzRiNjIzMWZjMB4XDTIyMDEw
MTE1MDI1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjhmMjg4NjlmYTEy
NmIyOTRkNjJjZGFmZGFiZmFiYzc2MzFjNzY1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALgozprZ4P2Wh6K4EHzWRexl/Js8/CDcazebc7XUKwzc/MJL
ZQzDrvXpE1JbJpMHzWKtf5QruC70ksWVTHEkZ3r17dI7ZaGt/kCM5DOGqpabj9Zq
0IghZMXLOKmGfsKFpghQQG8YfOaGvOaXTmtAQutcVROawk5gBty2JLVKzuosnvt0
j/YPZIRjgDytOOROljqHxgPBkBioSZw4YUlcClG8EEG0RZ0S2YB8wwQimoG/X41b
9MEG8y79SnT+WL6MM6LV1EcvEiBPh+yuVs5Pa9kKJiJByIFSruftLG9hDDcPs14S
UY+avTbkrkTS+TN7oOKZ5OwItO5FBWO0wtLqT20CAwEAAaOCAiYwggIiMB0GA1Ud
DgQWBBT48ohp+hJrKU1iza/av6vHYxx2UzAfBgNVHSMEGDAWgBRxeHAPFhnsHNNN
lwA5IVPsS2Ix/DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NYaHdEeFlaN0J6VFRaY0FPU0ZUN0V0aU1mdy5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDAvYjU4NWFjLTg2MTgtNDE1YS04N2VjLWQxZDhkYjE0OGVjMi8x
LzEtUEtJYWZvU2F5bE5ZczJ2MnItcngyTWNkbE0ucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQw
L2I1ODVhYy04NjE4LTQxNWEtODdlYy1kMWQ4ZGIxNDhlYzIvMS9jWGh3RHhZWjdC
elRUWmNBT1NGVDdFdGlNZncuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
OwYIKwYBBQUHAQcBAf8ELDAqMBIEAgABMAwDBAK5OBgDBAK5+fAwFAQCAAIwDgMF
ACoCT+ADBQMqC0eAMA0GCSqGSIb3DQEBCwUAA4IBAQAJWqTYuN/bIdAbuGvQuyk2
02036TvoVQLFuhF6cIsgycIVb48DNnrq61P0OD7CqgAUsfwx827U60DLMF/8lzc8
PfhRxkSvja48dLo7+KQWU3xsTshy3OcwEfrGnEc7UCuruhZ/0x0k1qKVqdzM6kVV
0DqkQcLHTx/mR+QSFlq79+Y5b0bhK5x7eA7sEgDLnPKusvLmUkwPjdFyXTEmjSw1
Rw6uZwQssTUsdfhWnEy4z1MBDWo4yiCGSiB7EGT6uWhurAMFr9eVbc1bzqf6C/Dt
4bdDBUu6oEVTUKwKQv7VSI8UfML6Vvvbe7pyIuF5/KbaNO+DdROo77uYkCapb5WK
-----END CERTIFICATE-----