Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/aNWcEjmyXFcgNKr0ADa-xIDEV1A.roa
File:                     aNWcEjmyXFcgNKr0ADa-xIDEV1A.roa (raw, json)
Hash identifier:          dvCanX73A/oIRM4MRimzbC9Ox8deAp5zpU093sICh8g=
Subject key identifier:   68:D5:9C:12:39:B2:5C:57:20:34:AA:F4:00:36:BE:C4:80:C4:57:50
Certificate issuer:       /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial:       0A728B27
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/aNWcEjmyXFcgNKr0ADa-xIDEV1A.roa
Signing time:             Thu 19 May 2022 10:59:29 +0000
ROA not before:           Thu 19 May 2022 10:59:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     8280
IP address blocks:        185.82.37.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175278887 (0xa728b27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
        Validity
            Not Before: May 19 10:59:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=68d59c1239b25c572034aaf40036bec480c45750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7b:39:57:b6:35:c9:a7:1d:12:a2:b4:29:7c:
                    19:cd:75:73:9e:44:8d:4a:1c:04:a7:e0:2a:f4:61:
                    ab:81:7c:d3:f4:f2:d1:e0:6f:55:d3:33:34:c0:1a:
                    e3:26:7f:0a:3f:31:59:9a:a9:34:bf:90:d0:5a:77:
                    8c:08:0a:58:db:56:d5:6b:8f:95:07:42:1c:35:9a:
                    3e:16:68:20:49:41:ad:06:63:3b:4b:cf:ca:d9:2a:
                    47:b9:76:e5:fb:9b:20:51:ed:06:9b:cc:87:37:c1:
                    eb:5c:28:8e:53:c4:f9:17:a2:61:b7:6f:47:79:72:
                    7d:a4:33:c7:3a:fd:76:23:1a:34:b7:10:1e:2e:4e:
                    ec:18:c8:ec:c1:86:d4:bc:49:cd:9f:43:38:fe:1c:
                    2d:b3:52:22:c2:17:6d:54:d1:b0:07:3f:43:a1:98:
                    45:f7:f1:7f:0e:25:04:87:ad:dc:50:4d:a7:f2:05:
                    5e:a0:10:9b:51:dd:7f:bb:39:c1:89:fb:9a:48:bb:
                    fe:af:e0:09:72:98:29:b3:66:4a:0d:3d:10:b6:5e:
                    7a:4c:11:22:d7:ea:25:27:db:e2:6e:65:90:54:8c:
                    ba:ea:da:65:58:94:b9:36:22:8d:52:99:ce:b6:51:
                    4a:8b:f1:39:48:7c:fb:b4:a9:8c:09:b0:94:66:62:
                    19:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D5:9C:12:39:B2:5C:57:20:34:AA:F4:00:36:BE:C4:80:C4:57:50
            X509v3 Authority Key Identifier:
                keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/aNWcEjmyXFcgNKr0ADa-xIDEV1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:56:80:19:e0:6e:f2:08:20:11:19:9d:19:49:97:5a:da:9d:
         54:a4:c8:1c:d3:eb:48:cd:92:60:a4:6e:31:b6:c0:2a:f3:b1:
         81:78:38:94:76:e8:a1:a7:c9:52:78:4d:af:99:15:77:81:ce:
         0c:d0:c8:60:8f:82:46:36:d4:ee:5a:b3:29:90:aa:a5:f3:ea:
         be:00:ca:4f:c7:5c:0b:a7:72:35:eb:9d:19:8f:ee:9d:fb:57:
         50:21:ff:91:92:65:4d:70:60:83:29:77:41:5e:b8:be:ba:35:
         55:ee:bf:f6:9a:1b:8e:10:de:4d:2f:f1:8b:dc:92:9a:47:93:
         86:a2:bc:08:b6:74:c1:b8:6f:1e:bf:f4:0d:83:dd:21:03:be:
         2e:01:14:f4:af:a3:23:e5:74:a5:b4:ed:aa:1f:ea:7c:37:05:
         10:fe:7a:0e:7f:1d:70:fa:c2:ec:e5:9f:a3:9f:bb:7a:19:a1:
         bc:43:a6:88:36:de:6a:e3:8a:b3:7c:01:94:a2:35:d1:3b:10:
         c4:02:3a:e6:fb:d3:76:8a:8e:bc:62:e8:de:fa:70:56:a2:75:
         d3:f6:49:7f:c1:53:92:cf:7d:9b:e7:84:86:4a:2e:b6:dc:17:
         2e:1f:21:76:02:cb:7b:dc:bb:93:de:86:a1:7d:80:08:39:4b:
         d3:0c:e2:b3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECnKLJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzkyMDQyMGY3MjJmN2Q3ZjNjNGIyNWE4MGUxN2Q3MjkwMTcxMTgwMB4XDTIyMDUx
OTEwNTkyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjhkNTljMTIzOWIy
NWM1NzIwMzRhYWY0MDAzNmJlYzQ4MGM0NTc1MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKd7OVe2NcmnHRKitCl8Gc11c55EjUocBKfgKvRhq4F80/Ty
0eBvVdMzNMAa4yZ/Cj8xWZqpNL+Q0Fp3jAgKWNtW1WuPlQdCHDWaPhZoIElBrQZj
O0vPytkqR7l25fubIFHtBpvMhzfB61wojlPE+ReiYbdvR3lyfaQzxzr9diMaNLcQ
Hi5O7BjI7MGG1LxJzZ9DOP4cLbNSIsIXbVTRsAc/Q6GYRffxfw4lBIet3FBNp/IF
XqAQm1Hdf7s5wYn7mki7/q/gCXKYKbNmSg09ELZeekwRItfqJSfb4m5lkFSMuura
ZViUuTYijVKZzrZRSovxOUh8+7SpjAmwlGZiGX0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRo1ZwSObJcVyA0qvQANr7EgMRXUDAfBgNVHSMEGDAWgBRnkgQg9yL31/PE
slqA4X1ykBcRgDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o1SUVJUGNpOTlmenhMSmFnT0Y5Y3BBWEVZQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODIvMjdjYTE2LWY0NmItNGY4ZS1iOTJlLTVlZDA4OWMxYWZlZC8x
L2FOV2NFam15WEZjZ05LcjBBRGEteElERVYxQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIv
MjdjYTE2LWY0NmItNGY4ZS1iOTJlLTVlZDA4OWMxYWZlZC8xL1o1SUVJUGNpOTlm
enhMSmFnT0Y5Y3BBWEVZQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlSJTANBgkqhkiG9w0BAQsFAAOC
AQEAWVaAGeBu8gggERmdGUmXWtqdVKTIHNPrSM2SYKRuMbbAKvOxgXg4lHbooafJ
UnhNr5kVd4HODNDIYI+CRjbU7lqzKZCqpfPqvgDKT8dcC6dyNeudGY/unftXUCH/
kZJlTXBggyl3QV64vro1Ve6/9pobjhDeTS/xi9ySmkeThqK8CLZ0wbhvHr/0DYPd
IQO+LgEU9K+jI+V0pbTtqh/qfDcFEP56Dn8dcPrC7OWfo5+7ehmhvEOmiDbeauOK
s3wBlKI10TsQxAI65vvTdoqOvGLo3vpwVqJ10/ZJf8FTks99m+eEhkouttwXLh8h
dgLLe9y7k96GoX2ACDlL0wzisw==
-----END CERTIFICATE-----