Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/g6EnyOz112Kxk9ETJRICtmXq2PE.roa
File:                     g6EnyOz112Kxk9ETJRICtmXq2PE.roa (raw, json)
Hash identifier:          8lMBlT8gcR4/b7kdPmlT4nMuE6OfMnEdk2HPu7ZYpCs=
Subject key identifier:   83:A1:27:C8:EC:F5:D7:62:B1:93:D1:13:25:12:02:B6:65:EA:D8:F1
Certificate issuer:       /CN=78703e7a62309bf027c1f10536926a19b7f14b1e
Certificate serial:       01886216
Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/g6EnyOz112Kxk9ETJRICtmXq2PE.roa
Signing time:             Sat 01 Jan 2022 10:00:32 +0000
ROA not before:           Sat 01 Jan 2022 10:00:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     50629
IP address blocks:        185.117.212.0/23 maxlen: 23
                          2a06:8780::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25715222 (0x1886216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e
        Validity
            Not Before: Jan  1 10:00:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=83a127c8ecf5d762b193d113251202b665ead8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:76:ad:67:6d:9d:37:b4:fd:e9:a8:11:58:
                    ba:eb:5b:8b:2f:73:c1:5e:96:52:70:1a:50:ba:ef:
                    13:10:ec:8f:63:d4:bb:d3:15:de:66:1e:16:dc:d2:
                    77:9a:b2:83:03:47:c9:70:41:8b:3b:c3:cf:44:c1:
                    c9:4d:01:d7:3c:ff:5f:d5:7d:a7:4f:63:f1:f9:fa:
                    fd:a4:93:31:ad:de:ed:e4:4f:a5:f9:0e:fb:16:89:
                    df:fd:5b:6d:05:e8:b4:7b:6a:cd:e7:57:87:ca:e8:
                    a6:ae:25:ec:40:89:04:ab:16:e0:f5:4a:96:f7:27:
                    cc:7e:14:1f:29:a6:36:3a:c0:e7:e0:23:4e:8c:05:
                    be:b0:c3:8d:07:cf:ff:48:c6:ba:16:cf:e3:26:d3:
                    19:6d:aa:0f:af:53:72:0b:70:f3:06:da:e6:26:cd:
                    a8:5f:92:01:e2:a3:86:36:45:61:b7:9d:c7:b3:29:
                    d2:bd:b6:45:83:ae:3c:95:37:79:82:89:1e:59:3f:
                    6c:d5:b8:8f:79:7b:70:bd:f3:01:0b:68:5b:b0:16:
                    83:c2:6d:63:da:01:af:e1:67:82:de:ff:bb:db:d6:
                    c9:28:7d:41:cb:0f:37:52:9f:8f:f7:bd:9e:8f:7c:
                    5d:d1:4d:be:88:fb:cd:8d:cc:44:d9:a8:2d:4c:96:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A1:27:C8:EC:F5:D7:62:B1:93:D1:13:25:12:02:B6:65:EA:D8:F1
            X509v3 Authority Key Identifier:
                keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/g6EnyOz112Kxk9ETJRICtmXq2PE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.212.0/23
                IPv6:
                  2a06:8780::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:52:d4:29:41:2b:3c:66:8f:18:d6:c5:a7:41:92:42:39:95:
