Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/2Q3qed2_3-vgbn0MipArkwYh89U.roa
File:                     2Q3qed2_3-vgbn0MipArkwYh89U.roa (raw, json)
Hash identifier:          RQJK2eMHbKhPE6GTsdouAnEWn/SlLxf5UdJZfyBToL8=
Subject key identifier:   D9:0D:EA:79:DD:BF:DF:EB:E0:6E:7D:0C:8A:90:2B:93:06:21:F3:D5
Certificate issuer:       /CN=ca6dcdad99290456c6d7c18eb1c058d941088801
Certificate serial:       05A37E2E
Authority key identifier: CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/2Q3qed2_3-vgbn0MipArkwYh89U.roa
Signing time:             Sat 01 Jan 2022 10:54:35 +0000
ROA not before:           Sat 01 Jan 2022 10:54:35 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     198288
IP address blocks:        185.208.120.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94600750 (0x5a37e2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca6dcdad99290456c6d7c18eb1c058d941088801
        Validity
            Not Before: Jan  1 10:54:35 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d90dea79ddbfdfebe06e7d0c8a902b930621f3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b5:8f:bb:3a:be:8e:f0:64:7f:b6:16:cb:c5:
                    cc:af:a7:16:15:25:60:a1:aa:f3:53:ad:b6:7f:69:
                    72:b5:82:fc:48:0e:c1:b0:ab:85:17:f8:99:86:a5:
                    f9:d0:78:4a:a7:de:47:7d:21:a3:d3:35:30:2d:73:
                    7f:ee:aa:9d:8c:0a:6d:ed:e4:d6:1f:f7:a4:7a:f6:
                    b1:98:a9:a1:1a:df:6a:79:83:61:75:ff:43:79:d6:
                    f8:c4:61:f2:5b:bd:da:63:f0:8c:05:e0:ca:c5:c1:
                    dc:09:6c:40:3d:c3:47:d1:ca:e3:ab:a5:e3:de:34:
                    63:72:a8:a6:b1:69:fa:70:8b:ac:c9:ce:cb:f9:bf:
                    cd:cf:82:28:05:dd:7b:df:34:77:07:1c:15:5a:1b:
                    44:94:60:e7:98:0f:53:72:66:bc:8b:90:a8:76:ef:
                    6f:58:b5:11:5f:35:d1:e4:ca:51:62:c3:a7:89:25:
                    95:da:0d:d7:eb:5a:a0:a7:a9:80:f2:96:4c:a5:ee:
                    59:35:c4:04:1f:85:ac:c1:f0:d5:5c:05:50:00:f8:
                    01:70:98:6b:7c:dc:d4:01:68:70:4a:63:8c:07:ea:
                    a9:d5:ca:9f:db:df:8d:75:34:39:54:95:93:cb:48:
                    0f:1a:f2:a6:c4:35:66:df:b1:35:68:c9:5f:0e:f2:
                    e5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0D:EA:79:DD:BF:DF:EB:E0:6E:7D:0C:8A:90:2B:93:06:21:F3:D5
            X509v3 Authority Key Identifier:
                keyid:CA:6D:CD:AD:99:29:04:56:C6:D7:C1:8E:B1:C0:58:D9:41:08:88:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ym3NrZkpBFbG18GOscBY2UEIiAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/2Q3qed2_3-vgbn0MipArkwYh89U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/76759e-3964-4c4f-876b-bc475d008869/1/ym3NrZkpBFbG18GOscBY2UEIiAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.208.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:c0:9d:f4:33:fe:e3:13:83:64:e7:71:bd:97:c3:fd:2a:c2:
