Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/1-XYSnOkCqJBpo13kcAzglOfpDRQ.roa
File:                     1-XYSnOkCqJBpo13kcAzglOfpDRQ.roa (raw, json)
Hash identifier:          bMN4Hh3wk+Z3W4XK55oQR+LTpwj4cSN6GZCqgjWCkV0=
Subject key identifier:   F9:76:12:9C:E9:02:A8:90:69:A3:5D:E4:70:0C:E0:94:E7:E9:0D:14
Certificate issuer:       /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial:       7358DE
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/1-XYSnOkCqJBpo13kcAzglOfpDRQ.roa
Signing time:             Sat 01 Jan 2022 00:53:48 +0000
ROA not before:           Sat 01 Jan 2022 00:53:48 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     58243
IP address blocks:        46.253.133.0/24 maxlen: 24
                          2a11:36c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7559390 (0x7358de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
        Validity
            Not Before: Jan  1 00:53:48 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f976129ce902a89069a35de4700ce094e7e90d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:34:2f:59:a8:2e:ca:28:53:0e:1d:7b:4e:1c:
                    fd:6c:71:b6:72:ab:6c:6e:b4:07:82:f1:82:a1:1e:
                    df:80:72:77:a5:34:a5:0e:7b:c6:ab:b7:02:56:aa:
                    c2:d0:22:ac:98:86:6d:6b:91:8b:c0:e4:c0:72:16:
                    fd:8a:2e:e7:f1:db:83:1d:9f:25:6a:f5:87:9c:e2:
                    e7:44:6a:55:ba:b3:98:f1:63:05:5e:e7:4c:38:2e:
                    4f:8d:d4:6c:52:8f:83:11:53:57:cf:f2:11:5e:27:
                    04:a2:a0:77:3d:ea:6c:0f:41:70:39:61:be:5e:06:
                    1b:d0:f7:6a:01:62:e4:42:5d:03:6e:65:df:4f:19:
                    6e:74:05:82:7a:e8:98:5e:28:ff:72:f4:fc:c3:01:
                    f2:bf:fa:a8:dd:b5:6a:c3:2d:65:57:4f:9e:b6:f4:
                    6a:6c:e5:c9:df:a1:b9:93:c9:e4:48:d8:56:d5:d2:
                    d6:ca:72:f6:a8:63:50:66:26:b4:f1:33:d5:13:8d:
                    9f:63:41:26:bd:31:07:63:f7:99:dd:59:1b:3d:2c:
                    17:56:0e:36:d6:06:4f:19:ed:6b:35:da:e7:84:9b:
                    81:0b:99:a1:22:89:df:01:48:a5:81:c3:7c:49:5f:
                    b1:80:f0:61:9a:8e:73:d7:2d:5f:31:91:aa:3a:1f:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:76:12:9C:E9:02:A8:90:69:A3:5D:E4:70:0C:E0:94:E7:E9:0D:14
            X509v3 Authority Key Identifier:
                keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/1-XYSnOkCqJBpo13kcAzglOfpDRQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.253.133.0/24
                IPv6:
                  2a11:36c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         8f:9a:ef:c9:72:25:66:59:10:ef:fa:c1:66:31:78:3d:42:65:
