Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/Dc3NhASveqW9-09nv70OAcYNCTM.roa
File:                     Dc3NhASveqW9-09nv70OAcYNCTM.roa (raw, json)
Hash identifier:          IxTgUCAwwh5CmMssG31ZD/S5tNVNXc6o+zsrA6nPXxM=
Subject key identifier:   0D:CD:CD:84:04:AF:7A:A5:BD:FB:4F:67:BF:BD:0E:01:C6:0D:09:33
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       17286729
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/Dc3NhASveqW9-09nv70OAcYNCTM.roa
Signing time:             Tue 29 Mar 2022 13:44:40 +0000
ROA not before:           Tue 29 Mar 2022 13:44:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     52011
IP address blocks:        2a00:16d8:52::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388523817 (0x17286729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Mar 29 13:44:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0dcdcd8404af7aa5bdfb4f67bfbd0e01c60d0933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:6d:4e:c2:af:35:dc:e4:fb:5b:ee:cb:ae:
                    91:d1:bd:99:86:ea:61:11:4c:71:6d:51:48:a5:48:
                    0e:d8:43:c7:ad:dd:31:71:8c:35:12:f7:00:86:38:
                    dc:1c:1a:c2:47:0e:b1:7d:a5:fd:53:2f:40:6e:83:
                    5e:2a:1b:b2:d3:78:52:2b:d9:c3:cb:6e:90:81:f7:
                    19:dc:15:c3:32:7e:6c:33:5b:c6:ee:28:af:3c:a2:
                    09:44:0f:49:d1:95:13:bb:e2:84:5b:df:67:9c:b0:
                    4f:c2:e2:c5:31:48:39:6a:be:40:5c:b4:01:26:39:
                    2b:14:02:b2:e1:e9:53:be:da:06:f8:0e:e5:9a:f1:
                    e9:78:64:c1:0d:54:3a:35:fe:b2:ff:e6:f4:10:e1:
                    f4:61:3a:2e:e3:b3:56:66:fd:15:be:e4:b6:a6:5c:
                    bf:9e:00:86:7e:b7:25:ad:b9:43:38:bd:aa:73:8a:
                    07:c4:15:d2:a7:bc:53:1f:d5:f3:5a:0c:a2:3c:e4:
                    cd:69:61:4c:7b:c6:d3:0c:03:79:47:ff:c2:49:ce:
                    5b:2b:c8:4e:19:ce:33:26:ab:d7:4e:cd:c6:91:b8:
                    5d:d7:f1:31:40:47:ba:10:53:aa:ce:ed:03:4f:57:
                    dc:aa:b4:32:3b:93:cb:00:46:90:b1:7d:35:f5:3a:
                    61:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CD:CD:84:04:AF:7A:A5:BD:FB:4F:67:BF:BD:0E:01:C6:0D:09:33
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/Dc3NhASveqW9-09nv70OAcYNCTM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:16d8:52::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:61:5e:c6:75:29:3e:a7:99:6c:8e:0d:04:61:9e:7c:cb:14:
         c9:3f:b6:a5:d5:46:26:70:3b:0c:9f:b5:19:3f:54:3f:85:34:
         fd:5a:21:b1:6a:87:ce:bd:a8:c0:d0:34:b3:dc:75:11:1e:21:
         5b:89:de:d9:fa:c1:5a:f7:ba:b8:d8:96:c7:f7:91:2d:cb:27:
         71:8a:89:d3:59:57:ba:ae:8d:81:9a:30:04:26:36:7f:c5:51:
         d7:3b:83:9b:30:8a:08:e7:50:db:7d:20:46:df:43:0b:e5:21:
         da:a9:f0:b4:bb:c4:2e:7a:ec:f5:56:c2:0e:65:d0:54:ce:ce:
         01:42:7f:24:c6:1c:22:0f:8e:ed:6d:a3:02:93:da:18:f4:da:
         56:68:ca:29:a7:6c:a9:48:b3:97:f9:34:23:c7:d3:10:b6:18:
         5f:44:37:98:38:61:a7:64:d3:9f:79:cf:f1:06:d8:ca:53:66:
         b5:e5:d2:90:1c:a7:92:68:b6:bc:04:34:0f:b6:b3:d9:b0:ee:
         b0:ee:4a:82:5f:90:a0:7d:52:c3:d4:67:63:49:cd:58:65:ef:
         34:1c:5d:87:44:17:db:fd:31:d1:2f:53:36:ad:aa:43:53:4a:
         75:46:54:6a:55:3d:39:d0:21:b4:d0:e8:a4:9e:b5:3b:37:cd:
         6c:d5:61:e7
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIEFyhnKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZGI5MjZmOGM2MDNhYWI3OWNiNDZhODgzYmY2MzI1NjRhM2ZhYWJmMB4XDTIyMDMy
OTEzNDQ0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGRjZGNkODQwNGFm
N2FhNWJkZmI0ZjY3YmZiZDBlMDFjNjBkMDkzMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALN9bU7CrzXc5Ptb7suukdG9mYbqYRFMcW1RSKVIDthDx63d
MXGMNRL3AIY43BwawkcOsX2l/VMvQG6DXiobstN4UivZw8tukIH3GdwVwzJ+bDNb
xu4orzyiCUQPSdGVE7vihFvfZ5ywT8LixTFIOWq+QFy0ASY5KxQCsuHpU77aBvgO
5Zrx6XhkwQ1UOjX+sv/m9BDh9GE6LuOzVmb9Fb7ktqZcv54Ahn63Ja25Qzi9qnOK
B8QV0qe8Ux/V81oMojzkzWlhTHvG0wwDeUf/wknOWyvIThnOMyar107NxpG4Xdfx
MUBHuhBTqs7tA09X3Kq0MjuTywBGkLF9NfU6YS8CAwEAAaOCAgwwggIIMB0GA1Ud
DgQWBBQNzc2EBK96pb37T2e/vQ4Bxg0JMzAfBgNVHSMEGDAWgBTtuSb4xgOqt5y0
aog79jJWSj+qvzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzdia20tTVlEcXJlY3RHcUlPX1l5VmtvX3FyOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvNTZjOTM0LWNmMTQtNGE0Zi1hZTdjLTNiZDE5NzhiZjJmNi8x
L0RjM05oQVN2ZXFXOS0wOW52NzBPQWNZTkNUTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
NTZjOTM0LWNmMTQtNGE0Zi1hZTdjLTNiZDE5NzhiZjJmNi8xLzdia20tTVlEcXJl
Y3RHcUlPX1l5VmtvX3FyOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoAFtgAUjANBgkqhkiG9w0BAQsF
AAOCAQEAF2FexnUpPqeZbI4NBGGefMsUyT+2pdVGJnA7DJ+1GT9UP4U0/VohsWqH
zr2owNA0s9x1ER4hW4ne2frBWve6uNiWx/eRLcsncYqJ01lXuq6NgZowBCY2f8VR
1zuDmzCKCOdQ230gRt9DC+Uh2qnwtLvELnrs9VbCDmXQVM7OAUJ/JMYcIg+O7W2j
ApPaGPTaVmjKKadsqUizl/k0I8fTELYYX0Q3mDhhp2TTn3nP8QbYylNmteXSkByn
kmi2vAQ0D7az2bDusO5Kgl+QoH1Sw9RnY0nNWGXvNBxdh0QX2/0x0S9TNq2qQ1NK
dUZUalU9OdAhtNDopJ61OzfNbNVh5w==
-----END CERTIFICATE-----