Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/q6nndH-33_BvniCUfqWUeidElOo.roa
File:                     q6nndH-33_BvniCUfqWUeidElOo.roa (raw, json)
Hash identifier:          5+tU60z4xUVT380UyCW3cKR+2ce//dNABUwK2R4ClCg=
Subject key identifier:   AB:A9:E7:74:7F:B7:DF:F0:6F:9E:20:94:7E:A5:94:7A:27:44:94:EA
Certificate issuer:       /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial:       018511206399C719C3D81A01A01C59870C4A
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/q6nndH-33_BvniCUfqWUeidElOo.roa
Signing time:             Wed 14 Dec 2022 14:53:33 +0000
ROA not before:           Wed 14 Dec 2022 14:53:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     44814
IP address blocks:        93.94.137.0/24 maxlen: 24
                          2a01:4a40::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:11:20:63:99:c7:19:c3:d8:1a:01:a0:1c:59:87:0c:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
        Validity
            Not Before: Dec 14 14:53:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=aba9e7747fb7dff06f9e20947ea5947a274494ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:19:e5:df:2a:05:1c:84:ba:d8:60:18:19:89:
                    0e:f4:6e:1c:75:6f:92:19:78:38:51:94:8a:d8:0b:
                    30:ba:56:7a:1f:84:03:48:60:ae:ba:c2:69:a7:f5:
                    f4:a1:fe:6a:53:5e:27:20:43:e1:be:7e:c4:52:38:
                    43:e4:bc:b4:da:cf:12:d3:03:37:bd:08:c0:0a:a4:
                    61:0b:69:b5:ff:bb:7c:91:4e:a0:21:1a:a1:57:fd:
                    71:8c:2a:f5:cb:4b:55:52:91:99:d4:96:b9:dc:6b:
                    01:50:5e:02:dc:c9:e5:44:da:cb:80:5d:33:18:a5:
                    ad:0d:00:ee:d7:53:8b:5d:9f:a7:bb:05:42:a6:b0:
                    32:a2:59:15:53:6a:cc:5a:a7:28:60:c8:26:00:21:
                    c5:75:d2:d8:f5:40:d7:13:a7:2d:11:87:49:a0:e1:
                    78:12:43:7d:21:e4:48:e5:01:b9:93:98:bf:2e:da:
                    45:b7:50:1a:50:f0:02:f3:48:92:d3:9a:0e:e6:33:
                    57:62:f7:49:f5:18:b5:ba:2a:85:3c:bb:9f:76:6c:
                    d9:0e:2d:6b:fe:e4:ed:3e:7c:99:8e:db:2d:23:b8:
                    7f:1c:b8:e4:1f:13:87:23:d0:b4:87:88:ab:df:c6:
                    83:e6:a2:51:5a:0f:3d:16:15:cc:00:0a:11:9b:20:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A9:E7:74:7F:B7:DF:F0:6F:9E:20:94:7E:A5:94:7A:27:44:94:EA
            X509v3 Authority Key Identifier:
                keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/q6nndH-33_BvniCUfqWUeidElOo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.94.137.0/24
                IPv6:
                  2a01:4a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:55:76:78:75:86:26:61:98:bf:9b:cf:44:02:c3:08:d8:bd:
         18:ed:f2:d5:13:a8:d5:87:fe:26:7e:e5:b0:e5:ef:3a:80:44:
         46:70:56:cd:09:fc:01:15:f5:ee:39:9d:bb:6f:34:ad:66:b1:
         78:b4:79:c7:f2:c8:77:0f:91:91:47:06:ce:66:14:2d:79:fc:
         a1:ec:04:ee:d3:51:2c:1f:e2:84:9a:e5:15:0e:66:1e:75:3e:
         a9:f6:d8:f9:76:48:b1:06:9d:eb:28:46:5c:a3:98:a0:a0:51:
         db:29:41:bb:02:ad:9f:a8:8c:17:b0:d3:7c:73:be:1f:63:3c:
         00:bf:49:50:00:b4:be:6f:9f:8b:b6:fd:dd:e0:01:80:fc:b0:
         1e:c5:f6:34:ea:bd:b0:52:5c:ff:14:15:e2:cc:78:4d:1f:1d:
         3f:b1:cb:00:c5:85:06:27:ea:09:41:4c:fb:36:0a:c7:c0:84:
         94:47:d5:d2:81:ac:d0:24:20:1d:be:7a:9a:0b:d8:e0:c4:ea:
         31:22:ac:1c:a2:48:d0:68:14:83:95:b3:63:6e:bc:d9:80:a1:
         9c:f4:fe:92:bc:6c:7f:7f:b9:c1:8e:56:b6:28:97:b1:27:45:
         fe:e4:c7:dc:1c:a3:fd:eb:ee:9f:af:22:d0:2b:10:e6:6b:21:
         e4:13:9a:3c
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYURIGOZxxnD2BoBoBxZhwxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl
NjdiOTcwHhcNMjIxMjE0MTQ1MzMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmE5ZTc3NDdmYjdkZmYwNmY5ZTIwOTQ3ZWE1OTQ3YTI3NDQ5NGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxnl3yoFHIS62GAYGYkO9G4cdW+S
GXg4UZSK2AswulZ6H4QDSGCuusJpp/X0of5qU14nIEPhvn7EUjhD5Ly02s8S0wM3
vQjACqRhC2m1/7t8kU6gIRqhV/1xjCr1y0tVUpGZ1Ja53GsBUF4C3MnlRNrLgF0z
GKWtDQDu11OLXZ+nuwVCprAyolkVU2rMWqcoYMgmACHFddLY9UDXE6ctEYdJoOF4
EkN9IeRI5QG5k5i/LtpFt1AaUPAC80iS05oO5jNXYvdJ9Ri1uiqFPLufdmzZDi1r
/uTtPnyZjtstI7h/HLjkHxOHI9C0h4ir38aD5qJRWg89FhXMAAoRmyD2zQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKup53R/t9/wb54glH6llHonRJTqMB8GA1UdIwQY
MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt
ZmJlMWEwZDBhYTk4LzEvcTZubmRILTMzX0J2bmlDVWZxV1VlaWRFbE9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4
LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXV6JMA0E
AgACMAcDBQAqAUpAMA0GCSqGSIb3DQEBCwUAA4IBAQCSVXZ4dYYmYZi/m89EAsMI
2L0Y7fLVE6jVh/4mfuWw5e86gERGcFbNCfwBFfXuOZ27bzStZrF4tHnH8sh3D5GR
RwbOZhQtefyh7ATu01EsH+KEmuUVDmYedT6p9tj5dkixBp3rKEZco5igoFHbKUG7
Aq2fqIwXsNN8c74fYzwAv0lQALS+b5+Ltv3d4AGA/LAexfY06r2wUlz/FBXizHhN
Hx0/scsAxYUGJ+oJQUz7NgrHwISUR9XSgazQJCAdvnqaC9jgxOoxIqwcokjQaBSD
lbNjbrzZgKGc9P6SvGx/f7nBjla2KJexJ0X+5MfcHKP96+6fryLQKxDmayHkE5o8
-----END CERTIFICATE-----