Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/Xi0gLD07eXbD6R-8GJ_BbiBGubs.roa
File:                     Xi0gLD07eXbD6R-8GJ_BbiBGubs.roa (raw, json)
Hash identifier:          goRtjk1HtIvj7ZtIJdh9v+kV/Yr77w9fI7ARUnzKG4g=
Subject key identifier:   5E:2D:20:2C:3D:3B:79:76:C3:E9:1F:BC:18:9F:C1:6E:20:46:B9:BB
Certificate issuer:       /CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
Certificate serial:       09172451
Authority key identifier: 93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/Xi0gLD07eXbD6R-8GJ_BbiBGubs.roa
Signing time:             Sat 01 Jan 2022 06:58:09 +0000
ROA not before:           Sat 01 Jan 2022 06:58:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51201
IP address blocks:        185.231.5.0/24 maxlen: 24
                          2a0c:3500:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152511569 (0x9172451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932e8078ea420afc1a78bf922a9a2f274679c8a8
        Validity
            Not Before: Jan  1 06:58:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5e2d202c3d3b7976c3e91fbc189fc16e2046b9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:75:80:df:3f:ca:e4:8c:14:12:67:ee:bc:
                    86:b7:dc:d7:4f:54:20:2a:e2:20:40:28:74:62:48:
                    2e:a8:e8:8c:ea:2e:5f:81:bc:c9:27:8f:79:30:f6:
                    12:63:81:55:58:4b:99:c5:65:3e:26:e6:64:24:0f:
                    25:cf:ab:97:43:11:32:31:37:5c:f0:16:ca:ba:a4:
                    54:f6:8d:c3:6e:45:c4:86:64:84:74:ad:7c:33:04:
                    7a:e9:d6:74:ad:d8:07:39:9a:85:de:1d:dc:58:31:
                    d6:38:89:4e:4c:1d:84:54:95:de:1a:8e:e0:bf:e8:
                    18:b2:f1:17:ae:cd:6f:24:0f:47:e1:24:fe:7a:b1:
                    be:4d:b7:a7:da:7a:bb:d0:bc:d5:d9:36:ff:eb:47:
                    e2:13:0d:53:41:42:b7:89:46:2a:ee:d7:30:65:8e:
                    72:bc:3d:88:68:9a:c8:70:72:b9:11:10:0f:84:08:
                    8d:5e:87:ea:ed:ae:71:99:c5:54:8a:42:92:aa:d8:
                    79:15:0a:5d:67:c2:53:70:5a:57:d6:26:d1:15:13:
                    98:f9:bf:73:e1:3f:bc:7e:09:3b:5f:ba:12:5f:24:
                    27:d0:1f:e0:ba:b3:a8:d2:b9:0c:c2:6c:89:96:1b:
                    7e:13:79:9e:84:86:8a:43:2c:ef:e5:af:5b:1a:3c:
                    4a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2D:20:2C:3D:3B:79:76:C3:E9:1F:BC:18:9F:C1:6E:20:46:B9:BB
            X509v3 Authority Key Identifier:
                keyid:93:2E:80:78:EA:42:0A:FC:1A:78:BF:92:2A:9A:2F:27:46:79:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/Xi0gLD07eXbD6R-8GJ_BbiBGubs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5eecf3-637f-450c-8489-34ba0738a341/1/ky6AeOpCCvwaeL-SKpovJ0Z5yKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.231.5.0/24
