Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/xFJ0Y2VySukBCAdunZymQ152Y14.roa
File:                     xFJ0Y2VySukBCAdunZymQ152Y14.roa (raw, json)
Hash identifier:          bH2IGaDKKky8rVweN4gSxD+3ST/oVZMGrAgmlPFAEug=
Subject key identifier:   C4:52:74:63:65:72:4A:E9:01:08:07:6E:9D:9C:A6:43:5E:76:63:5E
Certificate issuer:       /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial:       05DD962D
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/xFJ0Y2VySukBCAdunZymQ152Y14.roa
Signing time:             Sat 01 Jan 2022 10:54:40 +0000
ROA not before:           Sat 01 Jan 2022 10:54:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     20570
IP address blocks:        194.127.208.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98407981 (0x5dd962d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
        Validity
            Not Before: Jan  1 10:54:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c452746365724ae90108076e9d9ca6435e76635e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:34:3d:44:bc:31:36:b1:36:a9:79:e4:71:
                    1e:9b:12:83:9e:50:4a:d2:f0:a3:2c:00:f2:f1:9d:
                    4f:c4:4e:d3:3e:12:82:a8:9a:6c:c7:65:d7:0c:1d:
                    2f:a6:b1:77:bb:05:ba:75:44:c0:87:cb:86:1f:45:
                    73:50:7a:28:11:0f:08:c2:47:7d:73:e5:5c:d2:dc:
                    1b:45:3b:41:96:3d:00:16:ad:0c:b2:0e:0e:b4:c6:
                    29:6a:cc:1b:59:df:4b:7e:d5:b8:79:c9:ca:85:37:
                    b1:b3:7e:6d:e6:cd:ac:e1:c9:ae:70:97:5c:83:6b:
                    fb:44:48:48:fa:32:75:57:da:58:cb:9a:44:35:97:
                    e7:18:41:25:76:a9:44:2b:a1:bd:79:ac:d9:09:c2:
                    10:93:05:87:56:37:f4:f8:a4:bc:89:50:67:2e:f5:
                    01:77:4e:ec:98:0d:f2:59:54:fb:27:fd:79:3e:87:
                    7d:74:2e:a6:e1:fb:d6:6a:68:30:0d:a8:87:9f:5a:
                    04:84:85:d3:be:40:bf:cd:99:ba:7d:df:44:47:a0:
                    09:08:23:7c:31:4e:03:f1:11:43:61:34:17:d9:87:
                    ae:c4:7d:aa:f4:56:c1:8f:c4:76:61:bd:9e:d2:ce:
                    d7:7e:a1:b9:83:76:81:84:46:03:7b:11:c7:3b:9a:
                    fc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:52:74:63:65:72:4A:E9:01:08:07:6E:9D:9C:A6:43:5E:76:63:5E
            X509v3 Authority Key Identifier:
                keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/xFJ0Y2VySukBCAdunZymQ152Y14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.127.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:ae:58:af:37:9a:57:bc:ae:8b:4f:c8:71:05:9a:48:7e:1e:
         94:ca:ad:6b:4f:03:93:18:be:2e:a1:e6:21:bc:cd:d3:9f:c5:
         43:3f:6f:22:d8:d5:d2:85:b1:80:aa:57:eb:ec:8a:51:08:e3:
         ae:80:16:7e:75:a5:4e:f9:a2:33:c4:a9:40:55:90:ae:86:e8:
         10:97:a7:1c:0e:fd:b4:11:42:31:93:f8:6b:d0:ae:ba:64:fb:
         a9:39:50:04:7c:f7:e6:db:96:b7:e5:e4:56:bf:0d:99:64:c4:
         21:8c:36:52:74:5f:c9:2d:29:1a:78:28:7a:c9:3e:b4:1f:fa:
         6b:a6:b9:b2:a9:bc:74:15:76:f5:ec:23:51:a3:37:8b:1d:2b:
         8c:58:40:ce:1a:74:24:9d:1e:5d:48:b1:5e:42:1b:6f:b2:7d:
         f3:20:7e:f0:df:b1:3c:da:b0:27:df:73:30:49:ea:b1:75:11:
         a3:37:52:b0:a0:bf:61:c9:68:9b:3d:0d:77:e4:0a:a9:42:e9:
         99:e6:74:ad:a0:e6:f3:5e:bf:11:79:dd:25:50:f8:3e:4f:7f:
         ac:86:8f:00:d4:ba:a3:3a:72:8d:bb:31:12:78:1f:66:91:32:
         b1:54:b7:2d:ca:3b:ea:f4:39:57:c7:c1:d2:f5:6b:72:9f:01:
         c5:06:16:36
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBd2WLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
MWEwNmM2YzEwOGU5NDE5YjJjZGIyMWQ0OGI0OWE2YmJkNmMxNmRmMB4XDTIyMDEw
MTEwNTQ0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzQ1Mjc0NjM2NTcy
NGFlOTAxMDgwNzZlOWQ5Y2E2NDM1ZTc2NjM1ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKZjND1EvDE2sTapeeRxHpsSg55QStLwoywA8vGdT8RO0z4S
gqiabMdl1wwdL6axd7sFunVEwIfLhh9Fc1B6KBEPCMJHfXPlXNLcG0U7QZY9ABat
DLIODrTGKWrMG1nfS37VuHnJyoU3sbN+bebNrOHJrnCXXINr+0RISPoydVfaWMua
RDWX5xhBJXapRCuhvXms2QnCEJMFh1Y39PikvIlQZy71AXdO7JgN8llU+yf9eT6H
fXQupuH71mpoMA2oh59aBISF075Av82Zun3fREegCQgjfDFOA/ERQ2E0F9mHrsR9
qvRWwY/EdmG9ntLO136huYN2gYRGA3sRxzua/EMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTEUnRjZXJK6QEIB26dnKZDXnZjXjAfBgNVHSMEGDAWgBTxoGxsEI6UGbLN
sh1ItJprvWwW3zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzhhQnNiQkNPbEJteXpiSWRTTFNhYTcxc0Z0OC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvZGVmNjQ3LTkxODYtNDcyOS1iYjk5LTE0MmViZTg2OTMxNi8x
L3hGSjBZMlZ5U3VrQkNBZHVuWnltUTE1MlkxNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
ZGVmNjQ3LTkxODYtNDcyOS1iYjk5LTE0MmViZTg2OTMxNi8xLzhhQnNiQkNPbEJt
eXpiSWRTTFNhYTcxc0Z0OC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsJ/0DANBgkqhkiG9w0BAQsFAAOC
AQEAha5YrzeaV7yui0/IcQWaSH4elMqta08Dkxi+LqHmIbzN05/FQz9vItjV0oWx
gKpX6+yKUQjjroAWfnWlTvmiM8SpQFWQroboEJenHA79tBFCMZP4a9CuumT7qTlQ
BHz35tuWt+XkVr8NmWTEIYw2UnRfyS0pGngoesk+tB/6a6a5sqm8dBV29ewjUaM3
ix0rjFhAzhp0JJ0eXUixXkIbb7J98yB+8N+xPNqwJ99zMEnqsXURozdSsKC/Yclo
mz0Nd+QKqULpmeZ0raDm816/EXndJVD4Pk9/rIaPANS6ozpyjbsxEngfZpEysVS3
Lco76vQ5V8fB0vVrcp8BxQYWNg==
-----END CERTIFICATE-----