Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/1-oSU39aGsmDTR-RnOiFwIuKH4_4.roa
File:                     1-oSU39aGsmDTR-RnOiFwIuKH4_4.roa (raw, json)
Hash identifier:          EKYxqbIQoNb5xB85cOgF3mEgz7mmr0xlbqTMcUdttRU=
Subject key identifier:   FA:84:94:DF:D6:86:B2:60:D3:47:E4:67:3A:21:70:22:E2:87:E3:FE
Certificate issuer:       /CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
Certificate serial:       018389ECECE05C319382C238F33C13A3C00B
Authority key identifier: 5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/1-oSU39aGsmDTR-RnOiFwIuKH4_4.roa
Signing time:             Thu 29 Sep 2022 15:45:49 +0000
ROA not before:           Thu 29 Sep 2022 15:45:49 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     199101
IP address blocks:        93.93.32.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:89:ec:ec:e0:5c:31:93:82:c2:38:f3:3c:13:a3:c0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d39d15bd2fcc84771ba6aa29aa54428b21cef60
        Validity
            Not Before: Sep 29 15:45:49 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fa8494dfd686b260d347e4673a217022e287e3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:af:e0:ba:2b:44:0d:34:e0:10:44:10:02:a4:
                    41:8d:6a:c6:ce:1b:f1:b8:21:80:11:a0:af:68:74:
                    db:fc:d7:74:31:8d:9b:fc:48:8d:e5:bd:37:3c:b3:
                    e5:ef:4a:d3:20:53:20:ba:da:53:0a:d1:bf:69:39:
                    c8:ce:40:4c:03:05:32:68:d9:1f:59:78:65:d5:41:
                    d1:82:f1:e2:7d:60:f8:f7:15:69:c1:75:6a:9b:9d:
                    1a:b6:79:a7:02:d0:45:64:e0:f8:17:40:1c:05:cd:
                    9f:d0:7d:b9:e0:4c:05:7a:f0:ab:45:ad:35:52:ca:
                    2d:13:87:70:d5:f0:6d:e1:8f:6a:73:78:45:aa:4a:
                    89:2d:83:43:27:dc:5a:43:46:5b:23:23:c4:d0:ba:
                    1e:ee:7b:ad:86:d2:59:27:00:78:6d:b9:05:40:e8:
                    89:91:c4:35:5c:1e:6d:24:16:92:61:67:3d:e9:21:
                    18:ed:4b:ad:a9:3a:40:5f:7c:d4:27:6e:10:ae:c7:
                    33:dc:22:98:13:bc:c2:ca:1e:25:08:7a:60:85:40:
                    5c:59:2e:3f:63:f4:2b:96:5a:f9:71:71:2e:39:95:
                    94:21:4d:f2:fd:63:6d:f5:0b:7a:ec:85:7b:13:b7:
                    78:98:50:65:e1:d1:0e:9f:26:b7:9d:b9:ec:b6:5c:
                    4a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:84:94:DF:D6:86:B2:60:D3:47:E4:67:3A:21:70:22:E2:87:E3:FE
            X509v3 Authority Key Identifier:
                keyid:5D:39:D1:5B:D2:FC:C8:47:71:BA:6A:A2:9A:A5:44:28:B2:1C:EF:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTnRW9L8yEdxumqimqVEKLIc72A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/1-oSU39aGsmDTR-RnOiFwIuKH4_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c8092e-9f8c-4718-b770-c29b44de53a8/1/XTnRW9L8yEdxumqimqVEKLIc72A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:3c:08:53:5e:57:83:91:e8:e4:1b:09:90:ff:17:7b:53:ed:
