Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/rCCXZc7VVT9PSzr9gPfBU5_eFz4.roa
File:                     rCCXZc7VVT9PSzr9gPfBU5_eFz4.roa (raw, json)
Hash identifier:          xwWU6JpZ/D4EePq/qYFS9rCouVhgzLsQ3hJ2gAHZEz4=
Subject key identifier:   AC:20:97:65:CE:D5:55:3F:4F:4B:3A:FD:80:F7:C1:53:9F:DE:17:3E
Certificate issuer:       /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial:       17D18E4F
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/rCCXZc7VVT9PSzr9gPfBU5_eFz4.roa
Signing time:             Sat 01 Jan 2022 00:54:30 +0000
ROA not before:           Sat 01 Jan 2022 00:54:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35108
IP address blocks:        80.233.156.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399609423 (0x17d18e4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
        Validity
            Not Before: Jan  1 00:54:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=ac209765ced5553f4f4b3afd80f7c1539fde173e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:0e:4a:51:99:77:9f:b0:af:31:07:01:c2:
                    82:94:f6:3a:81:fe:cb:8f:24:35:06:40:4c:e3:f2:
                    d6:fe:b8:73:47:1e:1d:b5:14:79:5e:4e:80:63:80:
                    15:71:dc:20:c2:1b:ea:ec:10:c0:3a:8c:da:5b:3b:
                    5b:de:2c:a7:77:ee:86:02:f0:17:0b:46:30:9b:9b:
                    f3:eb:91:27:36:a1:91:97:eb:4b:dd:91:67:d0:f8:
                    49:89:62:01:7c:73:4b:8c:b5:52:39:f9:de:e8:49:
                    61:b4:79:06:33:75:cd:16:67:e7:61:61:fb:00:d9:
                    67:35:d6:83:e2:c1:cf:3e:bc:38:0b:10:0e:36:0e:
                    27:8f:e3:35:3e:f0:79:c1:b9:f1:c1:7d:28:21:e1:
                    ec:25:8a:24:b8:58:55:3b:5f:eb:cc:1f:26:c9:c5:
                    27:6d:3d:14:c1:1a:e9:e1:84:cf:ff:d7:d3:8c:3f:
                    74:bc:62:f2:53:e5:2d:b9:99:37:6f:c0:f3:e4:c5:
                    7f:75:b8:46:a3:af:d5:5d:d7:a8:6d:d3:a1:4a:00:
                    b9:e8:84:98:c0:f3:cb:c9:e1:67:76:05:81:99:44:
                    3a:1c:81:71:f3:bc:11:8f:a4:be:e7:08:c5:58:8d:
                    d2:a3:c3:54:30:4a:dd:97:da:a3:09:dd:74:ca:d4:
                    94:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:20:97:65:CE:D5:55:3F:4F:4B:3A:FD:80:F7:C1:53:9F:DE:17:3E
            X509v3 Authority Key Identifier:
                keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/rCCXZc7VVT9PSzr9gPfBU5_eFz4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.233.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:d8:a9:89:b4:7d:04:ef:43:9d:34:df:25:d5:7b:68:f9:5d:
         a3:b5:c6:74:56:95:b2:19:7a:04:69:84:e8:15:33:ef:ff:ba:
         a8:d0:e2:65:db:8f:24:68:4a:78:73:23:b2:d7:a0:c3:e6:95:
         31:7c:40:0f:54:48:01:3a:f1:15:5e:5b:34:9e:6c:75:c8:70:
         21:a5:fa:50:fe:6c:77:12:24:0f:83:2b:29:72:de:d3:19:fb:
         47:0f:f0:83:58:e1:7d:a3:06:c8:c9:2a:ae:0e:87:79:36:d5:
         a0:a8:31:f7:68:ed:aa:60:fb:a0:bb:47:2d:ad:df:ee:ed:c8:
         91:21:46:24:82:d0:c0:a8:0b:55:f1:0f:6d:a7:29:ce:78:d3:
         55:fb:3b:b1:86:a3:1a:9f:db:26:4a:e3:f1:e4:6c:ee:c8:2f:
         62:85:76:06:c4:96:16:b5:94:8d:98:43:55:44:4a:06:33:c8:
         e7:ee:41:05:7e:f2:1d:67:a7:41:d2:84:31:51:76:32:b8:79:
         5c:f3:e3:49:b1:fb:0f:b3:59:bd:44:4d:a0:61:24:aa:c0:75:
         49:2c:cc:7d:85:43:b0:48:4c:94:39:39:f9:32:93:69:dd:67:
         9d:3d:64:04:eb:a7:8f:6a:3b:8e:e6:43:bb:16:31:d9:cb:e0:
         98:d9:61:fc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF9GOTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
MzM4OTdmYzdhOTYzZjE0MjE1ZDU4ZTE4MjQxNDRhYjE5ZmQ1ODEwMB4XDTIyMDEw
MTAwNTQzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWMyMDk3NjVjZWQ1
NTUzZjRmNGIzYWZkODBmN2MxNTM5ZmRlMTczZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJOADkpRmXefsK8xBwHCgpT2OoH+y48kNQZATOPy1v64c0ce
HbUUeV5OgGOAFXHcIMIb6uwQwDqM2ls7W94sp3fuhgLwFwtGMJub8+uRJzahkZfr
S92RZ9D4SYliAXxzS4y1Ujn53uhJYbR5BjN1zRZn52Fh+wDZZzXWg+LBzz68OAsQ
DjYOJ4/jNT7wecG58cF9KCHh7CWKJLhYVTtf68wfJsnFJ209FMEa6eGEz//X04w/
dLxi8lPlLbmZN2/A8+TFf3W4RqOv1V3XqG3ToUoAueiEmMDzy8nhZ3YFgZlEOhyB
cfO8EY+kvucIxViN0qPDVDBK3ZfaownddMrUlJUCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSsIJdlztVVP09LOv2A98FTn94XPjAfBgNVHSMEGDAWgBQTOJf8epY/FCFd
WOGCQUSrGf1YEDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0V6aVhfSHFXUHhRaFhWamhna0ZFcXhuOVdCQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYWMvOGJlNGFmLTYyYmUtNDE4MC1iZWM5LWYyYjg3ZjM4YjlkZC8x
L3JDQ1haYzdWVlQ5UFN6cjlnUGZCVTVfZUZ6NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMv
OGJlNGFmLTYyYmUtNDE4MC1iZWM5LWYyYjg3ZjM4YjlkZC8xL0V6aVhfSHFXUHhR
aFhWamhna0ZFcXhuOVdCQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlDpnDANBgkqhkiG9w0BAQsFAAOC
AQEAodipibR9BO9DnTTfJdV7aPldo7XGdFaVshl6BGmE6BUz7/+6qNDiZduPJGhK
eHMjstegw+aVMXxAD1RIATrxFV5bNJ5sdchwIaX6UP5sdxIkD4MrKXLe0xn7Rw/w
g1jhfaMGyMkqrg6HeTbVoKgx92jtqmD7oLtHLa3f7u3IkSFGJILQwKgLVfEPbacp
znjTVfs7sYajGp/bJkrj8eRs7sgvYoV2BsSWFrWUjZhDVURKBjPI5+5BBX7yHWen
QdKEMVF2Mrh5XPPjSbH7D7NZvURNoGEkqsB1SSzMfYVDsEhMlDk5+TKTad1nnT1k
BOunj2o7juZDuxYx2cvgmNlh/A==
-----END CERTIFICATE-----