Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/FQoD6hXA9wtJ787l2Q9i-VboRCw.roa
File:                     FQoD6hXA9wtJ787l2Q9i-VboRCw.roa (raw, json)
Hash identifier:          uGEkon1NcpHGAbmmcf/TOh1IxENV8JDZ7hjL+2+7vQs=
Subject key identifier:   15:0A:03:EA:15:C0:F7:0B:49:EF:CE:E5:D9:0F:62:F9:56:E8:44:2C
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       11BE7481
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/FQoD6hXA9wtJ787l2Q9i-VboRCw.roa
Signing time:             Mon 09 May 2022 04:35:45 +0000
ROA not before:           Mon 09 May 2022 04:35:45 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     203729
IP address blocks:        185.186.8.0/24 maxlen: 24
                          2a0b:6b80::/31 maxlen: 48
                          2a0b:6b85::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297694337 (0x11be7481)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: May  9 04:35:45 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=150a03ea15c0f70b49efcee5d90f62f956e8442c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:24:c1:bb:8c:ea:ff:2c:ed:73:d9:cf:ef:
                    f9:bc:92:82:1d:73:81:e6:95:55:2d:cd:84:94:44:
                    7b:fb:14:1a:d3:ee:95:99:08:4a:f8:a1:63:f6:97:
                    33:7e:42:ba:ef:1c:aa:90:81:b3:68:de:16:0e:86:
                    65:ba:52:bd:8b:1a:07:0b:6e:57:66:fd:75:fc:8d:
                    01:a4:4f:1a:95:bd:87:10:9e:d8:35:c5:94:67:9c:
                    0e:0c:5a:e5:d8:3c:98:39:6b:f8:bd:08:be:28:c8:
                    d9:31:28:b3:e1:0f:37:79:c2:2f:87:6b:db:f5:eb:
                    eb:4f:28:f8:49:a2:e9:60:6b:ae:6a:72:57:35:96:
                    ef:68:99:6c:13:3d:31:56:53:70:53:d7:e6:16:fc:
                    a3:6a:59:9c:75:46:ec:04:0f:e4:7f:88:8b:4e:67:
                    9a:dd:ac:d7:cd:af:57:bc:45:11:ff:9d:21:b5:0c:
                    60:8b:1e:85:ee:55:d0:db:49:5c:3d:bf:46:7f:1e:
                    97:29:d1:a4:94:b7:c1:ea:99:a4:5f:15:2b:3f:9d:
                    e0:6e:6f:7e:db:5c:e7:8c:b9:9c:42:14:76:c5:6b:
                    31:51:ca:14:c9:9b:76:77:65:c5:4f:47:c1:2f:f0:
                    32:dd:66:5f:fa:44:e8:81:00:1d:9a:a9:ce:19:41:
                    6a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0A:03:EA:15:C0:F7:0B:49:EF:CE:E5:D9:0F:62:F9:56:E8:44:2C
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/FQoD6hXA9wtJ787l2Q9i-VboRCw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.186.8.0/24
                IPv6:
                  2a0b:6b80::/31
                  2a0b:6b85::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:f4:fc:8f:b5:26:6c:12:70:f4:d2:b4:1a:41:dc:a5:67:18:
