Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/2DRYBnYxbVN5XkBE2TWMvU7HC0g.roa
File:                     2DRYBnYxbVN5XkBE2TWMvU7HC0g.roa (raw, json)
Hash identifier:          30M7IwcXVRuAdQFsMhVMbnZtxbzTfveovlxX5eEPt5A=
Subject key identifier:   D8:34:58:06:76:31:6D:53:79:5E:40:44:D9:35:8C:BD:4E:C7:0B:48
Certificate issuer:       /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial:       618A1B
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/2DRYBnYxbVN5XkBE2TWMvU7HC0g.roa
Signing time:             Sat 01 Jan 2022 02:59:57 +0000
ROA not before:           Sat 01 Jan 2022 02:59:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     2119
IP address blocks:        82.193.160.0/19 maxlen: 19
                          2a02:2580::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6392347 (0x618a1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
        Validity
            Not Before: Jan  1 02:59:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d834580676316d53795e4044d9358cbd4ec70b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c8:14:ca:20:a7:60:b5:e8:38:e9:71:48:f9:
                    c8:74:94:55:ae:c6:d2:62:1d:21:ce:e7:7c:c7:9f:
                    22:ea:cb:c7:8c:cc:48:6a:a2:25:67:cd:0d:be:1f:
                    b7:2f:3b:c2:bc:a0:3f:48:54:0d:d9:e9:6e:ed:70:
                    8c:ff:50:5b:89:b6:4a:ed:56:c9:00:da:fb:10:d8:
                    2b:2a:b1:10:0e:bd:d1:1c:28:f3:27:a9:c5:cb:5c:
                    14:b5:39:16:bb:89:37:55:4f:62:f2:92:f4:fb:11:
                    ae:6c:80:3e:fa:c8:48:5e:42:a6:61:9e:65:31:e2:
                    92:e1:bc:c6:e7:d1:52:59:51:79:6b:33:17:68:35:
                    21:92:e2:5d:54:26:a1:8b:8f:ad:2a:ce:c8:a1:fc:
                    25:5f:d6:39:e5:ac:9d:28:d8:33:06:0a:1b:b6:c4:
                    57:25:7b:fb:be:e4:34:79:69:43:f4:bc:0b:05:04:
                    35:df:de:4d:c0:44:96:c9:4b:13:bd:98:d8:ea:c4:
                    db:de:ea:6a:b0:3e:17:ce:ad:7c:61:bd:87:27:ff:
                    0d:39:8b:97:17:3e:40:bc:55:a4:1c:95:7c:0f:92:
                    9a:4d:30:f3:d5:ce:40:37:ac:98:20:b8:e7:af:62:
                    fb:d2:b9:9e:21:17:01:7f:32:0e:c0:d6:93:62:e0:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:34:58:06:76:31:6D:53:79:5E:40:44:D9:35:8C:BD:4E:C7:0B:48
            X509v3 Authority Key Identifier:
                keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/2DRYBnYxbVN5XkBE2TWMvU7HC0g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.193.160.0/19
                IPv6:
                  2a02:2580::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:4e:da:88:76:59:e0:ec:57:6a:b7:39:fa:c6:14:50:93:ed:
         e4:bc:a4:3a:de:a1:a4:80:c3:11:84:e3:10:21:96:be:78:84:
         b5:1b:13:09:8b:7b:09:f3:5e:ca:dc:1a:f5:bc:41:e8:a7:4b:
         fc:7e:fb:3d:2b:ae:18:20:fb:a2:90:d2:02:51:29:e4:e8:63:
         99:bc:ee:13:cf:02:1b:98:c9:59:ee:d6:d8:e2:1b:26:a3:f2:
         a5:87:63:4b:67:f1:d5:4b:e3:d6:a0:2c:f5:9b:31:3d:d1:6f:
         df:0d:8a:e3:5b:48:c1:09:12:26:d7:1b:6e:5b:f8:4e:b7:61:
         1a:44:02:36:1e:db:7c:5b:a7:60:30:ec:b8:61:21:08:ac:2c:
         fc:4d:a2:d0:cc:4d:dd:f1:06:41:6f:a1:20:69:47:07:22:f3:
         7d:a0:da:89:5a:2e:8b:3b:16:4b:9a:9c:d8:81:57:04:93:09:
         d0:ca:bd:1c:7c:18:c5:b8:bd:93:24:5d:b9:c9:36:eb:e4:86:
         ca:e2:c2:fa:1b:42:10:97:9d:d7:dd:6c:a8:57:1b:d6:ae:17:
         84:13:7e:8e:90:1e:b6:a7:a8:f7:b9:19:87:71:bf:b7:c7:61:
         55:aa:21:fb:ef:e0:38:09:f5:0c:48:6d:50:6f:e8:23:4b:28:
         03:9a:88:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIDYYobMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRl
M2Q4MTIxMWY0OTJlZGYwMjlhMjJjYzY2YzIwYTNiOTQ1ODM1OTAwHhcNMjIwMTAx
MDI1OTU3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhkODM0NTgwNjc2MzE2
ZDUzNzk1ZTQwNDRkOTM1OGNiZDRlYzcwYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArMgUyiCnYLXoOOlxSPnIdJRVrsbSYh0hzud8x58i6svHjMxI
aqIlZ80Nvh+3LzvCvKA/SFQN2elu7XCM/1BbibZK7VbJANr7ENgrKrEQDr3RHCjz
J6nFy1wUtTkWu4k3VU9i8pL0+xGubIA++shIXkKmYZ5lMeKS4bzG59FSWVF5azMX
aDUhkuJdVCahi4+tKs7IofwlX9Y55aydKNgzBgobtsRXJXv7vuQ0eWlD9LwLBQQ1
395NwESWyUsTvZjY6sTb3upqsD4Xzq18Yb2HJ/8NOYuXFz5AvFWkHJV8D5KaTTDz
1c5AN6yYILjnr2L70rmeIRcBfzIOwNaTYuBTYwIDAQABo4ICGDCCAhQwHQYDVR0O
BBYEFNg0WAZ2MW1TeV5ARNk1jL1OxwtIMB8GA1UdIwQYMBaAFN49gSEfSS7fApoi
zGbCCjuUWDWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
M2oyQklSOUpMdDhDbWlMTVpzSUtPNVJZTlpBLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC82Mi8yNmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3LzEv
MkRSWUJuWXhiVk41WGtCRTJUV012VTdIQzBnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8y
NmZjYmEtNzhhZS00ZDM4LWFjYWYtMzE0MjhiMDUwZmQ3LzEvM2oyQklSOUpMdDhD
bWlMTVpzSUtPNVJZTlpBLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4G
CCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFUsGgMA0EAgACMAcDBQAqAiWAMA0G
CSqGSIb3DQEBCwUAA4IBAQBbTtqIdlng7Fdqtzn6xhRQk+3kvKQ63qGkgMMRhOMQ
IZa+eIS1GxMJi3sJ817K3Br1vEHop0v8fvs9K64YIPuikNICUSnk6GOZvO4TzwIb
mMlZ7tbY4hsmo/Klh2NLZ/HVS+PWoCz1mzE90W/fDYrjW0jBCRIm1xtuW/hOt2Ea
RAI2Htt8W6dgMOy4YSEIrCz8TaLQzE3d8QZBb6EgaUcHIvN9oNqJWi6LOxZLmpzY
gVcEkwnQyr0cfBjFuL2TJF25yTbr5IbK4sL6G0IQl53X3WyoVxvWrheEE36OkB62
p6j3uRmHcb+3x2FVqiH77+A4CfUMSG1Qb+gjSygDmog6
-----END CERTIFICATE-----