Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/Sb8C_HKAcN8mIHqfE-LDicHWw4E.roa
File:                     Sb8C_HKAcN8mIHqfE-LDicHWw4E.roa (raw, json)
Hash identifier:          KKL1FX10a8aS0/r5XDb/kl1K8oyF1S2/GWj8OM9DKgY=
Subject key identifier:   49:BF:02:FC:72:80:70:DF:26:20:7A:9F:13:E2:C3:89:C1:D6:C3:81
Certificate issuer:       /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial:       03FE8A4E
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/Sb8C_HKAcN8mIHqfE-LDicHWw4E.roa
Signing time:             Sat 14 May 2022 05:05:44 +0000
ROA not before:           Sat 14 May 2022 05:05:44 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210443
IP address blocks:        185.248.50.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67013198 (0x3fe8a4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
        Validity
            Not Before: May 14 05:05:44 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=49bf02fc728070df26207a9f13e2c389c1d6c381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:81:d3:40:99:2b:d8:36:55:07:02:e4:8a:bb:
                    6a:1c:50:67:90:c5:9b:56:39:44:30:9b:34:73:b7:
                    ec:06:74:ef:a2:8f:af:6d:e7:24:c7:6f:f8:80:38:
                    a4:d1:c4:98:b8:f8:fb:75:97:2e:09:bf:ef:21:6e:
                    df:ce:68:8f:79:1b:8a:f7:d6:7b:21:08:5a:06:e0:
                    ff:f4:92:c7:1e:2f:97:6e:42:0d:aa:90:79:4d:c8:
                    82:2b:e2:dd:21:db:31:c5:f3:d5:b5:d5:48:c8:c2:
                    54:91:b0:2e:5a:65:d0:a4:2c:6e:19:cc:d6:a4:5e:
                    21:07:05:43:be:9b:84:0e:d3:c6:93:d5:fa:02:6d:
                    a4:65:49:c3:56:1f:de:7d:43:29:eb:cd:5a:73:e8:
                    c2:ab:71:c0:f6:4e:5d:1e:11:82:9f:04:4d:fb:06:
                    ae:89:2e:9d:3c:e5:fd:1e:e7:66:f1:02:8f:82:5b:
                    de:de:e3:ae:20:57:10:a5:fa:36:b9:b0:b6:00:b1:
                    41:d9:3b:92:b7:d6:09:87:4e:b4:92:7f:d5:f8:17:
                    86:f9:09:49:c2:45:0e:39:ac:7e:c3:06:bf:33:e9:
                    5e:0d:2f:62:b1:2b:4d:5d:ae:bd:de:59:fc:ce:6b:
                    52:34:fe:d0:e7:79:83:60:5e:c6:6e:c7:cd:2f:00:
                    f2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BF:02:FC:72:80:70:DF:26:20:7A:9F:13:E2:C3:89:C1:D6:C3:81
            X509v3 Authority Key Identifier:
                keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/Sb8C_HKAcN8mIHqfE-LDicHWw4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:26:08:e8:a5:01:85:6c:a9:7c:86:6b:6c:b4:32:d2:d6:b7:
         24:7e:ff:9a:af:21:b6:0f:8c:8e:ae:43:ac:47:44:45:df:fb:
         a5:bc:27:f3:0c:ac:69:ad:66:ea:3a:5d:df:47:4f:86:47:4e:
         d1:59:cc:a8:d6:45:c4:b6:35:6b:0f:8f:71:67:8f:77:0e:c7:
         ba:1a:12:83:0c:59:75:d0:b8:71:a8:3a:69:cc:d2:fc:a7:48:
         0d:58:19:b7:4e:fb:8f:b3:0f:50:b8:ed:b2:55:aa:10:1d:ad:
         48:ad:4c:83:ec:9c:2b:01:b1:04:1e:05:a2:0f:86:b2:3f:76:
         2e:8d:11:9e:e3:08:fb:e6:23:a0:8e:89:48:11:22:cc:80:96:
         15:8b:22:c0:1c:b7:0a:7d:90:89:c6:c6:24:8f:ee:11:78:72:
         b7:3b:89:6b:b8:ab:6f:33:b0:ef:8d:98:01:31:c6:d7:e2:66:
         99:fa:3c:ff:47:74:fc:8f:13:1e:12:be:52:e9:45:db:27:57:
         25:00:5d:d8:e2:81:f6:ab:de:7b:5a:fc:41:9e:ce:1d:94:ef:
         a6:37:34:60:c3:d7:6a:6c:07:74:b0:6b:80:5e:9b:30:11:9b:
         76:ef:0c:e5:c8:67:5a:79:6a:13:42:de:1a:1e:63:a7:3a:cc:
         07:97:48:da
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA/6KTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YzQxNDExZTkzZTI1ZDVlYzY1MDk5NTY5YjFiNWM1ZmFkYzFhZTNkMB4XDTIyMDUx
NDA1MDU0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDliZjAyZmM3Mjgw
NzBkZjI2MjA3YTlmMTNlMmMzODljMWQ2YzM4MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMWB00CZK9g2VQcC5Iq7ahxQZ5DFm1Y5RDCbNHO37AZ076KP
r23nJMdv+IA4pNHEmLj4+3WXLgm/7yFu385oj3kbivfWeyEIWgbg//SSxx4vl25C
DaqQeU3Igivi3SHbMcXz1bXVSMjCVJGwLlpl0KQsbhnM1qReIQcFQ76bhA7TxpPV
+gJtpGVJw1Yf3n1DKevNWnPowqtxwPZOXR4Rgp8ETfsGrokunTzl/R7nZvECj4Jb
3t7jriBXEKX6NrmwtgCxQdk7krfWCYdOtJJ/1fgXhvkJScJFDjmsfsMGvzPpXg0v
YrErTV2uvd5Z/M5rUjT+0Od5g2Bexm7HzS8A8tsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRJvwL8coBw3yYgep8T4sOJwdbDgTAfBgNVHSMEGDAWgBTcQUEek+JdXsZQ
mVabG1xfrcGuPTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNFRkJIcFBpWFY3R1VKbFdteHRjWDYzQnJqMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOGQvM2Q0NzMxLThjZjMtNDMyNy1hZTZhLTUxMzg3ZDE2MGJhOS8x
L1NiOENfSEtBY044bUlIcWZFLUxEaWNIV3c0RS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQv
M2Q0NzMxLThjZjMtNDMyNy1hZTZhLTUxMzg3ZDE2MGJhOS8xLzNFRkJIcFBpWFY3
R1VKbFdteHRjWDYzQnJqMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbn4MjANBgkqhkiG9w0BAQsFAAOC
AQEAKCYI6KUBhWypfIZrbLQy0ta3JH7/mq8htg+Mjq5DrEdERd/7pbwn8wysaa1m
6jpd30dPhkdO0VnMqNZFxLY1aw+PcWePdw7HuhoSgwxZddC4cag6aczS/KdIDVgZ
t077j7MPULjtslWqEB2tSK1Mg+ycKwGxBB4Fog+Gsj92Lo0RnuMI++YjoI6JSBEi
zICWFYsiwBy3Cn2QicbGJI/uEXhytzuJa7irbzOw742YATHG1+Jmmfo8/0d0/I8T
HhK+UulF2ydXJQBd2OKB9qvee1r8QZ7OHZTvpjc0YMPXamwHdLBrgF6bMBGbdu8M
5chnWnlqE0LeGh5jpzrMB5dI2g==
-----END CERTIFICATE-----