Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/e7fkpcQtUwyd32-h_IvoTyTtFdE.roa
File:                     e7fkpcQtUwyd32-h_IvoTyTtFdE.roa (raw, json)
Hash identifier:          Pe9zu7zngjXbTPSAHHaKOISE3f9lAXxBQK2QOujK1Hs=
Subject key identifier:   7B:B7:E4:A5:C4:2D:53:0C:9D:DF:6F:A1:FC:8B:E8:4F:24:ED:15:D1
Certificate issuer:       /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial:       1051C008
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/e7fkpcQtUwyd32-h_IvoTyTtFdE.roa
Signing time:             Sat 05 Mar 2022 13:39:00 +0000
ROA not before:           Sat 05 Mar 2022 13:39:00 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41179
IP address blocks:        80.90.7.0/24 maxlen: 24
                          2a02:cb43:2003::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273793032 (0x1051c008)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
        Validity
            Not Before: Mar  5 13:39:00 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7bb7e4a5c42d530c9ddf6fa1fc8be84f24ed15d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9a:44:1e:8b:01:bc:cc:f8:54:96:ac:33:a7:
                    e5:59:aa:1a:9c:7d:a6:88:ee:f0:7f:48:2c:24:e2:
                    d4:c8:75:94:59:d1:b2:78:7e:47:00:1f:00:cb:48:
                    ff:b9:74:1a:73:3f:9c:56:56:53:14:4c:9a:84:e9:
                    60:29:3f:0a:bc:be:e1:d9:4f:ce:4a:14:fc:cf:a1:
                    6f:bb:1f:d9:fc:bf:5f:6c:7f:a8:4b:21:cb:0d:72:
                    25:02:39:fa:d3:58:a6:4a:39:e4:7d:c2:6b:1d:63:
                    34:01:3e:65:60:16:df:19:b7:cd:32:88:15:91:bd:
                    e9:5e:43:04:c8:1e:a5:93:2e:aa:be:1d:85:3d:30:
                    54:49:2b:17:e1:63:14:b4:0d:80:61:3d:02:c0:0c:
                    7e:d0:e0:cc:ad:d4:9c:6f:50:58:a2:f2:12:e3:06:
                    f9:f7:54:10:cc:9d:51:f8:16:c0:2e:1b:84:20:17:
                    bf:22:18:af:a3:d0:da:a7:8d:b8:1b:8f:71:ef:2a:
                    4c:aa:01:ca:1c:49:34:c4:fb:d8:bc:a4:2a:c3:dd:
                    69:b3:f8:a6:da:24:f0:2f:7f:5e:41:52:06:64:25:
                    e6:6f:08:c1:4d:d6:c5:36:a6:93:2b:fa:c2:8a:7e:
                    f5:06:7b:ef:07:e8:22:b5:fc:71:3d:dd:ec:f3:b3:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B7:E4:A5:C4:2D:53:0C:9D:DF:6F:A1:FC:8B:E8:4F:24:ED:15:D1
            X509v3 Authority Key Identifier:
                keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/e7fkpcQtUwyd32-h_IvoTyTtFdE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.90.7.0/24
                IPv6:
                  2a02:cb43:2003::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:44:8f:f4:2b:2b:c3:8f:7d:94:04:f9:2a:3c:f3:41:5d:30:
