Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/IhcC9D6fj-AvH0IENau0l1KgG04.roa
File:                     IhcC9D6fj-AvH0IENau0l1KgG04.roa (raw, json)
Hash identifier:          PNEF4FNzPI5B0VXedc4U2BV2oznAyNR8RUt99fHfVRM=
Subject key identifier:   22:17:02:F4:3E:9F:8F:E0:2F:1F:42:04:35:AB:B4:97:52:A0:1B:4E
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       01845675C6F5F354093DDB31FD78855E3DA8
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/IhcC9D6fj-AvH0IENau0l1KgG04.roa
Signing time:             Tue 08 Nov 2022 08:57:50 +0000
ROA not before:           Tue 08 Nov 2022 08:57:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39344
IP address blocks:        91.205.196.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:56:75:c6:f5:f3:54:09:3d:db:31:fd:78:85:5e:3d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Nov  8 08:57:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=221702f43e9f8fe02f1f420435abb49752a01b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ef:e5:b8:61:c5:1a:47:87:c8:2a:98:b6:cf:
                    43:85:96:e1:40:69:e1:b1:fc:1e:66:73:99:b9:27:
                    0a:fb:40:1d:cd:5a:04:4f:26:07:05:aa:80:4c:e7:
                    fa:8a:33:ea:bf:d1:d3:66:34:52:03:8a:9f:3c:77:
                    76:70:4a:1c:c3:d3:2c:59:21:5e:0a:b4:da:aa:53:
                    5b:ae:f0:e3:c9:48:ae:42:73:e2:38:cb:68:38:8b:
                    21:a2:de:7a:fb:a5:1e:37:54:bc:27:c9:98:16:b2:
                    25:80:d8:c9:ad:a6:40:36:4b:23:19:5f:b0:1e:db:
                    b8:9f:53:61:7f:6c:66:0d:3a:29:20:03:d6:50:c8:
                    08:6c:f7:14:16:05:43:9f:78:0a:70:c7:53:68:f0:
                    9b:d1:6a:eb:23:1d:ac:d1:de:20:05:73:02:98:03:
                    f6:54:e9:2a:73:cb:dd:66:52:6e:d4:fa:0a:48:42:
                    3a:97:01:d2:f1:8d:57:5e:2f:94:fc:92:b7:09:f7:
                    7b:00:94:c2:26:d9:92:a9:3b:34:bc:a4:4b:f6:b3:
                    4b:41:73:dd:bf:00:01:79:49:bd:a4:95:89:64:45:
                    4c:50:90:62:21:89:cf:e0:64:82:ce:10:fb:bc:dd:
                    79:7b:77:9a:c8:5e:54:af:8c:ed:4c:96:35:f4:b8:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:17:02:F4:3E:9F:8F:E0:2F:1F:42:04:35:AB:B4:97:52:A0:1B:4E
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/IhcC9D6fj-AvH0IENau0l1KgG04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:62:06:c3:b9:a4:68:5f:63:a6:f5:e4:54:45:40:9c:93:5f:
         b2:3a:24:55:a4:52:1c:3d:f6:f6:8c:db:f9:7d:9a:d4:58:78:
         fd:9f:f8:bb:a8:dd:56:5f:80:2e:44:96:16:60:c3:99:d6:5f:
         3a:2a:07:04:56:13:ae:b4:8f:92:2b:b4:9f:0b:61:3c:b8:28:
         fe:50:db:b2:64:74:02:17:7d:b0:07:55:8a:45:11:fd:a3:d8:
         21:a0:d2:8d:4a:71:7c:ee:c2:f1:fc:0f:a5:fd:2f:75:cb:bf:
         74:88:c3:1e:7f:17:3a:50:3f:a6:eb:81:83:30:66:2b:0b:dd:
         94:03:2a:e7:57:09:be:8d:6c:53:c3:20:ce:2f:80:20:02:b4:
         42:cb:8f:a1:21:7c:53:33:33:47:25:2b:26:34:ef:45:9a:b3:
         c1:19:37:d9:45:33:9f:d6:1e:09:14:94:f0:f9:fa:6e:2f:22:
         82:d5:e3:11:dc:22:07:22:97:3f:91:b5:32:f7:d9:6d:3e:1b:
         14:05:34:44:5f:b3:b1:61:5b:28:b1:54:dc:d2:a6:48:10:46:
         65:80:06:8d:a3:44:2e:12:66:16:de:83:2d:87:37:61:aa:e8:
         46:3e:0f:12:db:cd:18:95:78:61:7d:dd:6e:bc:05:f2:82:6c:
         d2:d0:40:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYRWdcb181QJPdsx/XiFXj2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjIxMTA4MDg1NzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjE3MDJmNDNlOWY4ZmUwMmYxZjQyMDQzNWFiYjQ5NzUyYTAxYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO/luGHFGkeHyCqYts9DhZbhQGnh
sfweZnOZuScK+0AdzVoETyYHBaqATOf6ijPqv9HTZjRSA4qfPHd2cEocw9MsWSFe
CrTaqlNbrvDjyUiuQnPiOMtoOIshot56+6UeN1S8J8mYFrIlgNjJraZANksjGV+w
Htu4n1Nhf2xmDTopIAPWUMgIbPcUFgVDn3gKcMdTaPCb0WrrIx2s0d4gBXMCmAP2
VOkqc8vdZlJu1PoKSEI6lwHS8Y1XXi+U/JK3Cfd7AJTCJtmSqTs0vKRL9rNLQXPd
vwABeUm9pJWJZEVMUJBiIYnP4GSCzhD7vN15e3eayF5Ur4ztTJY19Lhj8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCIXAvQ+n4/gLx9CBDWrtJdSoBtOMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvSWhjQzlENmZqLUF2SDBJRU5hdTBsMUtnRzA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW83EMA0G
CSqGSIb3DQEBCwUAA4IBAQAWYgbDuaRoX2Om9eRURUCck1+yOiRVpFIcPfb2jNv5
fZrUWHj9n/i7qN1WX4AuRJYWYMOZ1l86KgcEVhOutI+SK7SfC2E8uCj+UNuyZHQC
F32wB1WKRRH9o9ghoNKNSnF87sLx/A+l/S91y790iMMefxc6UD+m64GDMGYrC92U
AyrnVwm+jWxTwyDOL4AgArRCy4+hIXxTMzNHJSsmNO9FmrPBGTfZRTOf1h4JFJTw
+fpuLyKC1eMR3CIHIpc/kbUy99ltPhsUBTREX7OxYVsosVTc0qZIEEZlgAaNo0Qu
EmYW3oMthzdhquhGPg8S280YlXhhfd1uvAXygmzS0EAm
-----END CERTIFICATE-----