Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/rnV6x_0dY-BtnVdS7KfnnHqYAqY.roa
File:                     rnV6x_0dY-BtnVdS7KfnnHqYAqY.roa (raw, json)
Hash identifier:          eohwTbpPKbO8gqnccuLkfKmfWtSAYQnC0jb3oyGamZI=
Subject key identifier:   AE:75:7A:C7:FD:1D:63:E0:6D:9D:57:52:EC:A7:E7:9C:7A:98:02:A6
Certificate issuer:       /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial:       1055927C
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/rnV6x_0dY-BtnVdS7KfnnHqYAqY.roa
Signing time:             Sat 01 Jan 2022 09:54:25 +0000
ROA not before:           Sat 01 Jan 2022 09:54:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        81.90.143.0/24 maxlen: 24
                          2a00:e27:143::/48 maxlen: 48
                          2a00:e20:150::/44 maxlen: 48
                          2a00:e20:143::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274043516 (0x1055927c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
        Validity
            Not Before: Jan  1 09:54:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ae757ac7fd1d63e06d9d5752eca7e79c7a9802a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3d:11:84:d7:52:07:80:df:9a:80:0e:d3:da:
                    70:f2:bd:e9:04:0b:1e:1d:6d:be:40:86:c7:a2:c4:
                    4f:11:83:ff:4a:be:c3:b3:29:08:15:09:dd:23:91:
                    5b:8a:f3:93:f3:08:48:49:cb:19:49:d2:54:0a:5f:
                    c4:27:85:4e:38:de:e6:93:25:5c:30:a3:bb:48:c1:
                    69:55:47:f7:e3:e7:2b:f4:ab:50:0a:55:7e:80:b3:
                    32:11:f1:6c:b8:e8:3c:fd:96:69:c1:ab:43:ad:4f:
                    53:48:5b:3c:3b:91:fb:54:45:59:14:7f:57:a1:da:
                    c6:b4:e0:cb:3f:76:04:fc:ee:09:fa:50:6b:c6:fc:
                    07:6c:0d:ce:d1:d1:42:93:32:0f:96:71:78:14:f8:
                    68:91:7b:53:aa:8d:65:96:a0:2b:5f:3a:d6:22:60:
                    25:f5:7a:51:98:52:b0:c7:30:dd:80:3c:55:f1:e1:
                    d2:85:54:4f:fe:cf:a2:7e:6b:eb:16:10:4b:63:86:
                    60:6a:7e:d0:81:15:38:d6:7c:12:dc:bf:3e:a1:79:
                    dd:7f:17:24:49:0e:5a:42:c0:0d:a8:d0:f3:24:31:
                    c7:77:95:41:66:28:9f:8b:9f:5f:4a:1d:35:af:9e:
                    36:d0:a3:b7:49:64:8e:23:f5:d3:68:d5:74:1c:c2:
                    46:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:75:7A:C7:FD:1D:63:E0:6D:9D:57:52:EC:A7:E7:9C:7A:98:02:A6
            X509v3 Authority Key Identifier:
                keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/rnV6x_0dY-BtnVdS7KfnnHqYAqY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.90.143.0/24
                IPv6:
                  2a00:e20:143::/48
                  2a00:e20:150::/44
