Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/VpZDA5XwDfZtM49Q4L0SNIfIPGU.roa
File:                     VpZDA5XwDfZtM49Q4L0SNIfIPGU.roa (raw, json)
Hash identifier:          x4rGagmzVb2vW10J17C9PL2DXzU4OP16YoHmWfNVDeY=
Subject key identifier:   56:96:43:03:95:F0:0D:F6:6D:33:8F:50:E0:BD:12:34:87:C8:3C:65
Certificate issuer:       /CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
Certificate serial:       01853EF8A90E0ACAD2E7ECE14556047392C9
Authority key identifier: D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/VpZDA5XwDfZtM49Q4L0SNIfIPGU.roa
Signing time:             Fri 23 Dec 2022 12:32:41 +0000
ROA not before:           Fri 23 Dec 2022 12:32:41 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203321
IP address blocks:        94.142.254.0/24 maxlen: 24
                          2a12:5c40::/48 maxlen: 48
                          2a12:5c40:3::/48 maxlen: 48
                          2a12:5c40:1::/48 maxlen: 48
                          2a12:5c40:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:3e:f8:a9:0e:0a:ca:d2:e7:ec:e1:45:56:04:73:92:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d89b44e2c057f01a99261f94bbf6da1bf1865f39
        Validity
            Not Before: Dec 23 12:32:41 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5696430395f00df66d338f50e0bd123487c83c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:08:cc:b0:1b:9c:95:b4:78:93:cd:64:04:33:
                    82:ef:b6:c6:8d:ab:89:7e:ef:5f:30:3f:d3:4d:76:
                    cb:2a:ab:2c:16:01:6a:6c:1d:b9:47:de:d7:a3:e6:
                    32:56:a0:07:ef:cd:20:dd:47:48:18:8c:55:6b:2a:
                    cc:0b:63:dd:81:5f:29:13:cb:f2:1c:0f:1b:da:62:
                    87:e8:40:b9:f2:aa:d6:44:e0:88:61:59:81:92:e6:
                    56:23:c3:24:a5:f9:7f:79:df:a2:f2:94:19:a1:be:
                    b3:ac:20:12:b0:21:26:80:26:0c:47:36:b8:41:cc:
                    16:20:d9:bd:ba:d4:aa:c3:03:d7:60:a2:d4:ff:11:
                    da:fb:20:1e:17:4b:9f:73:b5:08:f8:f7:8e:b2:db:
                    c3:7c:df:2f:bb:2a:ad:60:01:2c:7e:a9:50:32:3c:
                    e9:b6:8f:c0:be:d1:27:92:3b:3f:62:31:99:f7:8b:
                    db:4d:d2:ba:34:38:69:e1:e4:c6:cc:53:70:81:8b:
                    de:e9:ae:50:1f:92:32:88:30:5c:68:0b:5f:22:6d:
                    36:02:f5:33:ed:10:41:69:a4:95:78:8b:55:33:62:
                    27:ea:9b:c6:55:07:22:10:fc:d3:df:93:65:9f:73:
                    5a:f5:18:37:72:d1:ee:85:99:cd:e3:68:9e:e8:64:
                    8d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:96:43:03:95:F0:0D:F6:6D:33:8F:50:E0:BD:12:34:87:C8:3C:65
            X509v3 Authority Key Identifier:
                keyid:D8:9B:44:E2:C0:57:F0:1A:99:26:1F:94:BB:F6:DA:1B:F1:86:5F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JtE4sBX8BqZJh-Uu_baG_GGXzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/VpZDA5XwDfZtM49Q4L0SNIfIPGU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/00a71e-def8-4a4f-a499-b60fbb14c19d/1/2JtE4sBX8BqZJh-Uu_baG_GGXzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.142.254.0/24
