Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/U3twd0qlZ7TezJT-XiuoFiuVbO4.roa
File:                     U3twd0qlZ7TezJT-XiuoFiuVbO4.roa (raw, json)
Hash identifier:          YIh/iMK6X44S8G8zJUc4S5RX+f1xsh1EC4apqE+p3y0=
Subject key identifier:   53:7B:70:77:4A:A5:67:B4:DE:CC:94:FE:5E:2B:A8:16:2B:95:6C:EE
Certificate issuer:       /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial:       38515EEC
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/U3twd0qlZ7TezJT-XiuoFiuVbO4.roa
Signing time:             Sat 01 Jan 2022 05:02:04 +0000
ROA not before:           Sat 01 Jan 2022 05:02:04 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     19905
IP address blocks:        92.54.34.0/24 maxlen: 24
                          2a02:a0:9::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944856812 (0x38515eec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
        Validity
            Not Before: Jan  1 05:02:04 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=537b70774aa567b4decc94fe5e2ba8162b956cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:61:5f:9e:c1:29:cc:f6:f1:c0:14:6b:a5:
                    9b:91:98:a8:05:19:76:50:70:58:89:1c:28:cb:48:
                    32:c9:a2:39:84:f4:32:38:98:ab:2c:a2:f5:f0:3c:
                    f6:9d:38:77:2a:08:3c:0b:4f:92:ee:e5:33:2b:e1:
                    11:f4:22:5a:b6:1c:28:38:97:83:a8:6d:b6:c1:6a:
                    71:18:9a:d7:96:6d:cf:c6:84:57:03:e7:94:b3:e6:
                    98:6c:ff:62:26:79:51:f1:e3:c0:c7:8d:1b:6e:69:
                    c0:7f:b5:1b:93:af:95:a8:70:70:87:f4:f3:51:da:
                    b8:af:9d:6a:66:83:f0:e2:e8:4b:28:eb:b3:dd:4c:
                    e4:70:cb:18:95:d4:e7:6a:48:7e:b7:87:21:fd:3e:
                    57:25:73:ec:76:8a:dd:f1:13:4d:cb:73:2c:f6:92:
                    40:d2:84:d6:42:75:3c:e2:de:16:3f:54:7e:51:44:
                    b7:45:f8:b7:d3:5f:0b:59:6a:ee:96:d5:27:f1:8f:
                    2e:cc:09:85:3c:14:2e:dd:29:99:4c:c5:30:1c:ed:
                    7d:53:b8:ba:e8:3c:e4:29:d0:42:00:52:60:b2:2e:
                    39:db:94:0b:8b:88:36:8f:b8:02:5d:99:d5:da:0b:
                    d7:90:10:00:39:5c:d2:f5:a7:66:da:05:e9:6f:7d:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7B:70:77:4A:A5:67:B4:DE:CC:94:FE:5E:2B:A8:16:2B:95:6C:EE
            X509v3 Authority Key Identifier:
                keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/U3twd0qlZ7TezJT-XiuoFiuVbO4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.54.34.0/24
                IPv6:
                  2a02:a0:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:87:76:4b:b7:d0:3b:50:aa:49:32:0c:de:f1:ab:46:12:
         a6:87:81:ea:40:11:a3:9d:a2:ce:dd:ea:85:8f:13:87:9a:96:
         a6:88:32:a1:cf:6d:fb:22:dc:7e:33:1a:80:30:cd:4d:91:2b:
         da:56:f9:c8:e0:aa:0f:25:ca:11:1c:90:b9:54:74:74:6a:86:
         60:f5:49:16:aa:74:2f:14:1b:66:d1:06:c6:5e:56:4d:3d:5d:
         81:8f:26:f4:e5:c5:39:a2:d8:7f:3e:08:8b:07:69:fc:a9:0f:
         91:49:8a:78:88:a6:f7:f2:83:60:66:55:06:27:c8:e4:38:c3:
         95:dd:1a:c2:70:36:62:6f:72:79:92:4a:d6:ab:08:7b:c5:50:
         11:fd:cc:fa:37:76:26:d4:c0:9e:b3:0c:15:1d:2c:e7:1c:6e:
         7f:61:51:91:c3:bb:25:e9:9a:a2:18:3d:42:a7:b5:a7:c7:36:
         8d:e1:2d:fb:8c:d4:11:2f:d6:e1:94:16:2c:e3:4e:2c:77:b5:
         de:36:08:59:62:38:08:b8:44:7d:4a:25:3b:96:aa:bd:57:c9:
         4c:9f:fb:db:83:5c:bb:ea:cb:e4:06:d5:62:79:c2:22:22:b1:
         b3:8e:ca:be:1d:bf:f6:5e:70:4b:14:b7:3f:a9:26:f4:a6:85:
         41:ef:80:77
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEOFFe7DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
Y2EwNTNkZmU3NzEyZWU2M2RiZmY2NDBmYWUwNzMwOGQ2NmNlNzQ4MB4XDTIyMDEw
MTA1MDIwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTM3YjcwNzc0YWE1
NjdiNGRlY2M5NGZlNWUyYmE4MTYyYjk1NmNlZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJwJYV+ewSnM9vHAFGulm5GYqAUZdlBwWIkcKMtIMsmiOYT0
MjiYqyyi9fA89p04dyoIPAtPku7lMyvhEfQiWrYcKDiXg6httsFqcRia15Ztz8aE
VwPnlLPmmGz/YiZ5UfHjwMeNG25pwH+1G5OvlahwcIf081HauK+damaD8OLoSyjr
s91M5HDLGJXU52pIfreHIf0+VyVz7HaK3fETTctzLPaSQNKE1kJ1POLeFj9UflFE
t0X4t9NfC1lq7pbVJ/GPLswJhTwULt0pmUzFMBztfVO4uug85CnQQgBSYLIuOduU
C4uINo+4Al2Z1doL15AQADlc0vWnZtoF6W99ee0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRTe3B3SqVntN7MlP5eK6gWK5Vs7jAfBgNVHSMEGDAWgBRcoFPf53Eu5j2/
9kD64HMI1mznSDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1hLQlQzLWR4THVZOXZfWkEtdUJ6Q05aczUwZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWMvZWJiZDJjLWJmNWEtNDZkYS04NmZiLTgwYzNlYTRmZDAwMC8x
L1UzdHdkMHFsWjdUZXpKVC1YaXVvRml1VmJPNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMv
ZWJiZDJjLWJmNWEtNDZkYS04NmZiLTgwYzNlYTRmZDAwMC8xL1hLQlQzLWR4THVZ
OXZfWkEtdUJ6Q05aczUwZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAFw2IjAPBAIAAjAJAwcAKgIAoAAJ
MA0GCSqGSIb3DQEBCwUAA4IBAQBEOod2S7fQO1CqSTIM3vGrRhKmh4HqQBGjnaLO
3eqFjxOHmpamiDKhz237Itx+MxqAMM1NkSvaVvnI4KoPJcoRHJC5VHR0aoZg9UkW
qnQvFBtm0QbGXlZNPV2Bjyb05cU5oth/PgiLB2n8qQ+RSYp4iKb38oNgZlUGJ8jk
OMOV3RrCcDZib3J5kkrWqwh7xVAR/cz6N3Ym1MCeswwVHSznHG5/YVGRw7sl6Zqi
GD1Cp7WnxzaN4S37jNQRL9bhlBYs404sd7XeNghZYjgIuER9SiU7lqq9V8lMn/vb
g1y76svkBtViecIiIrGzjsq+Hb/2XnBLFLc/qSb0poVB74B3
-----END CERTIFICATE-----