Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/mzAtYwI4uNE_hvJv_IqJj3pEkOQ.roa
File:                     mzAtYwI4uNE_hvJv_IqJj3pEkOQ.roa (raw, json)
Hash identifier:          UUv5k+qCUOMLPAQLGgqowQMbzjnSaBig0Wws9X1NUxI=
Subject key identifier:   9B:30:2D:63:02:38:B8:D1:3F:86:F2:6F:FC:8A:89:8F:7A:44:90:E4
Certificate issuer:       /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial:       03FFE3AC
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/mzAtYwI4uNE_hvJv_IqJj3pEkOQ.roa
Signing time:             Sat 01 Jan 2022 13:54:43 +0000
ROA not before:           Sat 01 Jan 2022 13:54:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     40975
IP address blocks:        185.165.184.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67101612 (0x3ffe3ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
        Validity
            Not Before: Jan  1 13:54:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9b302d630238b8d13f86f26ffc8a898f7a4490e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:3b:c5:aa:15:bf:80:ff:e4:9e:f0:5a:d5:
                    e3:3e:15:62:fa:93:81:77:95:f8:c0:ec:2a:2c:40:
                    b9:22:09:a5:f4:45:6d:1d:49:b3:cc:0b:42:92:e8:
                    69:09:b0:65:03:32:8a:a2:4a:57:ad:de:6c:d1:81:
                    33:2f:00:42:37:d0:08:3a:4f:ab:f8:9b:a1:df:ac:
                    c1:da:96:bf:d6:85:0b:40:ef:f1:b5:50:c3:5b:66:
                    ff:6b:41:46:8e:29:bd:ab:1e:95:b1:e1:63:de:bd:
                    fd:a3:00:1d:b8:ca:0a:5a:13:51:27:dd:2c:12:54:
                    19:44:71:8b:13:56:47:c5:c6:e7:2d:d4:52:cb:8a:
                    12:fa:a4:99:5c:8d:40:27:9a:f2:d8:c8:e3:95:9a:
                    a1:0f:d2:38:88:da:19:26:f0:78:f8:de:64:16:89:
                    50:7a:61:58:8a:2f:4b:36:1d:70:14:6b:c1:ae:f6:
                    b0:ee:c4:e1:02:ac:89:5a:24:f8:c0:7f:17:de:ac:
                    8d:56:eb:ab:3d:bf:80:8b:7e:fd:e8:b3:d0:f6:9b:
                    ec:2a:bb:eb:aa:4f:d6:d5:ea:f9:57:a4:b8:a1:f9:
                    ae:b7:6c:eb:73:2a:e0:c0:56:84:ec:62:32:14:c9:
                    bf:0f:60:c9:58:00:a4:d6:e5:7f:9b:d6:4a:8d:7d:
                    39:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:30:2D:63:02:38:B8:D1:3F:86:F2:6F:FC:8A:89:8F:7A:44:90:E4
            X509v3 Authority Key Identifier:
                keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/mzAtYwI4uNE_hvJv_IqJj3pEkOQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.165.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:60:a7:d2:c1:41:20:9a:db:f0:fe:ce:54:d9:d6:56:7e:fb:
         65:e7:0e:09:68:2c:c2:41:24:8a:a2:05:ef:9f:58:96:c7:b7:
         8c:42:d5:44:46:8f:2c:9f:43:14:bc:e2:3e:af:03:c0:48:31:
         c7:ce:ab:7d:8e:b8:da:9b:c1:f1:5a:11:6e:fc:0a:95:dc:84:
         48:b9:80:62:26:22:95:ba:35:e5:2e:41:f4:38:dc:a1:24:fb:
         95:37:7e:21:4a:a8:86:07:24:e6:4f:cd:f6:89:50:3c:d8:7c:
         98:c7:cb:47:ac:4f:3f:41:5c:5e:ee:b2:0a:e8:d1:7b:d6:66:
         3c:93:7b:42:22:b6:5f:07:2e:fa:0b:5b:a1:1b:90:7f:aa:f5:
         cc:35:a7:7a:3c:24:df:1c:cb:60:be:c2:f4:e0:56:48:46:5a:
         e8:b1:cd:af:ee:e5:03:e7:19:ea:8b:ae:83:26:d9:be:34:cc:
         a6:98:dc:36:1c:56:93:df:21:e1:f1:27:21:e6:97:3b:74:50:
         95:11:9f:91:f9:7e:d2:54:78:3c:cc:39:a3:ac:8d:30:7d:72:
         f8:30:92:cd:4a:a0:a0:4a:dc:ba:37:2d:67:ed:e8:f7:3a:6b:
         77:23:a9:d9:01:33:d4:2a:e8:69:66:b0:78:05:2b:b1:e8:e5:
         e3:fc:a8:2b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA//jrDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OTgyNDdkM2Y4MTQ3MmRiYmEwNmRiZWE5YmQxOWM3ODVkMThiYWJlMB4XDTIyMDEw
MTEzNTQ0M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWIzMDJkNjMwMjM4
YjhkMTNmODZmMjZmZmM4YTg5OGY3YTQ0OTBlNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL30O8WqFb+A/+Se8FrV4z4VYvqTgXeV+MDsKixAuSIJpfRF
bR1Js8wLQpLoaQmwZQMyiqJKV63ebNGBMy8AQjfQCDpPq/ibod+swdqWv9aFC0Dv
8bVQw1tm/2tBRo4pvaselbHhY969/aMAHbjKCloTUSfdLBJUGURxixNWR8XG5y3U
UsuKEvqkmVyNQCea8tjI45WaoQ/SOIjaGSbwePjeZBaJUHphWIovSzYdcBRrwa72
sO7E4QKsiVok+MB/F96sjVbrqz2/gIt+/eiz0Pab7Cq766pP1tXq+VekuKH5rrds
63Mq4MBWhOxiMhTJvw9gyVgApNblf5vWSo19OdECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSbMC1jAji40T+G8m/8iomPekSQ5DAfBgNVHSMEGDAWgBTZgkfT+BRy27oG
2+qb0Zx4XRi6vjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJZSkgwX2dVY3R1NkJ0dnFtOUdjZUYwWXVyNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjgvNmRiYzk5LWJmYTktNGVmNy1hNzk4LWEzMDMyNjE1NjYwYy8x
L216QXRZd0k0dU5FX2h2SnZfSXFKajNwRWtPUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgv
NmRiYzk5LWJmYTktNGVmNy1hNzk4LWEzMDMyNjE1NjYwYy8xLzJZSkgwX2dVY3R1
NkJ0dnFtOUdjZUYwWXVyNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmluDANBgkqhkiG9w0BAQsFAAOC
AQEAL2Cn0sFBIJrb8P7OVNnWVn77ZecOCWgswkEkiqIF759Ylse3jELVREaPLJ9D
FLziPq8DwEgxx86rfY642pvB8VoRbvwKldyESLmAYiYilbo15S5B9DjcoST7lTd+
IUqohgck5k/N9olQPNh8mMfLR6xPP0FcXu6yCujRe9ZmPJN7QiK2Xwcu+gtboRuQ
f6r1zDWnejwk3xzLYL7C9OBWSEZa6LHNr+7lA+cZ6ouugybZvjTMppjcNhxWk98h
4fEnIeaXO3RQlRGfkfl+0lR4PMw5o6yNMH1y+DCSzUqgoErcujctZ+3o9zprdyOp
2QEz1CroaWaweAUrsejl4/yoKw==
-----END CERTIFICATE-----