Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/iEnFGbN8rkb4TKnes2K6bCtkY5M.roa
File:                     iEnFGbN8rkb4TKnes2K6bCtkY5M.roa (raw, json)
Hash identifier:          YBSVOmiAMZcGdz3DHY98fCrZSbzNrKKMhaK90mk7rck=
Subject key identifier:   88:49:C5:19:B3:7C:AE:46:F8:4C:A9:DE:B3:62:BA:6C:2B:64:63:93
Certificate issuer:       /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial:       022B0A
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/iEnFGbN8rkb4TKnes2K6bCtkY5M.roa
Signing time:             Tue 15 Feb 2022 13:12:25 +0000
ROA not before:           Tue 15 Feb 2022 13:12:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15704
IP address blocks:        185.252.4.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142090 (0x22b0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
        Validity
            Not Before: Feb 15 13:12:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8849c519b37cae46f84ca9deb362ba6c2b646393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0b:06:62:09:dd:18:c2:83:56:c7:68:2d:a5:
                    5b:f6:0e:67:68:2f:35:b4:13:03:3c:1d:8c:49:e6:
                    ea:98:0c:f4:f5:ab:26:eb:4c:95:b5:e1:63:6c:09:
                    9d:f3:d5:3c:ff:52:9a:f7:ae:9b:2e:d9:c2:5e:0a:
                    21:7d:bc:5b:14:7d:5f:ed:cd:35:75:a2:db:7a:84:
                    99:30:89:48:d6:b6:af:b8:5d:f9:ae:61:41:d7:82:
                    83:27:4c:8e:de:55:39:7e:de:a4:90:61:fa:e6:2d:
                    e3:3f:a4:c9:4e:6a:dd:4d:12:f2:a5:7c:63:41:a4:
                    9a:b2:06:fc:63:a9:97:89:a9:43:6d:5c:8a:5c:b4:
                    89:ee:22:93:39:62:5d:cb:7c:3f:35:60:62:ba:fd:
                    65:e1:9b:8b:94:2b:72:50:e1:31:4a:03:5d:e1:60:
                    31:01:3a:1d:1c:29:5f:95:33:3c:2a:46:65:61:8f:
                    85:6c:a9:3e:24:e2:3b:70:f3:65:9c:7f:54:82:20:
                    43:2a:bc:4e:1a:49:90:63:26:41:4b:10:73:bb:ad:
                    ee:9c:f6:12:ce:b6:ca:ac:fb:ae:c0:cd:86:79:43:
                    6f:13:8e:bc:56:a6:12:9d:b0:bf:50:6a:09:b0:d9:
                    1a:88:d5:35:ff:61:d3:31:f2:8b:6b:19:6e:03:f0:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:49:C5:19:B3:7C:AE:46:F8:4C:A9:DE:B3:62:BA:6C:2B:64:63:93
            X509v3 Authority Key Identifier:
                keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/iEnFGbN8rkb4TKnes2K6bCtkY5M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.252.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:99:9a:01:4b:75:c9:4e:81:5b:35:92:d7:27:30:89:bc:17:
         a4:6a:fb:28:ee:80:59:20:eb:cc:fa:e8:7f:5a:dc:9d:4d:9e:
         03:82:d7:f2:5d:9d:8a:7e:b0:bf:d1:e3:72:c5:3f:5b:1e:8f:
         f3:cf:96:e3:c3:95:df:fd:a0:8f:80:36:d9:74:d7:c8:8e:18:
         de:dd:2e:8c:fd:0b:bc:70:6d:92:cd:f6:8c:aa:3a:5e:f5:06:
         da:c8:49:82:df:20:24:f4:4c:3a:1a:90:3f:86:ee:f5:5f:5d:
         de:60:76:f1:bb:b3:19:64:1d:5e:76:41:ef:89:9f:7c:0e:51:
         10:ac:6d:3a:5a:c3:35:b1:76:42:4c:6b:65:e6:b9:ec:b0:b3:
         e6:47:77:1e:55:1b:8c:5c:83:61:87:48:b3:1f:2a:13:2a:a8:
         ba:60:9b:db:77:25:12:c7:c7:2f:93:98:a4:93:b3:52:a6:b0:
         5b:89:2e:4d:6c:d2:07:c7:49:26:81:99:69:e8:73:aa:e4:cd:
         df:ad:f8:af:02:63:b0:3c:7b:e9:48:10:40:a0:28:ec:53:00:
         3c:e4:b2:60:c9:1b:57:d7:b0:72:74:7d:ad:df:c2:5e:4d:51:
         1c:ed:3d:1f:37:4c:77:5c:3e:8a:ee:f4:43:9c:d8:6f:72:fd:
         f8:9c:62:1c
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAisKMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDFh
YTBhMzI4YzZmZTBmMWJjYTVlNjU5OTA0MmRmZjU5ZTUxM2IyNWQwHhcNMjIwMjE1
MTMxMjI1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4ODQ5YzUxOWIzN2Nh
ZTQ2Zjg0Y2E5ZGViMzYyYmE2YzJiNjQ2MzkzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzQsGYgndGMKDVsdoLaVb9g5naC81tBMDPB2MSebqmAz09asm
60yVteFjbAmd89U8/1Ka966bLtnCXgohfbxbFH1f7c01daLbeoSZMIlI1ravuF35
rmFB14KDJ0yO3lU5ft6kkGH65i3jP6TJTmrdTRLypXxjQaSasgb8Y6mXialDbVyK
XLSJ7iKTOWJdy3w/NWBiuv1l4ZuLlCtyUOExSgNd4WAxATodHClflTM8KkZlYY+F
bKk+JOI7cPNlnH9UgiBDKrxOGkmQYyZBSxBzu63unPYSzrbKrPuuwM2GeUNvE468
VqYSnbC/UGoJsNkaiNU1/2HTMfKLaxluA/DloQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFIhJxRmzfK5G+Eyp3rNiumwrZGOTMB8GA1UdIwQYMBaAFBqgoyjG/g8byl5l
mQQt/1nlE7JdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
R3FDaktNYi1EeHZLWG1XWkJDM19XZVVUc2wwLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC81Yy8zNDRkMjQtMmUxMS00NjZkLThhZGUtMzhlODQ2MTQ4Yzc4LzEv
aUVuRkdiTjhya2I0VEtuZXMySzZiQ3RrWTVNLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8z
NDRkMjQtMmUxMS00NjZkLThhZGUtMzhlODQ2MTQ4Yzc4LzEvR3FDaktNYi1EeHZL
WG1XWkJDM19XZVVUc2wwLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufwEMA0GCSqGSIb3DQEBCwUAA4IB
AQAGmZoBS3XJToFbNZLXJzCJvBekavso7oBZIOvM+uh/WtydTZ4DgtfyXZ2KfrC/
0eNyxT9bHo/zz5bjw5Xf/aCPgDbZdNfIjhje3S6M/Qu8cG2SzfaMqjpe9QbayEmC
3yAk9Ew6GpA/hu71X13eYHbxu7MZZB1edkHviZ98DlEQrG06WsM1sXZCTGtl5rns
sLPmR3ceVRuMXINhh0izHyoTKqi6YJvbdyUSx8cvk5ikk7NSprBbiS5NbNIHx0km
gZlp6HOq5M3frfivAmOwPHvpSBBAoCjsUwA85LJgyRtX17BydH2t38JeTVEc7T0f
N0x3XD6K7vRDnNhvcv34nGIc
-----END CERTIFICATE-----