Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/uGDcad-6PpJAkL5X3x273mqXM3E.roa
File:                     uGDcad-6PpJAkL5X3x273mqXM3E.roa (raw, json)
Hash identifier:          KpW90TLy4tkAg1hcBDIDWBYHcF2ojrrUuDQrltIA1Mo=
Subject key identifier:   B8:60:DC:69:DF:BA:3E:92:40:90:BE:57:DF:1D:BB:DE:6A:97:33:71
Certificate issuer:       /CN=1e0c47ba799a060733383b8a4db36e84b62d315d
Certificate serial:       042074F8
Authority key identifier: 1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/uGDcad-6PpJAkL5X3x273mqXM3E.roa
Signing time:             Sat 01 Jan 2022 10:02:58 +0000
ROA not before:           Sat 01 Jan 2022 10:02:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212842
IP address blocks:        185.38.100.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69235960 (0x42074f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e0c47ba799a060733383b8a4db36e84b62d315d
        Validity
            Not Before: Jan  1 10:02:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b860dc69dfba3e924090be57df1dbbde6a973371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:02:2a:f7:dd:8a:fa:80:57:ba:4a:c4:dc:
                    31:e5:09:d6:0e:9e:f2:c0:79:fe:37:14:c3:87:68:
                    9e:47:d3:69:43:75:ee:90:ea:be:c7:ca:4d:9b:34:
                    4f:7f:75:bb:a5:e6:ff:c9:3f:60:43:65:ea:e1:58:
                    79:8d:e8:0e:ad:4f:c5:3a:44:b0:27:90:f2:4b:ba:
                    6c:6d:93:36:14:5f:b1:6c:ee:ca:59:57:41:af:c2:
                    ce:f1:91:f6:9d:62:e8:f6:c8:59:0c:ea:86:49:fb:
                    c6:81:2b:2a:e9:3a:95:ca:ed:b0:b5:13:66:13:a8:
                    01:5e:6e:31:4b:c4:e0:38:44:79:ef:99:e2:1d:92:
                    22:72:3b:f6:47:05:4b:48:79:93:42:a3:5c:af:b4:
                    62:95:c9:d1:9d:44:38:29:0c:96:b9:15:76:eb:a8:
                    fd:62:17:97:56:f6:f5:3f:e3:03:73:85:c8:0d:62:
                    50:ca:a3:5e:34:ba:9c:f1:af:e8:05:e1:65:cf:e6:
                    3d:1d:68:29:20:c8:25:23:a9:42:eb:6b:e4:51:b5:
                    5c:d6:d0:8b:09:1a:3b:a5:0b:ef:b7:08:94:27:77:
                    07:1c:09:32:d9:31:3a:bd:2a:f0:d4:0b:7e:72:ba:
                    95:21:84:15:bb:22:cd:90:f7:43:55:3f:e8:d9:f7:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:60:DC:69:DF:BA:3E:92:40:90:BE:57:DF:1D:BB:DE:6A:97:33:71
            X509v3 Authority Key Identifier:
                keyid:1E:0C:47:BA:79:9A:06:07:33:38:3B:8A:4D:B3:6E:84:B6:2D:31:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgxHunmaBgczODuKTbNuhLYtMV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/uGDcad-6PpJAkL5X3x273mqXM3E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e7fe5a-b626-4a32-a1cc-a327b8b56ed6/1/HgxHunmaBgczODuKTbNuhLYtMV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.38.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:7f:9f:ce:8b:b1:5a:9e:61:1d:1d:35:68:4f:b0:54:4f:15:
         c7:79:d8:38:5f:26:67:cc:af:dd:be:1b:b6:0e:00:57:7d:0d:
         03:f6:db:9a:29:b3:fa:f0:99:7b:52:10:fb:f1:f8:86:a7:54:
         ec:c7:d4:8a:f2:89:dd:46:07:67:3e:2d:8e:f8:4c:cc:ae:55:
         3f:fc:f1:bd:d3:fb:f1:89:83:c7:6c:7f:a6:32:4f:71:6b:54:
         75:1e:89:83:ab:cb:39:de:24:37:4f:2f:70:5f:50:97:47:da:
         0a:3a:56:87:d6:9b:2a:4e:c8:07:6e:e9:96:46:3c:ff:a7:ff:
         b1:99:a9:e0:3a:63:08:b4:a4:13:da:10:37:5c:3c:22:4d:d9:
         f5:34:40:56:95:5b:c0:33:ad:19:03:27:3e:58:d3:37:df:08:
         b3:a1:ba:00:2d:0a:c7:27:44:e4:29:43:11:6e:67:d2:86:37:
         4d:00:19:e1:aa:a4:cc:87:40:7c:c3:e2:2f:3c:cd:d3:a3:d3:
         6f:97:21:90:51:ea:af:aa:5b:76:2b:85:8a:1e:93:70:24:89:
         4f:1c:b8:e4:c4:82:c7:3a:0f:d4:23:91:ee:2e:18:da:0c:8c:
         29:85:23:b9:7f:05:93:f4:95:63:ef:e7:2d:76:a0:9c:01:9f:
         b7:8f:d6:f8
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBCB0+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZTBjNDdiYTc5OWEwNjA3MzMzODNiOGE0ZGIzNmU4NGI2MmQzMTVkMB4XDTIyMDEw
MTEwMDI1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjg2MGRjNjlkZmJh
M2U5MjQwOTBiZTU3ZGYxZGJiZGU2YTk3MzM3MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALfpAir33Yr6gFe6SsTcMeUJ1g6e8sB5/jcUw4donkfTaUN1
7pDqvsfKTZs0T391u6Xm/8k/YENl6uFYeY3oDq1PxTpEsCeQ8ku6bG2TNhRfsWzu
yllXQa/CzvGR9p1i6PbIWQzqhkn7xoErKuk6lcrtsLUTZhOoAV5uMUvE4DhEee+Z
4h2SInI79kcFS0h5k0KjXK+0YpXJ0Z1EOCkMlrkVduuo/WIXl1b29T/jA3OFyA1i
UMqjXjS6nPGv6AXhZc/mPR1oKSDIJSOpQutr5FG1XNbQiwkaO6UL77cIlCd3BxwJ
MtkxOr0q8NQLfnK6lSGEFbsizZD3Q1U/6Nn3hY8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS4YNxp37o+kkCQvlffHbveapczcTAfBgNVHSMEGDAWgBQeDEe6eZoGBzM4
O4pNs26Eti0xXTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hneEh1bm1hQmdjek9EdUtUYk51aExZdE1WMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzQvZTdmZTVhLWI2MjYtNGEzMi1hMWNjLWEzMjdiOGI1NmVkNi8x
L3VHRGNhZC02UHBKQWtMNVgzeDI3M21xWE0zRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQv
ZTdmZTVhLWI2MjYtNGEzMi1hMWNjLWEzMjdiOGI1NmVkNi8xL0hneEh1bm1hQmdj
ek9EdUtUYk51aExZdE1WMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbkmZDANBgkqhkiG9w0BAQsFAAOC
AQEAFn+fzouxWp5hHR01aE+wVE8Vx3nYOF8mZ8yv3b4btg4AV30NA/bbmimz+vCZ
e1IQ+/H4hqdU7MfUivKJ3UYHZz4tjvhMzK5VP/zxvdP78YmDx2x/pjJPcWtUdR6J
g6vLOd4kN08vcF9Ql0faCjpWh9abKk7IB27plkY8/6f/sZmp4DpjCLSkE9oQN1w8
Ik3Z9TRAVpVbwDOtGQMnPljTN98Is6G6AC0KxydE5ClDEW5n0oY3TQAZ4aqkzIdA
fMPiLzzN06PTb5chkFHqr6pbdiuFih6TcCSJTxy45MSCxzoP1COR7i4Y2gyMKYUj
uX8Fk/SVY+/nLXagnAGft4/W+A==
-----END CERTIFICATE-----