         75:43:9c:a6:99:58:6a:84:82:25:46:78:77:10:5d:17:90:b3:
         a1:34:e4:b7:75:a9:2a:73:28:24:24:11:7a:63:18:5e:27:5b:
         db:26:62:f7:ad:cb:4e:82:0e:c1:d5:ce:67:86:74:70:ff:d5:
         97:46:ec:aa:a4:e5:71:8c:11:28:ed:d5:4c:16:cf:c2:4b:b8:
         44:d8:49:3c:f7:82:b5:98:5d:30:75:b8:a9:d5:22:4e:b1:6f:
         11:45:56:19:a2:cf:1a:ae:74:35:d9:70:3a:35:28:f1:82:d3:
         12:08:da:89:58:c5:f4:d7:48:c1:c1:44:d7:10:93:01:16:ca:
         56:bb:b2:d9:65:d7:0a:7d:f9:bd:94:b5:4c:3f:cb:86:f7:16:
         23:70:ca:3b:0a:18:a3:f9:c9:d0:77:4a:8f:c0:c0:fe:2f:c1:
         97:83:0d:d8:32:fb:05:04:0f:80:df:c1:55:d1:75:61:1a:b1:
         c9:91:17:7e:12:64:9d:41:c0:69:30:e6:30:2b:f1:6c:fc:3f:
         54:2b:47:33:c7:b8:1a:e9:a3:08:db:b6:0d:14:f8:c7:93:4b:
         c8:4d:2f:39:59:20:bd:35:60:b6:6d:37:a1:17:7e:b9:54:22:
         33:e6:41:45
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBaN+LjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
YTZkY2RhZDk5MjkwNDU2YzZkN2MxOGViMWMwNThkOTQxMDg4ODAxMB4XDTIyMDEw
MTEwNTQzNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDkwZGVhNzlkZGJm
ZGZlYmUwNmU3ZDBjOGE5MDJiOTMwNjIxZjNkNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAN61j7s6vo7wZH+2FsvFzK+nFhUlYKGq81Ottn9pcrWC/EgO
wbCrhRf4mYal+dB4SqfeR30ho9M1MC1zf+6qnYwKbe3k1h/3pHr2sZipoRrfanmD
YXX/Q3nW+MRh8lu92mPwjAXgysXB3AlsQD3DR9HK46ul4940Y3KoprFp+nCLrMnO
y/m/zc+CKAXde980dwccFVobRJRg55gPU3JmvIuQqHbvb1i1EV810eTKUWLDp4kl
ldoN1+taoKepgPKWTKXuWTXEBB+FrMHw1VwFUAD4AXCYa3zc1AFocEpjjAfqqdXK
n9vfjXU0OVSVk8tIDxrypsQ1Zt+xNWjJXw7y5bUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTZDep53b/f6+BufQyKkCuTBiHz1TAfBgNVHSMEGDAWgBTKbc2tmSkEVsbX
wY6xwFjZQQiIATAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3ltM05yWmtwQkZiRzE4R09zY0JZMlVFSWlBRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWYvNzY3NTllLTM5NjQtNGM0Zi04NzZiLWJjNDc1ZDAwODg2OS8x
LzJRM3FlZDJfMy12Z2JuME1pcEFya3dZaDg5VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWYv
NzY3NTllLTM5NjQtNGM0Zi04NzZiLWJjNDc1ZDAwODg2OS8xL3ltM05yWmtwQkZi
RzE4R09zY0JZMlVFSWlBRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArnQeDANBgkqhkiG9w0BAQsFAAOC
AQEACcCd9DP+4xODZOdxvZfD/SrCdUOcpplYaoSCJUZ4dxBdF5CzoTTkt3WpKnMo
JCQRemMYXidb2yZi963LToIOwdXOZ4Z0cP/Vl0bsqqTlcYwRKO3VTBbPwku4RNhJ
PPeCtZhdMHW4qdUiTrFvEUVWGaLPGq50NdlwOjUo8YLTEgjaiVjF9NdIwcFE1xCT
ARbKVruy2WXXCn35vZS1TD/LhvcWI3DKOwoYo/nJ0HdKj8DA/i/Bl4MN2DL7BQQP
gN/BVdF1YRqxyZEXfhJknUHAaTDmMCvxbPw/VCtHM8e4GumjCNu2DRT4x5NLyE0v
OVkgvTVgtm03oRd+uVQiM+ZBRQ==
-----END CERTIFICATE-----