Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/6YFVfwSFNzAJv2OKVHuPF1iXYHw.roa
File:                     6YFVfwSFNzAJv2OKVHuPF1iXYHw.roa (raw, json)
Hash identifier:          4gC39/+UdcVMeqfozvMEmep2jIwjdxi/Uf90GK10XmA=
Subject key identifier:   E9:81:55:7F:04:85:37:30:09:BF:63:8A:54:7B:8F:17:58:97:60:7C
Certificate issuer:       /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial:       05A85C63
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/6YFVfwSFNzAJv2OKVHuPF1iXYHw.roa
Signing time:             Sat 01 Jan 2022 07:04:08 +0000
ROA not before:           Sat 01 Jan 2022 07:04:08 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213323
IP address blocks:        185.248.139.0/24 maxlen: 24
                          2a0b:fb40::/46 maxlen: 46

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94919779 (0x5a85c63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
        Validity
            Not Before: Jan  1 07:04:08 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=e981557f0485373009bf638a547b8f175897607c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:2f:ff:52:29:ba:0c:c8:e5:4e:f4:bd:ef:
                    32:21:f3:11:3b:60:62:f0:53:d0:ab:1f:f0:ff:64:
                    bd:fc:74:33:c2:d5:b5:62:23:48:53:f1:22:c6:3a:
                    74:fd:95:71:ca:aa:cb:6b:e6:ef:66:b1:bd:63:28:
                    e7:0b:d6:c0:4c:a7:a4:bc:69:f1:b9:2b:f7:be:5f:
                    3c:e0:0b:37:e8:a0:57:ad:92:31:e1:29:4a:ef:b8:
                    b6:75:5d:4e:e4:d3:46:e9:bd:c6:17:db:d7:9a:08:
                    22:b4:e5:2d:0e:03:1e:e3:70:6f:f0:9d:2d:8d:a0:
                    0f:79:93:01:b9:68:68:51:3a:4f:af:89:bb:75:1e:
                    5b:aa:f3:c8:78:c9:40:4b:ca:16:0f:6a:98:96:b7:
                    85:22:6e:83:e4:8e:c0:51:73:58:bb:9a:a1:b2:5d:
                    b4:ad:10:fa:35:88:33:49:72:49:5a:b4:ea:57:2c:
                    91:64:06:db:96:2e:f7:51:e8:00:82:19:c6:60:15:
                    5e:01:39:1d:b0:ea:89:4c:47:93:ba:0b:60:33:c6:
                    c9:d8:d8:be:63:bf:ea:c7:62:23:16:3f:80:40:89:
                    dc:47:0f:95:be:57:f8:b6:e9:26:b6:82:fe:1e:05:
                    10:cf:d2:c7:2c:57:ad:b3:9c:5d:d4:1b:45:90:53:
                    94:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:81:55:7F:04:85:37:30:09:BF:63:8A:54:7B:8F:17:58:97:60:7C
            X509v3 Authority Key Identifier:
                keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/6YFVfwSFNzAJv2OKVHuPF1iXYHw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.139.0/24
                IPv6:
                  2a0b:fb40::/46

    Signature Algorithm: sha256WithRSAEncryption
         47:37:04:76:b1:12:f2:5b:fe:61:db:bb:8e:d0:71:cc:bf:34:
         54:e6:98:d9:61:46:63:db:79:0d:44:2d:40:54:86:60:ee:f3:
         c9:2f:70:91:fa:b6:69:95:08:f0:15:f9:89:77:10:08:5c:43:
         6d:60:23:87:45:84:ec:71:f3:83:a7:ea:ea:e7:97:ce:60:aa:
         58:bb:79:a3:9f:b9:af:d1:b6:d7:b6:a4:bc:84:2b:2a:13:09:
         4b:78:64:db:6e:3c:90:d1:d8:1e:a5:d9:e6:76:1e:1c:98:16:
         22:61:37:ac:52:65:b0:35:0e:5f:fc:0a:70:6d:95:dc:d0:62:
         29:d6:14:07:36:e8:28:ca:fc:a3:cf:86:75:31:c8:27:77:b3:
         4d:be:70:be:11:3c:59:aa:3c:59:a1:f3:2c:ad:7a:55:61:e7:
         d3:66:26:c3:a4:db:b2:87:35:fb:4f:2b:f4:29:db:f8:3d:8a:
         0a:ca:b4:d6:d4:9c:c0:a6:d3:c3:51:3c:c2:ad:b0:7b:42:3a:
         96:7e:9e:ae:ed:61:b3:59:0c:e2:0a:bd:64:27:9c:e8:fc:4a:
         fd:d4:b7:c6:f8:44:ee:1a:7b:5a:9f:ce:ed:81:55:41:64:f8:
         85:4e:f6:65:0c:7e:5a:f4:4a:a2:91:75:c1:bb:3a:db:1e:8e:
         73:42:80:b8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBahcYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Y2VmNThkNGNmYTM1NTQzZjg0ODhhMjc1NmU2OTI0ZTY0N2I0NTg5MB4XDTIyMDEw
MTA3MDQwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZTk4MTU1N2YwNDg1
MzczMDA5YmY2MzhhNTQ3YjhmMTc1ODk3NjA3YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKjHL/9SKboMyOVO9L3vMiHzETtgYvBT0Ksf8P9kvfx0M8LV
tWIjSFPxIsY6dP2Vccqqy2vm72axvWMo5wvWwEynpLxp8bkr975fPOALN+igV62S
MeEpSu+4tnVdTuTTRum9xhfb15oIIrTlLQ4DHuNwb/CdLY2gD3mTAbloaFE6T6+J
u3UeW6rzyHjJQEvKFg9qmJa3hSJug+SOwFFzWLuaobJdtK0Q+jWIM0lySVq06lcs
kWQG25Yu91HoAIIZxmAVXgE5HbDqiUxHk7oLYDPGydjYvmO/6sdiIxY/gECJ3EcP
lb5X+LbpJraC/h4FEM/SxyxXrbOcXdQbRZBTlNMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTpgVV/BIU3MAm/Y4pUe48XWJdgfDAfBgNVHSMEGDAWgBTc71jUz6NVQ/hI
iidW5pJOZHtFiTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzNPOVkxTS1qVlVQNFNJb25WdWFTVG1SN1JZay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWEvZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8x
LzZZRlZmd1NGTnpBSnYyT0tWSHVQRjFpWFlIdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEv
ZWE0NDU1LTc4MzYtNDRjNC1iMmEzLTJlY2UwNGUxODVjMi8xLzNPOVkxTS1qVlVQ
NFNJb25WdWFTVG1SN1JZay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALn4izAPBAIAAjAJAwcCKgv7QAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQBHNwR2sRLyW/5h27uO0HHMvzRU5pjZYUZj23kN
RC1AVIZg7vPJL3CR+rZplQjwFfmJdxAIXENtYCOHRYTscfODp+rq55fOYKpYu3mj
n7mv0bbXtqS8hCsqEwlLeGTbbjyQ0dgepdnmdh4cmBYiYTesUmWwNQ5f/ApwbZXc
0GIp1hQHNugoyvyjz4Z1Mcgnd7NNvnC+ETxZqjxZofMsrXpVYefTZibDpNuyhzX7
Tyv0Kdv4PYoKyrTW1JzAptPDUTzCrbB7QjqWfp6u7WGzWQziCr1kJ5zo/Er91LfG
+ETuGntan87tgVVBZPiFTvZlDH5a9EqikXXBuzrbHo5zQoC4
-----END CERTIFICATE-----