Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/dhZGgIOEk95mb2T2FsgZjwdtS8Y.roa
File:                     dhZGgIOEk95mb2T2FsgZjwdtS8Y.roa (raw, json)
Hash identifier:          AnqiA2GG8eAzLQAtKGswtu/+h/gEcwneLfKvPoMLVJM=
Subject key identifier:   76:16:46:80:83:84:93:DE:66:6F:64:F6:16:C8:19:8F:07:6D:4B:C6
Certificate issuer:       /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial:       03393F1A
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/dhZGgIOEk95mb2T2FsgZjwdtS8Y.roa
Signing time:             Sat 01 Jan 2022 03:51:17 +0000
ROA not before:           Sat 01 Jan 2022 03:51:17 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209271
IP address blocks:        176.119.220.0/24 maxlen: 24
                          2a0a:ac0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54083354 (0x3393f1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Validity
            Not Before: Jan  1 03:51:17 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=76164680838493de666f64f616c8198f076d4bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:c7:40:5e:4f:ce:6a:95:dd:89:2d:1f:07:
                    0f:28:08:46:f5:7e:b0:dd:4a:3f:fb:bf:40:19:fc:
                    84:6c:1d:8e:f2:bb:83:20:38:7c:07:dd:e6:39:cb:
                    ec:02:80:29:8d:73:00:e2:ba:d9:cc:ea:94:15:3f:
                    e3:b3:fa:d5:b1:4e:36:b5:8b:54:87:ab:b3:32:2b:
                    72:9f:45:39:c7:01:d6:b2:48:c4:c4:cb:41:82:43:
                    66:7a:4f:37:e3:2f:93:51:d4:b7:32:2e:7f:9d:34:
                    75:40:e1:7d:c2:29:ef:9e:5b:59:8d:26:00:91:e0:
                    16:f3:4f:4c:82:89:b0:21:0b:db:a5:07:ed:af:5d:
                    e6:d7:57:7c:bb:bc:cc:15:db:df:a5:39:cc:7b:5b:
                    36:c2:46:8d:43:cc:1a:a2:cb:34:a5:3e:1a:c4:5e:
                    21:a8:cb:1b:29:f9:20:47:e8:cf:08:57:c7:c9:35:
                    51:01:a3:8e:c8:42:87:f8:3c:83:cf:bb:6c:4a:72:
                    3b:ce:77:8a:8f:54:f0:4d:1b:e3:84:b8:ae:7d:97:
                    84:60:c1:fa:f0:87:d7:c4:ae:38:b6:fe:70:0e:35:
                    56:af:31:a2:63:ca:c8:06:a6:ec:75:f2:0f:9e:30:
                    f7:58:68:21:a1:77:f2:67:b8:65:7b:91:f2:08:25:
                    8b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:16:46:80:83:84:93:DE:66:6F:64:F6:16:C8:19:8F:07:6D:4B:C6
            X509v3 Authority Key Identifier:
                keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/dhZGgIOEk95mb2T2FsgZjwdtS8Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.119.220.0/24
                IPv6:
                  2a0a:ac0::/29

    Signature Algorithm: sha256WithRSAEncryption
         5e:ff:30:4c:2b:f4:e1:e8:1f:30:2d:f7:ff:a2:8c:82:6a:5b:
         99:8d:78:95:47:b5:16:9b:21:e8:41:bf:7d:a3:42:82:30:c1:
         96:2b:1c:f3:74:16:79:f5:bd:fb:e7:11:b7:88:52:02:7f:c2:
         40:f4:6f:75:2b:02:23:50:58:d4:ac:d1:1c:34:7c:4b:65:4d:
         21:d2:d6:68:b9:78:33:fb:07:eb:db:f2:70:1a:42:5f:a5:dc:
         2c:cf:20:33:e0:8e:bf:95:38:a0:ce:29:8f:f9:e7:80:37:34:
         54:88:64:8b:6b:c1:dd:a9:61:65:4f:de:07:8f:e1:85:ae:d2:
         42:97:61:04:df:e3:a8:5f:ba:e9:c2:b8:d8:f1:71:3f:ce:96:
         ad:42:cd:65:22:66:03:0b:11:e1:77:d8:54:4b:e1:3a:2e:70:
         52:0b:04:45:92:3c:fd:eb:a6:9c:94:a2:c3:85:7a:45:2a:cc:
         6e:52:61:8c:06:6c:3a:f8:7b:52:f8:1a:2d:69:f2:58:de:9a:
         46:34:b3:6b:0c:b2:c6:59:7d:8a:70:f1:ee:5e:f7:6f:92:c0:
         c2:d6:48:e4:ca:da:41:a6:4a:07:37:86:df:d5:20:62:50:d9:
         8c:64:ea:28:fb:07:84:e8:6c:e5:3f:73:dd:d7:54:c8:eb:be:
         b0:21:d5:d0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAzk/GjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
NTBkNGM1NzFkOGJmYmZkZDhmYTNhMTcwZjk5ZmIzYWZhYjQxMWQxMB4XDTIyMDEw
MTAzNTExN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzYxNjQ2ODA4Mzg0
OTNkZTY2NmY2NGY2MTZjODE5OGYwNzZkNGJjNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALxkx0BeT85qld2JLR8HDygIRvV+sN1KP/u/QBn8hGwdjvK7
gyA4fAfd5jnL7AKAKY1zAOK62czqlBU/47P61bFONrWLVIerszIrcp9FOccB1rJI
xMTLQYJDZnpPN+Mvk1HUtzIuf500dUDhfcIp755bWY0mAJHgFvNPTIKJsCEL26UH
7a9d5tdXfLu8zBXb36U5zHtbNsJGjUPMGqLLNKU+GsReIajLGyn5IEfozwhXx8k1
UQGjjshCh/g8g8+7bEpyO853io9U8E0b44S4rn2XhGDB+vCH18SuOLb+cA41Vq8x
omPKyAam7HXyD54w91hoIaF38me4ZXuR8ggli8MCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBR2FkaAg4ST3mZvZPYWyBmPB21LxjAfBgNVHSMEGDAWgBRVDUxXHYv7/dj6
OhcPmfs6+rQR0TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1ZRMU1WeDJMLV8zWS1qb1hENW43T3ZxMEVkRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDUvNTdjZDU2LTdiZWMtNDBmMS1iZjcyLTNkNDZjYWY1NTczOC8x
L2RoWkdnSU9Fazk1bWIyVDJGc2daandkdFM4WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUv
NTdjZDU2LTdiZWMtNDBmMS1iZjcyLTNkNDZjYWY1NTczOC8xL1ZRMU1WeDJMLV8z
WS1qb1hENW43T3ZxMEVkRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALB33DANBAIAAjAHAwUDKgoKwDAN
BgkqhkiG9w0BAQsFAAOCAQEAXv8wTCv04egfMC33/6KMgmpbmY14lUe1Fpsh6EG/
faNCgjDBlisc83QWefW9++cRt4hSAn/CQPRvdSsCI1BY1KzRHDR8S2VNIdLWaLl4
M/sH69vycBpCX6XcLM8gM+COv5U4oM4pj/nngDc0VIhki2vB3alhZU/eB4/hha7S
QpdhBN/jqF+66cK42PFxP86WrULNZSJmAwsR4XfYVEvhOi5wUgsERZI8/eumnJSi
w4V6RSrMblJhjAZsOvh7UvgaLWnyWN6aRjSzawyyxll9inDx7l73b5LAwtZI5Mra
QaZKBzeG39UgYlDZjGTqKPsHhOhs5T9z3ddUyOu+sCHV0A==
-----END CERTIFICATE-----