Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JyhfBTO_yAc5xsD7DI4jDai2rZU.roa
File:                     JyhfBTO_yAc5xsD7DI4jDai2rZU.roa (raw, json)
Hash identifier:          WX4ya8/CTU5BDznTzaZuhciylMp7mXqPX5Udp44N6yc=
Subject key identifier:   27:28:5F:05:33:BF:C8:07:39:C6:C0:FB:0C:8E:23:0D:A8:B6:AD:95
Certificate issuer:       /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial:       018412D3F82817895CC35A68E4C182C178BA
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JyhfBTO_yAc5xsD7DI4jDai2rZU.roa
Signing time:             Wed 26 Oct 2022 05:46:32 +0000
ROA not before:           Wed 26 Oct 2022 05:46:32 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     0
IP address blocks:        45.92.2.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:12:d3:f8:28:17:89:5c:c3:5a:68:e4:c1:82:c1:78:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
        Validity
            Not Before: Oct 26 05:46:32 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=27285f0533bfc80739c6c0fb0c8e230da8b6ad95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:55:0c:9c:38:1c:fd:4b:9e:18:ab:c0:ec:85:
                    3b:9f:ed:4c:37:80:ba:4e:b5:3f:6d:7d:61:0a:42:
                    06:b4:a3:61:fc:55:95:de:3d:e7:67:91:c6:ed:37:
                    3a:77:9e:18:8a:c0:30:8f:ce:b8:7c:db:54:53:8e:
                    62:69:e0:bc:ed:69:fc:53:f5:c3:71:24:27:df:fd:
                    12:43:8b:0d:3d:2e:61:01:de:fe:c8:1a:ef:92:27:
                    cd:dd:4f:1c:95:7f:91:c3:83:25:55:16:79:72:21:
                    46:b3:85:fa:cb:8c:68:a8:94:ee:30:d4:d4:5b:24:
                    fb:a2:b1:6e:41:92:d4:94:6c:30:88:b8:12:48:bb:
                    e4:88:d1:90:4a:bc:07:fe:4d:a9:72:83:19:f9:d3:
                    3d:d4:cb:4d:38:4d:a2:8d:b4:39:77:29:d6:7a:2e:
                    11:6f:9a:27:0e:55:b4:50:5b:6f:b2:91:78:d5:a8:
                    fb:97:54:4e:cc:4f:41:55:8a:2c:aa:c7:5c:58:a8:
                    77:3a:23:d4:1c:b1:82:90:15:f4:bd:79:f3:0b:c0:
                    6e:5a:31:c5:3d:4a:eb:b0:4a:fd:f1:43:b8:89:22:
                    92:e1:7b:81:29:79:3e:26:be:6e:8d:00:0d:ec:90:
                    60:0f:25:b3:cc:5e:5f:8b:cc:a2:61:16:0b:94:3b:
                    ab:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:28:5F:05:33:BF:C8:07:39:C6:C0:FB:0C:8E:23:0D:A8:B6:AD:95
            X509v3 Authority Key Identifier:
                keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JyhfBTO_yAc5xsD7DI4jDai2rZU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:1d:90:68:9c:2d:00:97:d0:54:46:30:4f:ec:fa:3d:63:30:
         7a:b6:7b:04:cf:a7:27:ab:56:8c:87:d3:05:64:f3:67:25:f4:
         37:c8:c1:8b:48:86:0f:d0:a2:0e:f2:27:79:a2:c7:40:d7:c0:
         0b:c2:d9:c4:43:60:e4:43:44:da:1d:d1:d6:7d:e9:f3:5b:e7:
         2b:85:3f:0c:c2:fb:34:cd:31:c3:a3:93:1e:14:21:fe:03:1c:
         53:6f:e5:2f:aa:24:18:0a:0e:44:5c:f1:5d:bb:5c:b0:99:9f:
         66:ec:4c:a2:3b:ac:97:ed:a7:5e:d5:db:c8:db:ea:36:82:75:
         5a:d5:f9:2d:4a:87:1b:c7:f3:28:dc:71:25:8d:98:7f:8d:d3:
         fa:b5:5a:1b:c7:25:a1:7a:37:02:bf:3e:7d:82:59:a9:09:04:
         e8:07:f3:25:10:d9:0e:c1:a3:76:20:20:cb:21:2a:1a:ed:37:
         7b:b1:9e:56:93:0b:a4:00:65:65:18:15:ee:9c:4e:da:40:2f:
         8e:1b:4d:ba:fa:f6:b3:34:6b:31:e5:14:8d:df:a6:82:2b:9d:
         74:34:3f:7f:f8:b8:60:df:85:f0:22:f2:85:a1:f1:a3:9c:de:
         cd:5b:b8:02:c3:af:51:99:64:84:00:94:cc:df:19:ee:1a:19:
         ad:12:4b:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYQS0/goF4lcw1po5MGCwXi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjIxMDI2MDU0NjMyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzI4NWYwNTMzYmZjODA3MzljNmMwZmIwYzhlMjMwZGE4YjZhZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFUMnDgc/UueGKvA7IU7n+1MN4C6
TrU/bX1hCkIGtKNh/FWV3j3nZ5HG7Tc6d54YisAwj864fNtUU45iaeC87Wn8U/XD
cSQn3/0SQ4sNPS5hAd7+yBrvkifN3U8clX+Rw4MlVRZ5ciFGs4X6y4xoqJTuMNTU
WyT7orFuQZLUlGwwiLgSSLvkiNGQSrwH/k2pcoMZ+dM91MtNOE2ijbQ5dynWei4R
b5onDlW0UFtvspF41aj7l1ROzE9BVYosqsdcWKh3OiPUHLGCkBX0vXnzC8BuWjHF
PUrrsEr98UO4iSKS4XuBKXk+Jr5ujQAN7JBgDyWzzF5fi8yiYRYLlDurrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCcoXwUzv8gHOcbA+wyOIw2otq2VMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvSnloZkJUT195QWM1eHNEN0RJNGpEYWkyclpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVwCMA0G
CSqGSIb3DQEBCwUAA4IBAQA6HZBonC0Al9BURjBP7Po9YzB6tnsEz6cnq1aMh9MF
ZPNnJfQ3yMGLSIYP0KIO8id5osdA18ALwtnEQ2DkQ0TaHdHWfenzW+crhT8Mwvs0
zTHDo5MeFCH+AxxTb+UvqiQYCg5EXPFdu1ywmZ9m7EyiO6yX7ade1dvI2+o2gnVa
1fktSocbx/Mo3HEljZh/jdP6tVobxyWhejcCvz59glmpCQToB/MlENkOwaN2ICDL
ISoa7Td7sZ5WkwukAGVlGBXunE7aQC+OG026+vazNGsx5RSN36aCK510ND9/+Lhg
34XwIvKFofGjnN7NW7gCw69RmWSEAJTM3xnuGhmtEkuY
-----END CERTIFICATE-----