         47:f0:55:0b:1d:f1:8f:df:56:4c:ee:f1:3b:2a:5f:85:58:e2:
         67:ea:0c:5c:6c:cc:ae:5f:1f:3e:18:59:36:f8:58:4c:95:3a:
         2d:44:ce:4e:76:71:0d:d0:ca:8c:b6:90:13:1a:4b:bf:72:d7:
         5c:d3:7a:2b:41:10:96:d4:93:c4:38:53:b1:bb:23:e1:7a:1c:
         5b:a4:7b:03:3a:83:26:d8:25:9c:93:3b:60:db:e0:9a:ca:ed:
         d2:18:cf:ec:31:cd:13:e8:93:ff:f0:73:7b:6e:2c:32:af:fa:
         40:48:fa:2a:d6:a6:33:b7:92:88:54:84:7a:94:4f:ff:77:68:
         05:75:7a:19:e4:5a:9a:9b:99:8c:8a:7c:00:07:dc:cd:fe:4e:
         b0:0f:c5:76:f9:f1:59:08:7a:2f:0e:9d:e7:c7:96:5c:9e:80:
         49:e6:3f:36:50:c9:d4:2a:50:e4:b9:73:b5:f8:1f:67:bd:8f:
         6b:0c:d0:cd:c9:f1:21:1a:39:60:97:1a:6e:78:a1:46:3e:d4:
         47:e9:36:ec:0c:f0:fa:4a:f3:25:ad:8e:78:f0:56:fb:38:ed:
         90:15:70:46:3e:fe:b5:4b:be:ae:09:9b:62:01:e9:0c:3b:65:
         eb:71:2b:d0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYOJ7OzgXDGTgsI48zwTo8ALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzlkMTViZDJmY2M4NDc3MWJhNmFhMjlhYTU0NDI4YjIx
Y2VmNjAwHhcNMjIwOTI5MTU0NTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTg0OTRkZmQ2ODZiMjYwZDM0N2U0NjczYTIxNzAyMmUyODdlM2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56/guitEDTTgEEQQAqRBjWrGzhvx
uCGAEaCvaHTb/Nd0MY2b/EiN5b03PLPl70rTIFMgutpTCtG/aTnIzkBMAwUyaNkf
WXhl1UHRgvHifWD49xVpwXVqm50atnmnAtBFZOD4F0AcBc2f0H254EwFevCrRa01
UsotE4dw1fBt4Y9qc3hFqkqJLYNDJ9xaQ0ZbIyPE0Loe7nuthtJZJwB4bbkFQOiJ
kcQ1XB5tJBaSYWc96SEY7UutqTpAX3zUJ24Qrscz3CKYE7zCyh4lCHpghUBcWS4/
Y/Qrllr5cXEuOZWUIU3y/WNt9Qt67IV7E7d4mFBl4dEOnya3nbnstlxKKQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqElN/WhrJg00fkZzohcCLih+P+MB8GA1UdIwQY
MBaAFF050VvS/MhHcbpqopqlRCiyHO9gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRuUlc5TDh5RWR4dW1xaW1xVkVLTEljNzJBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jODA5MmUtOWY4Yy00NzE4LWI3NzAt
YzI5YjQ0ZGU1M2E4LzEvMS1vU1UzOWFHc21EVFItUm5PaUZ3SXVLSDRfNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGQvYzgwOTJlLTlmOGMtNDcxOC1iNzcwLWMyOWI0NGRlNTNh
OC8xL1hUblJXOUw4eUVkeHVtcWltcVZFS0xJYzcyQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA11dIDAN
BgkqhkiG9w0BAQsFAAOCAQEATDwIU15Xg5Ho5BsJkP8Xe1PtR/BVCx3xj99WTO7x
OypfhVjiZ+oMXGzMrl8fPhhZNvhYTJU6LUTOTnZxDdDKjLaQExpLv3LXXNN6K0EQ
ltSTxDhTsbsj4XocW6R7AzqDJtglnJM7YNvgmsrt0hjP7DHNE+iT//Bze24sMq/6
QEj6KtamM7eSiFSEepRP/3doBXV6GeRampuZjIp8AAfczf5OsA/FdvnxWQh6Lw6d
58eWXJ6ASeY/NlDJ1CpQ5LlztfgfZ72PawzQzcnxIRo5YJcabnihRj7UR+k27Azw
+krzJa2OePBW+zjtkBVwRj7+tUu+rgmbYgHpDDtl63Er0A==
-----END CERTIFICATE-----