                IPv6:
                  2a0c:3500:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:fe:79:6c:de:ae:80:06:6b:99:2a:92:ac:71:4b:30:81:13:
         ed:a1:e8:d9:5f:73:00:cd:43:04:63:f4:e4:fa:db:b7:32:14:
         7d:42:69:b7:9c:5a:ed:08:f3:aa:f4:43:83:40:2f:8e:f1:b7:
         5f:80:a3:06:42:99:28:46:1f:15:d1:e3:ba:10:0b:d3:52:96:
         f4:93:72:14:68:82:e3:6e:8b:d2:20:10:b2:8f:e5:c1:39:9a:
         10:78:94:4e:13:ee:14:74:31:80:37:ab:51:c0:29:97:64:75:
         63:7d:7f:e1:05:51:a5:f4:65:b0:18:de:fa:7c:c3:e8:ff:f9:
         17:d9:f4:32:80:8b:4b:b4:2c:6d:95:f7:eb:da:f2:44:50:71:
         5f:74:4c:dc:fa:50:95:94:dc:f0:dd:ab:ff:e5:48:79:01:06:
         bd:d2:96:19:73:ca:f4:14:20:f7:de:f8:f3:3d:8d:76:2d:33:
         66:34:c3:d6:7d:dd:13:b5:74:31:0f:66:e8:c6:f8:0d:61:f4:
         4a:fe:20:a0:01:c1:70:c9:16:8d:2c:20:92:36:70:6d:b3:63:
         a0:6e:2d:b1:0b:71:29:0f:72:f8:9d:19:c1:3b:8e:e6:21:9c:
         a0:b2:7d:1b:28:a6:f8:b0:a1:44:e6:fe:3a:d4:8f:e4:db:10:
         c1:38:be:d6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECRckUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MzJlODA3OGVhNDIwYWZjMWE3OGJmOTIyYTlhMmYyNzQ2NzljOGE4MB4XDTIyMDEw
MTA2NTgwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWUyZDIwMmMzZDNi
Nzk3NmMzZTkxZmJjMTg5ZmMxNmUyMDQ2YjliYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMendYDfP8rkjBQSZ+68hrfc109UICriIEAodGJILqjojOou
X4G8ySePeTD2EmOBVVhLmcVlPibmZCQPJc+rl0MRMjE3XPAWyrqkVPaNw25FxIZk
hHStfDMEeunWdK3YBzmahd4d3Fgx1jiJTkwdhFSV3hqO4L/oGLLxF67NbyQPR+Ek
/nqxvk23p9p6u9C81dk2/+tH4hMNU0FCt4lGKu7XMGWOcrw9iGiayHByuREQD4QI
jV6H6u2ucZnFVIpCkqrYeRUKXWfCU3BaV9Ym0RUTmPm/c+E/vH4JO1+6El8kJ9Af
4LqzqNK5DMJsiZYbfhN5noSGikMs7+WvWxo8SikCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBReLSAsPTt5dsPpH7wYn8FuIEa5uzAfBgNVHSMEGDAWgBSTLoB46kIK/Bp4
v5Iqmi8nRnnIqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2t5NkFlT3BDQ3Z3YWVMLVNLcG92SjBaNXlLZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTYvNWVlY2YzLTYzN2YtNDUwYy04NDg5LTM0YmEwNzM4YTM0MS8x
L1hpMGdMRDA3ZVhiRDZSLThHSl9CYmlCR3Vicy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYv
NWVlY2YzLTYzN2YtNDUwYy04NDg5LTM0YmEwNzM4YTM0MS8xL2t5NkFlT3BDQ3Z3
YWVMLVNLcG92SjBaNXlLZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALnnBTAPBAIAAjAJAwcAKgw1AAAB
MA0GCSqGSIb3DQEBCwUAA4IBAQBU/nls3q6ABmuZKpKscUswgRPtoejZX3MAzUME
Y/Tk+tu3MhR9Qmm3nFrtCPOq9EODQC+O8bdfgKMGQpkoRh8V0eO6EAvTUpb0k3IU
aILjbovSIBCyj+XBOZoQeJROE+4UdDGAN6tRwCmXZHVjfX/hBVGl9GWwGN76fMPo
//kX2fQygItLtCxtlffr2vJEUHFfdEzc+lCVlNzw3av/5Uh5AQa90pYZc8r0FCD3
3vjzPY12LTNmNMPWfd0TtXQxD2boxvgNYfRK/iCgAcFwyRaNLCCSNnBts2Ogbi2x
C3EpD3L4nRnBO47mIZygsn0bKKb4sKFE5v461I/k2xDBOL7W
-----END CERTIFICATE-----