                IPv6:
                  2a12:5c40::/46

    Signature Algorithm: sha256WithRSAEncryption
         11:c6:0e:d0:a8:bb:be:dd:ef:58:89:e1:81:4b:de:b2:56:22:
         57:fa:36:02:23:08:56:c0:bd:cf:6e:af:36:0f:c7:88:c4:f2:
         5a:d0:00:f8:b9:c3:a8:2c:47:7c:83:cf:a2:17:15:89:d9:38:
         94:65:e0:15:c4:a4:1d:c4:61:91:5a:32:cd:13:7c:10:89:d5:
         2f:1b:cd:07:21:f5:07:30:e0:e9:39:22:11:52:94:68:9d:4e:
         ea:a8:27:93:0c:6f:1e:19:f4:ff:8f:26:00:4b:e2:ef:a0:76:
         9e:fd:43:ec:6c:ec:bb:17:21:10:45:ed:7d:f3:09:6f:ff:d5:
         9f:e4:a1:45:0c:b0:1e:bb:9d:5f:6d:10:e5:99:d1:8c:d0:2d:
         8e:24:75:3c:52:a7:68:b4:5b:bf:1b:7f:45:97:55:5e:ad:cc:
         76:62:85:72:3a:e4:fb:f4:2f:fd:20:93:87:ca:bd:9d:84:c4:
         aa:2c:40:38:98:29:f1:b6:91:c9:62:e7:fb:72:69:bc:8d:9d:
         ee:63:45:af:19:67:27:0d:f8:7a:43:4c:d9:00:fc:79:70:09:
         38:0c:db:4e:86:8c:19:df:b6:26:d0:e9:61:d0:27:c4:4f:1b:
         db:ff:a8:32:69:b4:f6:5b:fa:48:b4:43:55:e3:41:66:84:61:
         60:31:e8:ac
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYU++KkOCsrS5+zhRVYEc5LJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OWI0NGUyYzA1N2YwMWE5OTI2MWY5NGJiZjZkYTFiZjE4
NjVmMzkwHhcNMjIxMjIzMTIzMjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Njk2NDMwMzk1ZjAwZGY2NmQzMzhmNTBlMGJkMTIzNDg3YzgzYzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQjMsBuclbR4k81kBDOC77bGjauJ
fu9fMD/TTXbLKqssFgFqbB25R97Xo+YyVqAH780g3UdIGIxVayrMC2PdgV8pE8vy
HA8b2mKH6EC58qrWROCIYVmBkuZWI8Mkpfl/ed+i8pQZob6zrCASsCEmgCYMRza4
QcwWINm9utSqwwPXYKLU/xHa+yAeF0ufc7UI+PeOstvDfN8vuyqtYAEsfqlQMjzp
to/AvtEnkjs/YjGZ94vbTdK6NDhp4eTGzFNwgYve6a5QH5IyiDBcaAtfIm02AvUz
7RBBaaSVeItVM2In6pvGVQciEPzT35Nln3Na9Rg3ctHuhZnN42ie6GSNpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFaWQwOV8A32bTOPUOC9EjSHyDxlMB8GA1UdIwQY
MBaAFNibROLAV/AamSYflLv22hvxhl85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkp0RTRzQlg4QnFaSmgtVXVfYmFHX0dHWHprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8wMGE3MWUtZGVmOC00YTRmLWE0OTkt
YjYwZmJiMTRjMTlkLzEvVnBaREE1WHdEZlp0TTQ5UTRMMFNOSWZJUEdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8wMGE3MWUtZGVmOC00YTRmLWE0OTktYjYwZmJiMTRjMTlk
LzEvMkp0RTRzQlg4QnFaSmgtVXVfYmFHX0dHWHprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXo7+MA8E
AgACMAkDBwIqElxAAAAwDQYJKoZIhvcNAQELBQADggEBABHGDtCou77d71iJ4YFL
3rJWIlf6NgIjCFbAvc9urzYPx4jE8lrQAPi5w6gsR3yDz6IXFYnZOJRl4BXEpB3E
YZFaMs0TfBCJ1S8bzQch9Qcw4Ok5IhFSlGidTuqoJ5MMbx4Z9P+PJgBL4u+gdp79
Q+xs7LsXIRBF7X3zCW//1Z/koUUMsB67nV9tEOWZ0YzQLY4kdTxSp2i0W78bf0WX
VV6tzHZihXI65Pv0L/0gk4fKvZ2ExKosQDiYKfG2kcli5/tyabyNne5jRa8ZZycN
+HpDTNkA/HlwCTgM206GjBnftibQ6WHQJ8RPG9v/qDJptPZb+ki0Q1XjQWaEYWAx
6Kw=
-----END CERTIFICATE-----