         ed:44:19:96:f8:91:6a:81:c4:88:6b:c3:2b:5d:7e:c5:95:e2:
         f9:34:17:18:eb:dc:2f:79:c0:46:ab:b0:c2:99:2b:8d:db:87:
         14:b5:68:c0:ad:d8:69:7c:8d:23:75:b5:e1:a8:d3:b7:ed:00:
         e6:2f:09:fe:4c:be:c8:c9:8d:ca:f3:8f:36:cc:ee:3a:14:a9:
         36:60:0f:a6:be:53:c0:ca:37:bd:6a:c2:37:ae:cc:c9:ec:52:
         d2:96:a6:b2:8b:2e:20:39:0c:24:66:a2:93:de:fb:e5:8f:c5:
         2b:57:e5:e2:e4:bb:94:f7:31:0d:00:90:f6:84:0b:01:cf:c4:
         f6:29:05:36:69:81:58:77:5f:91:57:60:0f:6c:9d:ca:6f:79:
         9a:36:72:b1:64:d3:7a:d0:52:ea:48:87:7e:ee:1c:64:cc:39:
         9e:52:9f:fa:72:c9:6a:b0:d2:1c:fb:3d:70:9c:0c:4c:f0:fe:
         f2:f5:22:a7:79:03:4a:0a:97:1d:a0:a0:e2:5c:95:a2:94:7d:
         6e:21:9a:d8:01:51:ce:c2:d2:41:ac:eb:7c:85:b1:ab:47:22:
         c3:0c:dc:0a:f5:de:37:8a:15:b4:bf:f6:b9:7d:51:f0:dd:38:
         f9:93:b2:2a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEEFHACDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YTMzMmY1YWRjMDQ2OTUzM2JiZGRjZmNlODk1N2VhZWU1OGJmZDYwMB4XDTIyMDMw
NTEzMzkwMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2JiN2U0YTVjNDJk
NTMwYzlkZGY2ZmExZmM4YmU4NGYyNGVkMTVkMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAPCaRB6LAbzM+FSWrDOn5VmqGpx9poju8H9ILCTi1Mh1lFnR
snh+RwAfAMtI/7l0GnM/nFZWUxRMmoTpYCk/Cry+4dlPzkoU/M+hb7sf2fy/X2x/
qEshyw1yJQI5+tNYpko55H3Cax1jNAE+ZWAW3xm3zTKIFZG96V5DBMgepZMuqr4d
hT0wVEkrF+FjFLQNgGE9AsAMftDgzK3UnG9QWKLyEuMG+fdUEMydUfgWwC4bhCAX
vyIYr6PQ2qeNuBuPce8qTKoByhxJNMT72LykKsPdabP4ptok8C9/XkFSBmQl5m8I
wU3WxTamkyv6wop+9QZ77wfoIrX8cT3d7POzgQ0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBR7t+SlxC1TDJ3fb6H8i+hPJO0V0TAfBgNVHSMEGDAWgBQKMy9a3ARpUzu9
3PzolX6u5Yv9YDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0NqTXZXdHdFYVZNN3Zkejg2SlYtcnVXTF9XQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjIvMjc4ZjY4LWMxNmYtNGEyZi04MGY3LTQxMzBmYTQ4YjU1OS8x
L2U3ZmtwY1F0VXd5ZDMyLWhfSXZvVHlUdEZkRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIv
Mjc4ZjY4LWMxNmYtNGEyZi04MGY3LTQxMzBmYTQ4YjU1OS8xL0NqTXZXdHdFYVZN
N3Zkejg2SlYtcnVXTF9XQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAFBaBzAPBAIAAjAJAwcAKgLLQyAD
MA0GCSqGSIb3DQEBCwUAA4IBAQBuRI/0KyvDj32UBPkqPPNBXTDtRBmW+JFqgcSI
a8MrXX7FleL5NBcY69wvecBGq7DCmSuN24cUtWjArdhpfI0jdbXhqNO37QDmLwn+
TL7IyY3K8482zO46FKk2YA+mvlPAyje9asI3rszJ7FLSlqayiy4gOQwkZqKT3vvl
j8UrV+Xi5LuU9zENAJD2hAsBz8T2KQU2aYFYd1+RV2APbJ3Kb3maNnKxZNN60FLq
SId+7hxkzDmeUp/6cslqsNIc+z1wnAxM8P7y9SKneQNKCpcdoKDiXJWilH1uIZrY
AVHOwtJBrOt8hbGrRyLDDNwK9d43ihW0v/a5fVHw3Tj5k7Iq
-----END CERTIFICATE-----