                  2a00:e27:143::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:64:39:ed:ab:f1:fc:45:fe:75:ee:79:e7:b1:d2:06:2f:42:
         32:48:59:7d:5c:a0:d7:73:a3:90:2f:2c:b7:a2:30:d0:c9:9b:
         c3:5d:da:aa:cc:d3:a6:57:db:da:dc:2e:f3:f0:56:74:74:be:
         87:85:06:67:d0:71:01:53:7c:0c:f1:73:45:8f:7d:82:74:47:
         90:7b:b5:ba:cd:75:f9:72:ae:00:90:a7:19:6e:12:39:04:01:
         d8:db:d2:a4:b8:78:d2:c5:9f:c5:a1:49:0f:0f:bb:6a:a6:78:
         f5:d9:a8:f2:06:45:cc:dd:90:31:42:98:60:41:8a:25:af:ed:
         58:6a:99:3b:37:b5:52:57:d7:d2:0c:e8:6b:16:70:ce:e9:10:
         59:1c:1c:7b:b0:f3:2d:30:22:a6:84:12:75:57:0c:f4:eb:23:
         47:92:3b:cc:57:6b:63:4b:48:36:3e:50:b2:be:e3:46:8c:1e:
         3e:5e:ba:70:9d:45:1a:c2:cc:cb:55:da:89:50:24:49:71:a3:
         d3:98:cf:dd:86:5e:05:11:42:a9:df:e2:27:6f:76:31:dd:dc:
         76:0b:0d:32:53:a1:7d:9b:95:83:59:95:57:b0:4b:66:5a:a1:
         55:6f:0c:3b:89:4a:b1:e2:e2:58:2b:55:4a:9a:30:5c:dd:ed:
         d6:b5:86:30
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIEEFWSfDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
ODM4M2ZmYTlmMjBiZjAyMWMwOTAyNjI5OTQyMTJkNzE2NjdlZDAyMB4XDTIyMDEw
MTA5NTQyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWU3NTdhYzdmZDFk
NjNlMDZkOWQ1NzUyZWNhN2U3OWM3YTk4MDJhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO49EYTXUgeA35qADtPacPK96QQLHh1tvkCGx6LETxGD/0q+
w7MpCBUJ3SORW4rzk/MISEnLGUnSVApfxCeFTjje5pMlXDCju0jBaVVH9+PnK/Sr
UApVfoCzMhHxbLjoPP2WacGrQ61PU0hbPDuR+1RFWRR/V6HaxrTgyz92BPzuCfpQ
a8b8B2wNztHRQpMyD5ZxeBT4aJF7U6qNZZagK1861iJgJfV6UZhSsMcw3YA8VfHh
0oVUT/7Pon5r6xYQS2OGYGp+0IEVONZ8Ety/PqF53X8XJEkOWkLADajQ8yQxx3eV
QWYon4ufX0odNa+eNtCjt0lkjiP102jVdBzCRgECAwEAAaOCAiwwggIoMB0GA1Ud
DgQWBBSudXrH/R1j4G2dV1Lsp+ecepgCpjAfBgNVHSMEGDAWgBRoOD/6nyC/AhwJ
AmKZQhLXFmftAjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FEZ18tcDhndndJY0NRSmltVUlTMXhabjdRSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGYvYjhlOTQwLTIyMDEtNDA2ZS04YWFmLTQwNjBlOWVlZWI5ZS8x
L3JuVjZ4XzBkWS1CdG5WZFM3S2ZubkhxWUFxWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYv
YjhlOTQwLTIyMDEtNDA2ZS04YWFmLTQwNjBlOWVlZWI5ZS8xL2FEZ18tcDhndndJ
Y0NRSmltVUlTMXhabjdRSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBC
BggrBgEFBQcBBwEB/wQzMDEwDAQCAAEwBgMEAFFajzAhBAIAAjAbAwcAKgAOIAFD
AwcEKgAOIAFQAwcAKgAOJwFDMA0GCSqGSIb3DQEBCwUAA4IBAQBgZDntq/H8Rf51
7nnnsdIGL0IySFl9XKDXc6OQLyy3ojDQyZvDXdqqzNOmV9va3C7z8FZ0dL6HhQZn
0HEBU3wM8XNFj32CdEeQe7W6zXX5cq4AkKcZbhI5BAHY29KkuHjSxZ/FoUkPD7tq
pnj12ajyBkXM3ZAxQphgQYolr+1Yapk7N7VSV9fSDOhrFnDO6RBZHBx7sPMtMCKm
hBJ1Vwz06yNHkjvMV2tjS0g2PlCyvuNGjB4+XrpwnUUawszLVdqJUCRJcaPTmM/d
hl4FEUKp3+Inb3Yx3dx2Cw0yU6F9m5WDWZVXsEtmWqFVbww7iUqx4uJYK1VKmjBc
3e3WtYYw
-----END CERTIFICATE-----