Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/DrxWBQud8GNuZX9V19ZwqQj5mKI.roa
File:                     DrxWBQud8GNuZX9V19ZwqQj5mKI.roa (raw, json)
Hash identifier:          lAUdZOLmSwS/+R0efCkbohJRwjwk+QIzeJEzvxYAHYI=
Subject key identifier:   0E:BC:56:05:0B:9D:F0:63:6E:65:7F:55:D7:D6:70:A9:08:F9:98:A2
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       082F5601
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/DrxWBQud8GNuZX9V19ZwqQj5mKI.roa
Signing time:             Sat 01 Jan 2022 05:06:15 +0000
ROA not before:           Sat 01 Jan 2022 05:06:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208612
IP address blocks:        45.92.43.0/24 maxlen: 24
                          2a0e:1cc0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137319937 (0x82f5601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Jan  1 05:06:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=0ebc56050b9df0636e657f55d7d670a908f998a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:da:b1:c2:49:c6:44:ba:38:93:72:95:a8:
                    c5:0a:47:d5:20:d9:80:3a:0f:ed:fd:6b:4e:e6:9d:
                    0a:5c:98:73:ff:2b:07:ae:de:48:73:d7:ce:fb:f8:
                    44:74:3c:fd:89:4c:a8:9d:5a:f5:9b:90:bb:0f:49:
                    fc:ef:8b:76:33:86:95:98:32:78:ba:5a:06:22:87:
                    28:c3:86:9b:ae:66:c6:be:a8:ff:b3:b2:b1:18:de:
                    6c:bf:83:03:11:66:76:4b:d3:55:be:8f:01:8f:d3:
                    62:ce:9a:78:c9:a9:7f:92:ca:44:4b:31:76:07:ea:
                    59:94:8e:ed:75:25:7c:17:2d:fd:e5:a4:c3:8b:4d:
                    84:2f:b6:36:f7:70:fb:2b:69:92:a2:b9:60:5f:03:
                    9a:bb:07:a2:0d:c3:26:93:a4:3c:4d:1b:ee:a4:1b:
                    3c:fc:0f:66:93:43:89:3c:17:a6:9c:c9:e2:30:e6:
                    0e:e2:18:b3:80:ca:bc:16:2c:ef:00:d7:54:e3:34:
                    50:6e:7b:65:36:bc:12:da:ec:f1:00:1a:dc:9a:d7:
                    a5:9a:64:6e:5a:9e:de:b9:4d:f8:19:05:06:2a:ae:
                    4b:f7:db:5c:c4:1d:71:cb:72:e5:e7:1c:37:cd:e1:
                    e8:8c:51:d2:be:d0:e0:3a:eb:be:48:ba:ae:e6:33:
                    0f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BC:56:05:0B:9D:F0:63:6E:65:7F:55:D7:D6:70:A9:08:F9:98:A2
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/DrxWBQud8GNuZX9V19ZwqQj5mKI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.43.0/24
                IPv6:
                  2a0e:1cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:d1:59:55:ec:e1:2c:b4:8a:49:00:4f:37:ec:81:12:d7:31:
         97:c3:88:72:84:d8:cb:b5:cc:72:1b:70:aa:96:b7:47:d2:22:
         60:03:b1:f9:0b:12:77:01:f6:a8:b7:f3:f8:c4:27:6e:d7:07:
         b2:07:8e:8f:30:7d:cc:ea:cc:c3:5b:c1:93:56:73:92:62:8f:
         bd:5c:bd:51:94:a5:cc:a3:3d:c1:c1:97:28:44:df:de:7b:28:
         a0:6a:ad:fc:ba:79:39:ed:a4:69:e1:41:c0:5d:f9:87:eb:6c:
         57:2b:3a:02:db:a7:18:90:8c:14:af:bb:4b:24:12:d5:ab:18:
         92:1f:4f:d6:3c:3f:5a:b6:f9:69:0f:b4:9c:ae:38:3c:94:31:
         72:f5:6e:ee:87:a0:cd:67:18:5b:0c:99:a4:e3:36:fa:e4:26:
         d0:8e:b6:39:d7:81:d9:81:70:9d:b7:15:78:3d:2b:a1:de:df:
         20:f2:1c:ee:0c:6d:4b:a0:5e:15:d3:c1:8b:b1:b5:1d:b1:96:
         39:e3:90:97:04:b5:97:bb:34:8c:98:a5:e7:58:36:1f:ea:9a:
         b4:cb:86:38:6e:04:4f:a6:92:9f:d3:89:ce:ba:14:df:19:1a:
         ca:2c:82:73:75:8b:d5:b1:a3:d5:a1:d3:e5:ad:4c:e4:fb:12:
         4b:36:46:07
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECC9WATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZTMxMzY3ZGY2ZDE4NjEwNzFjOTJiYWU3MjY1MjMzMjZmNDViYTJhMB4XDTIyMDEw
MTA1MDYxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGViYzU2MDUwYjlk
ZjA2MzZlNjU3ZjU1ZDdkNjcwYTkwOGY5OThhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMsz2rHCScZEujiTcpWoxQpH1SDZgDoP7f1rTuadClyYc/8r
B67eSHPXzvv4RHQ8/YlMqJ1a9ZuQuw9J/O+LdjOGlZgyeLpaBiKHKMOGm65mxr6o
/7OysRjebL+DAxFmdkvTVb6PAY/TYs6aeMmpf5LKREsxdgfqWZSO7XUlfBct/eWk
w4tNhC+2Nvdw+ytpkqK5YF8DmrsHog3DJpOkPE0b7qQbPPwPZpNDiTwXppzJ4jDm
DuIYs4DKvBYs7wDXVOM0UG57ZTa8Etrs8QAa3JrXpZpkblqe3rlN+BkFBiquS/fb
XMQdccty5eccN83h6IxR0r7Q4Drrvki6ruYzDyUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQOvFYFC53wY25lf1XX1nCpCPmYojAfBgNVHSMEGDAWgBTuMTZ99tGGEHHJ
K65yZSMyb0W6KjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdqRTJmZmJSaGhCeHlTdXVjbVVqTW05RnVpby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODEvMWJiNGRkLWU5YzQtNGQzZC05YTNiLTExNTlkYmZiZWQ1NC8x
L0RyeFdCUXVkOEdOdVpYOVYxOVp3cVFqNW1LSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODEv
MWJiNGRkLWU5YzQtNGQzZC05YTNiLTExNTlkYmZiZWQ1NC8xLzdqRTJmZmJSaGhC
eHlTdXVjbVVqTW05RnVpby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAC1cKzAPBAIAAjAJAwcAKg4cwAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQDF0VlV7OEstIpJAE837IES1zGXw4hyhNjLtcxy
G3CqlrdH0iJgA7H5CxJ3Afaot/P4xCdu1weyB46PMH3M6szDW8GTVnOSYo+9XL1R
lKXMoz3BwZcoRN/eeyigaq38unk57aRp4UHAXfmH62xXKzoC26cYkIwUr7tLJBLV
qxiSH0/WPD9atvlpD7Scrjg8lDFy9W7uh6DNZxhbDJmk4zb65CbQjrY514HZgXCd
txV4PSuh3t8g8hzuDG1LoF4V08GLsbUdsZY545CXBLWXuzSMmKXnWDYf6pq0y4Y4
bgRPppKf04nOuhTfGRrKLIJzdYvVsaPVodPlrUzk+xJLNkYH
-----END CERTIFICATE-----