         77:49:e3:99:4a:70:e7:10:94:cd:37:f0:48:64:0d:bb:fa:e2:
         35:60:2b:28:1e:43:23:47:13:6c:53:73:e6:84:92:a1:f9:44:
         8f:cd:83:63:9a:d0:5e:55:64:b6:dd:d1:a2:ab:09:14:cd:35:
         c1:df:70:33:08:05:f1:e1:8a:88:a1:38:19:26:e5:f1:a4:b5:
         96:2e:09:1c:86:b3:c8:d0:2b:f7:db:0d:23:35:a2:15:ca:8c:
         fa:ed:6d:53:45:37:bb:fa:d9:86:aa:93:c1:cb:c9:d2:a6:90:
         41:a5:4b:9d:65:73:de:7e:9c:8a:11:c3:ee:b1:de:4a:f7:99:
         48:60:eb:dd:a7:09:a8:74:eb:c1:13:50:27:6a:c2:60:f9:bc:
         d7:33:fa:ca:1b:7d:3c:d0:fc:69:30:25:92:6b:77:0b:60:db:
         6f:82:5a:53:04:79:43:80:97:19:35:3b:14:7e:9e:4e:17:67:
         53:37:5a:68:b4:e5:e9:a9:62:96:73:ea:58:be:e6:ea:ac:95:
         cc:46:25:9e:e4:23:7c:7e:ac:53:c1:ef:64:37:a9:85:40:6d:
         cb:23:79:2c:f2:13:bf:68:a8:bb:e3:fa:30:1a:34:42:6a:60:
         11:41:90:30
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIDc1jeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE5
YjJlMWZjNDAwYmJmOWRjYjIwNjZhZGUzZGJmZTVjOWVhYjJlN2QwHhcNMjIwMTAx
MDA1MzQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmOTc2MTI5Y2U5MDJh
ODkwNjlhMzVkZTQ3MDBjZTA5NGU3ZTkwZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgjQvWaguyihTDh17Thz9bHG2cqtsbrQHgvGCoR7fgHJ3pTSl
DnvGq7cCVqrC0CKsmIZta5GLwOTAchb9ii7n8duDHZ8lavWHnOLnRGpVurOY8WMF
XudMOC5PjdRsUo+DEVNXz/IRXicEoqB3PepsD0FwOWG+XgYb0PdqAWLkQl0DbmXf
TxludAWCeuiYXij/cvT8wwHyv/qo3bVqwy1lV0+etvRqbOXJ36G5k8nkSNhW1dLW
ynL2qGNQZia08TPVE42fY0EmvTEHY/eZ3VkbPSwXVg421gZPGe1rNdrnhJuBC5mh
IonfAUilgcN8SV+xgPBhmo5z1y1fMZGqOh+VswIDAQABo4ICGTCCAhUwHQYDVR0O
BBYEFPl2EpzpAqiQaaNd5HAM4JTn6Q0UMB8GA1UdIwQYMBaAFBmy4fxAC7+dyyBm
rePb/lyeqy59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
R2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLmNlcjCBjgYIKwYBBQUHAQsEgYEw
fzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9iZC9iMmU1ODUtZjU4ZC00MjIwLThiZWYtMGRhOWFlODQ1OGRiLzEv
MS1YWVNuT2tDcUpCcG8xM2tjQXpnbE9mcERSUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQv
YjJlNTg1LWY1OGQtNDIyMC04YmVmLTBkYTlhZTg0NThkYi8xL0diTGhfRUFMdjUz
TElHYXQ0OXYtWEo2ckxuMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAC79hTANBAIAAjAHAwUDKhE2wDAN
BgkqhkiG9w0BAQsFAAOCAQEAj5rvyXIlZlkQ7/rBZjF4PUJld0njmUpw5xCUzTfw
SGQNu/riNWArKB5DI0cTbFNz5oSSoflEj82DY5rQXlVktt3RoqsJFM01wd9wMwgF
8eGKiKE4GSbl8aS1li4JHIazyNAr99sNIzWiFcqM+u1tU0U3u/rZhqqTwcvJ0qaQ
QaVLnWVz3n6cihHD7rHeSveZSGDr3acJqHTrwRNQJ2rCYPm81zP6yht9PND8aTAl
kmt3C2Dbb4JaUwR5Q4CXGTU7FH6eThdnUzdaaLTl6alilnPqWL7m6qyVzEYlnuQj
fH6sU8HvZDephUBtyyN5LPITv2iou+P6MBo0QmpgEUGQMA==
-----END CERTIFICATE-----