         5a:b6:77:ba:4e:20:ca:ef:84:aa:e6:e8:1d:8e:7f:44:f8:52:
         c2:7e:7b:ae:8d:da:11:24:c7:d4:0c:5f:ec:9f:09:9e:37:e6:
         6e:cb:0f:f1:00:b4:82:32:7e:72:f0:11:62:6a:2a:6b:45:75:
         aa:37:2d:2d:bd:b4:cc:66:6a:85:da:74:26:e2:b5:ed:cc:92:
         0d:56:31:19:99:14:8e:5e:45:a7:ed:b8:ef:32:43:3a:9a:93:
         d6:5e:22:8d:f6:ea:42:f2:70:a6:a2:64:d6:97:34:59:38:e1:
         85:71:f9:c2:c6:1a:85:8d:0d:b2:f0:c0:73:39:70:d6:64:cd:
         71:a0:a8:8b:aa:1a:0a:7e:9d:e1:8c:4a:a3:6e:00:ef:82:cc:
         33:eb:9b:d9:d4:c7:62:c6:97:b6:00:9f:11:32:f3:f9:90:b2:
         0a:71:f1:fe:fd:c7:1f:92:e4:01:f3:2b:03:d4:96:23:19:37:
         b6:fc:cb:7e:df:42:7b:ee:d2:09:55:1a:ce:21:94:b2:8e:d2:
         c1:eb:8f:c9:5f:e8:ad:2a:0c:0e:13:92:7c:04:f2:c4:2a:3a:
         36:9f:3c:63:06:0a:c5:14:f5:f2:bd:34:19:2d:62:d9:84:fe:
         66:1a:16:dd
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIEEb50gTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MzViYzliYjU0N2UyNzc4OGQyMjFiYzhiYmQ1ZmIwMmUwMjQ0ODBmMB4XDTIyMDUw
OTA0MzU0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTUwYTAzZWExNWMw
ZjcwYjQ5ZWZjZWU1ZDkwZjYyZjk1NmU4NDQyYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKYkJMG7jOr/LO1z2c/v+bySgh1zgeaVVS3NhJREe/sUGtPu
lZkISvihY/aXM35Cuu8cqpCBs2jeFg6GZbpSvYsaBwtuV2b9dfyNAaRPGpW9hxCe
2DXFlGecDgxa5dg8mDlr+L0IvijI2TEos+EPN3nCL4dr2/Xr608o+Emi6WBrrmpy
VzWW72iZbBM9MVZTcFPX5hb8o2pZnHVG7AQP5H+Ii05nmt2s182vV7xFEf+dIbUM
YIsehe5V0NtJXD2/Rn8elynRpJS3weqZpF8VKz+d4G5vfttc54y5nEIUdsVrMVHK
FMmbdndlxU9HwS/wMt1mX/pE6IEAHZqpzhlBajsCAwEAAaOCAh8wggIbMB0GA1Ud
DgQWBBQVCgPqFcD3C0nvzuXZD2L5VuhELDAfBgNVHSMEGDAWgBSDW8m7VH4neI0i
G8i71fsC4CRIDzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2cxdkp1MVItSjNpTklodkl1OVg3QXVBa1NBOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODQvOTYyZmIxLTNkZjAtNGVjMi1iNTBhLWIzNmEyNGQzOTQyNy8x
L0ZRb0Q2aFhBOXd0Sjc4N2wyUTlpLVZib1JDdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQv
OTYyZmIxLTNkZjAtNGVjMi1iNTBhLWIzNmEyNGQzOTQyNy8xL2cxdkp1MVItSjNp
Tklodkl1OVg3QXVBa1NBOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA1
BggrBgEFBQcBBwEB/wQmMCQwDAQCAAEwBgMEALm6CDAUBAIAAjAOAwUBKgtrgAMF
ACoLa4UwDQYJKoZIhvcNAQELBQADggEBAGH0/I+1JmwScPTStBpB3KVnGFq2d7pO
IMrvhKrm6B2Of0T4UsJ+e66N2hEkx9QMX+yfCZ435m7LD/EAtIIyfnLwEWJqKmtF
dao3LS29tMxmaoXadCbite3Mkg1WMRmZFI5eRaftuO8yQzqak9ZeIo326kLycKai
ZNaXNFk44YVx+cLGGoWNDbLwwHM5cNZkzXGgqIuqGgp+neGMSqNuAO+CzDPrm9nU
x2LGl7YAnxEy8/mQsgpx8f79xx+S5AHzKwPUliMZN7b8y37fQnvu0glVGs4hlLKO
0sHrj8lf6K0qDA4TknwE8sQqOjafPGMGCsUU9fK9NBktYtmE/mYaFt0=
-----END CERTIFICATE-----