Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/1kC98sWKcxE-_s5eeJa8QMTxYKc.roa
File:                     1kC98sWKcxE-_s5eeJa8QMTxYKc.roa (raw, json)
Hash identifier:          +vfDHMw+xXu5uVl2Y1jPGsESC3p29fyZ3o8heENiJ0U=
Subject key identifier:   D6:40:BD:F2:C5:8A:73:11:3E:FE:CE:5E:78:96:BC:40:C4:F1:60:A7
Certificate issuer:       /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial:       33000A56
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/1kC98sWKcxE-_s5eeJa8QMTxYKc.roa
Signing time:             Sat 01 Jan 2022 01:51:29 +0000
ROA not before:           Sat 01 Jan 2022 01:51:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     9042
IP address blocks:        193.5.66.0/24 maxlen: 24
                          193.5.76.0/22 maxlen: 22
                          146.109.0.0/16 maxlen: 24
                          193.247.180.0/24 maxlen: 24
                          2a01:4642:100::/40 maxlen: 40
                          2a01:4642:200::/40 maxlen: 40
                          2a01:4640:100::/40 maxlen: 40
                          2a01:4640:200::/40 maxlen: 40
                          2a01:4640:c800::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855640662 (0x33000a56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
        Validity
            Not Before: Jan  1 01:51:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d640bdf2c58a73113efece5e7896bc40c4f160a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:da:8b:d0:a0:c6:b8:31:59:bb:44:d3:83:
                    02:e8:8c:78:d1:82:f4:be:c4:f7:d7:b0:b8:a3:ab:
                    97:dd:c8:89:e6:30:1c:64:7a:3a:e7:27:9c:55:60:
                    a4:65:46:1d:92:27:e5:d5:0b:c5:60:f9:40:b5:b5:
                    48:2b:d9:25:51:c1:75:2f:ca:ae:b7:3a:d0:61:1b:
                    b0:ea:3a:86:9a:a8:70:07:9d:77:e9:19:c6:9f:75:
                    54:e6:a0:e1:f8:3c:86:cf:0a:5a:55:7f:78:44:e4:
                    aa:68:0b:8c:65:e1:5d:95:8e:23:cd:e9:c1:7c:53:
                    d1:28:8e:45:b2:fe:c0:88:87:9e:0e:b7:a3:ca:fa:
                    a5:5f:8b:80:17:f7:87:d8:08:47:d5:24:dc:b0:7c:
                    c1:62:e7:38:1e:54:85:88:1d:51:7a:72:01:b9:6b:
                    74:f5:d5:48:3d:da:77:da:f4:0e:1b:b7:41:fc:34:
                    7b:15:10:8b:6d:d3:01:68:78:6d:5c:53:7b:6c:0e:
                    69:85:49:c1:cb:05:27:a1:eb:b9:fe:e6:71:f1:f1:
                    4e:44:f6:33:ea:ad:a5:7f:f7:7d:cf:19:6c:1b:f9:
                    36:4b:df:f6:47:c9:80:cc:05:2e:d6:93:46:7d:ec:
                    65:b8:24:d6:b5:49:cf:8e:c7:74:05:c9:36:a9:78:
                    a7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:40:BD:F2:C5:8A:73:11:3E:FE:CE:5E:78:96:BC:40:C4:F1:60:A7
            X509v3 Authority Key Identifier:
                keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/1kC98sWKcxE-_s5eeJa8QMTxYKc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.109.0.0/16
                  193.5.66.0/24
                  193.5.76.0/22