         30:ac:37:f2:9b:38:da:11:d9:29:d4:e9:06:67:0e:13:46:ae:
         2b:35:46:0c:b9:09:e2:41:11:20:ab:49:4e:02:4b:da:36:24:
         db:b4:8d:e3:23:d5:41:17:91:f5:f4:69:9f:7f:e1:6e:7f:e8:
         53:2d:fa:f4:f7:6e:6f:6b:59:45:79:d6:f7:f7:09:61:59:b3:
         78:9b:28:c2:44:d1:e9:98:a8:20:21:1f:ff:28:89:15:78:98:
         c9:27:ff:0c:e5:92:07:0e:b7:cf:8f:4a:7b:35:03:ee:09:99:
         f4:16:79:5e:11:aa:db:bc:3e:3d:13:86:ce:45:ef:b5:ef:e9:
         c0:47:9c:b1:9b:c3:a7:39:8f:54:0b:4e:a8:15:ed:36:f3:a2:
         d3:62:2e:4b:1c:f2:3a:2b:b5:47:87:03:51:07:2d:b3:9f:8e:
         4f:92:a8:57:e8:09:88:91:bb:9a:32:99:2d:58:35:89:d3:27:
         9f:2d:39:ed:b1:87:b9:03:a0:92:9f:d6:24:9f:17:7b:47:3b:
         13:cf:2c:67:07:46:00:08:15:47:ee:ba:7d:51:6b:35:a9:ed:
         82:3c:3a:17:51:cf:bf:95:09:96:4a:1c:89:40:6a:3e:6d:06:
         3d:fe:bd:79
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAYhiFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
ODcwM2U3YTYyMzA5YmYwMjdjMWYxMDUzNjkyNmExOWI3ZjE0YjFlMB4XDTIyMDEw
MTEwMDAzMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODNhMTI3YzhlY2Y1
ZDc2MmIxOTNkMTEzMjUxMjAyYjY2NWVhZDhmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM8Fdq1nbZ03tP3pqBFYuutbiy9zwV6WUnAaULrvExDsj2PU
u9MV3mYeFtzSd5qygwNHyXBBizvDz0TByU0B1zz/X9V9p09j8fn6/aSTMa3e7eRP
pfkO+xaJ3/1bbQXotHtqzedXh8ropq4l7ECJBKsW4PVKlvcnzH4UHymmNjrA5+Aj
TowFvrDDjQfP/0jGuhbP4ybTGW2qD69Tcgtw8wba5ibNqF+SAeKjhjZFYbedx7Mp
0r22RYOuPJU3eYKJHlk/bNW4j3l7cL3zAQtoW7AWg8JtY9oBr+Fngt7/u9vWySh9
QcsPN1Kfj/e9no98XdFNvoj7zY3MRNmoLUyWiZsCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSDoSfI7PXXYrGT0RMlEgK2ZerY8TAfBgNVHSMEGDAWgBR4cD56YjCb8CfB
8QU2kmoZt/FLHjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2VIQS1lbUl3bV9BbndmRUZOcEpxR2JmeFN4NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWMvNWZkNGJmLTc0ZDktNDA3Mi1iNTU3LTA4NGNjYTFjODYyMy8x
L2c2RW55T3oxMTJLeGs5RVRKUklDdG1YcTJQRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMv
NWZkNGJmLTc0ZDktNDA3Mi1iNTU3LTA4NGNjYTFjODYyMy8xL2VIQS1lbUl3bV9B
bndmRUZOcEpxR2JmeFN4NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAbl11DANBAIAAjAHAwUAKgaHgDAN
BgkqhkiG9w0BAQsFAAOCAQEAUlLUKUErPGaPGNbFp0GSQjmVMKw38ps42hHZKdTp
BmcOE0auKzVGDLkJ4kERIKtJTgJL2jYk27SN4yPVQReR9fRpn3/hbn/oUy369Pdu
b2tZRXnW9/cJYVmzeJsowkTR6ZioICEf/yiJFXiYySf/DOWSBw63z49KezUD7gmZ
9BZ5XhGq27w+PROGzkXvte/pwEecsZvDpzmPVAtOqBXtNvOi02IuSxzyOiu1R4cD
UQcts5+OT5KoV+gJiJG7mjKZLVg1idMnny057bGHuQOgkp/WJJ8Xe0c7E88sZwdG
AAgVR+66fVFrNantgjw6F1HPv5UJlkociUBqPm0GPf69eQ==
-----END CERTIFICATE-----