Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1-JhRFtuHEVYO-XOLV9m3Je-fCuA.roa
File:                     1-JhRFtuHEVYO-XOLV9m3Je-fCuA.roa (raw, json)
Hash identifier:          gAHdOcONHHaCSZgPRBe2uv0lzFc8ApRGK3UYjQglGxw=
Subject key identifier:   F8:98:51:16:DB:87:11:56:0E:F9:73:8B:57:D9:B7:25:EF:9F:0A:E0
Certificate issuer:       /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial:       38E995
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1-JhRFtuHEVYO-XOLV9m3Je-fCuA.roa
Signing time:             Thu 31 Mar 2022 20:22:03 +0000
ROA not before:           Thu 31 Mar 2022 20:22:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57327
IP address blocks:        193.53.81.0/24 maxlen: 24
                          2a0a:3507::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3729813 (0x38e995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
        Validity
            Not Before: Mar 31 20:22:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f8985116db8711560ef9738b57d9b725ef9f0ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:b5:1e:ae:4f:c7:ef:81:0a:bc:43:5a:4e:
                    f3:9b:24:a3:0a:9a:f9:8d:5d:3d:ea:e5:f7:e1:cc:
                    ec:0a:ea:c1:73:92:29:43:13:26:af:d1:3f:81:82:
                    d6:73:1d:17:f7:ef:40:bf:82:e6:22:96:c8:8a:21:
                    dc:98:63:88:b6:b5:21:96:9d:f3:d4:5c:06:35:f3:
                    10:58:84:3b:5e:55:8d:f4:b3:f7:a1:fb:4f:c5:cf:
                    ab:05:5f:af:f5:b6:de:3a:85:40:4f:00:78:8c:db:
                    12:c5:87:ad:87:0c:c1:2e:fa:d3:70:05:57:66:37:
                    c5:10:ac:bd:7f:3b:88:8c:fa:21:a4:55:fe:62:56:
                    6f:7b:e2:91:e7:ac:8e:93:e1:f0:32:fb:ee:52:37:
                    c0:7c:de:cd:41:57:39:1c:12:86:38:61:60:22:b9:
                    03:64:b0:37:dd:0b:62:6b:0c:f1:a1:2e:0c:06:8b:
                    a6:af:ad:5a:7b:ed:37:2f:a4:fc:c6:2a:df:76:fe:
                    49:41:43:21:7e:85:32:82:06:64:df:75:6a:b9:96:
                    6c:af:be:61:1e:97:94:3b:43:1f:d1:fe:73:a2:6b:
                    e4:27:08:f0:f8:1f:5c:c4:3d:26:83:dd:20:d8:f5:
                    81:42:29:26:cd:f9:14:2d:3f:58:87:89:38:f2:fe:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:98:51:16:DB:87:11:56:0E:F9:73:8B:57:D9:B7:25:EF:9F:0A:E0
            X509v3 Authority Key Identifier:
                keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/1-JhRFtuHEVYO-XOLV9m3Je-fCuA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.53.81.0/24
                IPv6:
                  2a0a:3507::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:39:8b:57:ed:b5:e7:67:4d:61:ad:a4:da:f8:6f:41:92:00:
         55:c1:62:27:d9:5a:94:73:a0:03:c9:62:41:ae:1c:fe:fc:66:
         c6:e8:b7:a2:45:66:11:e4:d7:8f:a0:36:9c:db:5f:04:9c:53:
         9b:09:29:7a:2a:f7:4a:25:66:62:4d:02:f0:13:8d:93:64:a5:
         10:96:57:2f:bb:a2:06:00:bf:b0:cd:6d:eb:df:b7:04:9a:3b:
         16:39:26:be:e3:73:47:36:55:54:4e:a9:6d:b6:88:3f:a5:b8:
         a0:6d:f8:e7:ef:75:42:7d:b0:33:7e:74:50:8c:5b:1e:8d:91:
         14:4b:b7:eb:51:35:17:9a:38:01:b5:a3:db:d7:e4:c1:05:e0:
         92:f5:a2:2e:86:85:0b:95:22:0d:23:f3:db:8a:df:19:7b:fb:
         af:55:d2:ac:32:9a:76:1c:99:2c:f3:6b:88:b9:14:45:d4:33:
         12:01:cf:2d:5e:f9:1f:d9:fa:1a:fa:18:18:47:56:d6:90:8c:
         45:d2:22:48:e0:7b:58:be:c1:b9:30:af:67:8d:fe:bb:c4:d1:
         36:c2:fe:05:7d:62:34:c9:50:42:a2:97:d5:96:91:23:61:4e:
         14:d8:ff:ec:7b:2f:1d:f3:81:cc:60:59:35:31:f5:60:c9:98:
         fe:c2:73:cd
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIDOOmVMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGE3
ZmQzZjg5MzM1ZGNmODI4NjY2YjI4ZmFkOGFlOTkzYmQ0NDg4NzgwHhcNMjIwMzMx
MjAyMjAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmODk4NTExNmRiODcx
MTU2MGVmOTczOGI1N2Q5YjcyNWVmOWYwYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsS+1Hq5Px++BCrxDWk7zmySjCpr5jV096uX34czsCurBc5Ip
QxMmr9E/gYLWcx0X9+9Av4LmIpbIiiHcmGOItrUhlp3z1FwGNfMQWIQ7XlWN9LP3
oftPxc+rBV+v9bbeOoVATwB4jNsSxYethwzBLvrTcAVXZjfFEKy9fzuIjPohpFX+
YlZve+KR56yOk+HwMvvuUjfAfN7NQVc5HBKGOGFgIrkDZLA33QtiawzxoS4MBoum
r61ae+03L6T8xirfdv5JQUMhfoUyggZk33VquZZsr75hHpeUO0Mf0f5zomvkJwjw
+B9cxD0mg90g2PWBQikmzfkULT9Yh4k48v5CtwIDAQABo4ICGzCCAhcwHQYDVR0O
BBYEFPiYURbbhxFWDvlzi1fZtyXvnwrgMB8GA1UdIwQYMBaAFKf9P4kzXc+Chmay
j62K6ZO9RIh4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
cF8wX2lUTmR6NEtHWnJLUHJZcnBrNzFFaUhnLmNlcjCBjgYIKwYBBQUHAQsEgYEw
fzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83ZC8zODhmZDgtYzgxZi00ZTcxLWFmNTItYzBiMWFkNDM1Yjk1LzEv
MS1KaFJGdHVIRVZZTy1YT0xWOW0zSmUtZkN1QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2Qv
Mzg4ZmQ4LWM4MWYtNGU3MS1hZjUyLWMwYjFhZDQzNWI5NS8xL3BfMF9pVE5kejRL
R1pyS1ByWXJwazcxRWlIZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAME1UTAPBAIAAjAJAwcAKgo1BwAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAhOYtX7bXnZ01hraTa+G9BkgBVwWIn2VqUc6AD
yWJBrhz+/GbG6LeiRWYR5NePoDac218EnFObCSl6KvdKJWZiTQLwE42TZKUQllcv
u6IGAL+wzW3r37cEmjsWOSa+43NHNlVUTqlttog/pbigbfjn73VCfbAzfnRQjFse
jZEUS7frUTUXmjgBtaPb1+TBBeCS9aIuhoULlSINI/Pbit8Ze/uvVdKsMpp2HJks
82uIuRRF1DMSAc8tXvkf2foa+hgYR1bWkIxF0iJI4HtYvsG5MK9njf67xNE2wv4F
fWI0yVBCopfVlpEjYU4U2P/sey8d84HMYFk1MfVgyZj+wnPN
-----END CERTIFICATE-----