                  193.247.180.0/24
                IPv6:
                  2a01:4640:100::-2a01:4640:2ff:ffff:ffff:ffff:ffff:ffff
                  2a01:4640:c800::/40
                  2a01:4642:100::-2a01:4642:2ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4f:be:8a:10:ab:53:11:6c:e8:a8:94:b5:e2:29:98:9c:a7:41:
         68:f9:13:cc:0f:3c:9d:d9:28:91:94:3a:80:4c:dd:d9:25:fb:
         b5:88:a1:d9:34:e9:1d:b0:f3:c8:6b:de:a5:09:19:7a:b4:1e:
         06:86:43:c9:37:8d:ad:10:06:70:05:d3:5c:78:00:8a:82:db:
         b8:c9:fd:83:95:83:cf:a3:18:cd:ba:ea:08:42:34:0e:41:3d:
         3b:a8:f8:c4:67:da:26:81:67:cd:4e:4b:8f:8a:7f:ce:b5:d4:
         a5:8b:46:0b:f3:4c:68:b3:00:44:c5:ba:b9:bc:db:d8:91:63:
         d8:02:9e:97:76:1c:fe:0f:69:01:b7:87:c4:c3:09:f4:cb:40:
         c8:fe:14:3a:58:bf:55:63:f5:7b:ce:08:20:a3:99:c3:0c:4d:
         de:18:e9:29:32:81:bd:b3:fc:3b:8a:14:11:c5:c5:d5:1a:7d:
         6b:6f:89:3b:d9:7e:c8:ec:3f:f7:8a:bc:2c:e3:04:00:df:be:
         89:2c:3b:0d:fd:05:1c:40:79:99:6d:7e:03:25:08:eb:52:1f:
         48:78:f3:ac:d8:b8:27:90:c1:af:e3:ca:bc:49:6c:31:4f:7d:
         3e:d6:bb:76:75:c1:32:58:17:fa:f4:28:11:88:18:04:b1:84:
         61:1c:01:91
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIEMwAKVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
Y2Y0Mjc3NmJlNTMyYmQwNTc1MzMyODU1ZDhjNDJjNDk1MmVkOTMxMB4XDTIyMDEw
MTAxNTEyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDY0MGJkZjJjNThh
NzMxMTNlZmVjZTVlNzg5NmJjNDBjNGYxNjBhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALcD2ovQoMa4MVm7RNODAuiMeNGC9L7E99ewuKOrl93IieYw
HGR6OucnnFVgpGVGHZIn5dULxWD5QLW1SCvZJVHBdS/Krrc60GEbsOo6hpqocAed
d+kZxp91VOag4fg8hs8KWlV/eETkqmgLjGXhXZWOI83pwXxT0SiORbL+wIiHng63
o8r6pV+LgBf3h9gIR9Uk3LB8wWLnOB5UhYgdUXpyAblrdPXVSD3ad9r0Dhu3Qfw0
exUQi23TAWh4bVxTe2wOaYVJwcsFJ6Hruf7mcfHxTkT2M+qtpX/3fc8ZbBv5Nkvf
9kfJgMwFLtaTRn3sZbgk1rVJz47HdAXJNql4pwkCAwEAAaOCAk4wggJKMB0GA1Ud
DgQWBBTWQL3yxYpzET7+zl54lrxAxPFgpzAfBgNVHSMEGDAWgBTs9Cd2vlMr0FdT
MoVdjELElS7ZMTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdQUW5kcjVUSzlCWFV6S0ZYWXhDeEpVdTJURS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODYvZWJkNDlmLWY1NjktNDE1Mi1iMGI4LTVlNTNjMjNiNTViMC8x
LzFrQzk4c1dLY3hFLV9zNWVlSmE4UU1UeFlLYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYv
ZWJkNDlmLWY1NjktNDE1Mi1iMGI4LTVlNTNjMjNiNTViMC8xLzdQUW5kcjVUSzlC
WFV6S0ZYWXhDeEpVdTJURS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBk
BggrBgEFBQcBBwEB/wRVMFMwHQQCAAEwFwMDAJJtAwQAwQVCAwQCwQVMAwQAwfe0
MDIEAgACMCwwEAMGACoBRkABAwYAKgFGQAIDBgAqAUZAyDAQAwYAKgFGQgEDBgAq
AUZCAjANBgkqhkiG9w0BAQsFAAOCAQEAT76KEKtTEWzoqJS14imYnKdBaPkTzA88
ndkokZQ6gEzd2SX7tYih2TTpHbDzyGvepQkZerQeBoZDyTeNrRAGcAXTXHgAioLb
uMn9g5WDz6MYzbrqCEI0DkE9O6j4xGfaJoFnzU5Lj4p/zrXUpYtGC/NMaLMARMW6
ubzb2JFj2AKel3Yc/g9pAbeHxMMJ9MtAyP4UOli/VWP1e84IIKOZwwxN3hjpKTKB
vbP8O4oUEcXF1Rp9a2+JO9l+yOw/94q8LOMEAN++iSw7Df0FHEB5mW1+AyUI61If
SHjzrNi4J5DBr+PKvElsMU99Pta7dnXBMlgX+vQoEYgYBLGEYRwBkQ==
-----END CERTIFICATE-----