Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/8u1JK13vuvCnu5-Uupgf0qfsVEU.roa
File:                     8u1JK13vuvCnu5-Uupgf0qfsVEU.roa (raw, json)
Hash identifier:          3iOSZAHTyvuky+rA594LCVOS5HKHmw0B+uJufyD1yKU=
Subject key identifier:   F2:ED:49:2B:5D:EF:BA:F0:A7:BB:9F:94:BA:98:1F:D2:A7:EC:54:45
Certificate issuer:       /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial:       018461923A5BA08BE0E3831322A254696E59
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/8u1JK13vuvCnu5-Uupgf0qfsVEU.roa
Signing time:             Thu 10 Nov 2022 12:44:43 +0000
ROA not before:           Thu 10 Nov 2022 12:44:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     14618
IP address blocks:        194.176.117.0/24 maxlen: 24
                          2a13:14c0::/32 maxlen: 48
                          2a13:14c1::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:61:92:3a:5b:a0:8b:e0:e3:83:13:22:a2:54:69:6e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
        Validity
            Not Before: Nov 10 12:44:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f2ed492b5defbaf0a7bb9f94ba981fd2a7ec5445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b8:19:d7:b0:56:a2:af:d3:59:f7:33:da:58:
                    3a:cf:e3:38:5d:51:bd:8a:46:3c:fb:87:88:eb:ed:
                    bc:76:ce:01:ad:7e:c4:7c:21:f1:1c:d3:8b:9a:88:
                    3a:5c:5c:d5:3d:0e:e8:3d:ad:58:0b:91:3c:36:65:
                    45:89:80:a5:b7:a2:82:fb:02:55:e1:52:4f:ad:14:
                    17:50:a3:04:07:22:21:12:08:59:69:d2:3c:60:b6:
                    13:8d:79:50:b7:ed:86:3e:b8:7f:a6:78:a8:e5:b6:
                    9b:0b:7c:e3:57:d6:0a:c1:b9:31:48:71:2c:c3:4c:
                    56:cf:cf:92:d7:f0:9a:54:59:64:25:e8:d8:5b:26:
                    44:f9:f1:f2:88:25:de:9c:c7:6d:1f:5f:88:94:66:
                    1f:20:43:26:d5:30:7e:64:8c:fb:74:7d:69:cd:bb:
                    90:33:63:5e:eb:56:2a:33:67:33:59:cc:d5:0d:01:
                    dd:84:2a:0a:65:73:5d:cb:d8:83:6b:be:50:93:a3:
                    9b:52:65:3d:f7:d5:68:d7:c0:55:92:0f:ae:6a:ad:
                    f2:7b:0d:ca:58:4f:e7:3c:65:8e:98:b1:96:6f:a4:
                    57:62:33:10:07:8c:fd:9b:fc:e3:42:ec:3a:2c:56:
                    05:11:ec:b7:ba:ae:96:34:6e:2b:53:0a:2a:12:f1:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:ED:49:2B:5D:EF:BA:F0:A7:BB:9F:94:BA:98:1F:D2:A7:EC:54:45
            X509v3 Authority Key Identifier:
                keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/8u1JK13vuvCnu5-Uupgf0qfsVEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.176.117.0/24
                IPv6:
                  2a13:14c0::/31

    Signature Algorithm: sha256WithRSAEncryption
         7a:d1:6b:fd:38:92:b3:17:4c:29:1e:82:48:0f:d7:dc:8c:70:
         8f:63:3f:9d:21:5c:ab:16:52:47:78:c2:00:6b:15:84:3b:9c:
         af:53:f7:f8:30:b4:36:01:0d:eb:d7:ca:a7:8b:9b:55:75:3f:
         9f:ae:1d:cd:e3:fe:fb:56:9f:43:0e:02:bf:71:2d:2f:75:d5:
         00:25:da:7c:14:64:2e:ec:bf:f4:19:4d:0f:65:23:4f:a9:0c:
         7f:72:37:f5:ac:22:d0:47:1e:48:ea:17:07:63:f0:65:d5:a7:
         17:e1:d0:30:8c:2b:9c:99:02:c7:94:c6:00:9e:bc:06:f7:57:
         73:27:14:10:02:f7:1e:5c:64:cd:3e:67:2f:c5:ef:63:14:7e:
         01:f3:de:7f:ec:01:dd:58:a8:1d:1f:08:60:80:5c:a8:16:d2:
         94:15:70:0f:cc:09:94:8e:14:12:94:c3:15:e4:1d:33:d8:75:
         22:ae:0e:3d:09:cd:ea:da:10:c2:aa:b3:94:d2:74:91:e2:2a:
         45:7d:35:eb:b6:a2:f6:9a:62:a6:2c:6d:3b:79:12:4b:24:d4:
         f5:5e:49:0f:1f:3b:07:87:12:15:77:eb:89:9a:16:d5:a8:ac:
         62:9d:1e:6a:07:2f:e0:39:3a:f6:29:21:71:2d:db:fb:f8:67:
         b5:c7:46:32
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYRhkjpboIvg44MTIqJUaW5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWQ5YjJjMjI3YjQxM2M1MDU4MTMyOTRmYWFkYjZkYmJj
MmRkNjYwHhcNMjIxMTEwMTI0NDQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmVkNDkyYjVkZWZiYWYwYTdiYjlmOTRiYTk4MWZkMmE3ZWM1NDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrgZ17BWoq/TWfcz2lg6z+M4XVG9
ikY8+4eI6+28ds4BrX7EfCHxHNOLmog6XFzVPQ7oPa1YC5E8NmVFiYClt6KC+wJV
4VJPrRQXUKMEByIhEghZadI8YLYTjXlQt+2GPrh/pnio5babC3zjV9YKwbkxSHEs
w0xWz8+S1/CaVFlkJejYWyZE+fHyiCXenMdtH1+IlGYfIEMm1TB+ZIz7dH1pzbuQ
M2Ne61YqM2czWczVDQHdhCoKZXNdy9iDa75Qk6ObUmU999Vo18BVkg+uaq3yew3K
WE/nPGWOmLGWb6RXYjMQB4z9m/zjQuw6LFYFEey3uq6WNG4rUwoqEvH2gQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPLtSStd77rwp7uflLqYH9Kn7FRFMB8GA1UdIwQY
MBaAFFatmywie0E8UFgTKU+q2227wt1mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnEyYkxDSjdRVHhRV0JNcFQ2cmJiYnZDM1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mZGZmZTMtMDEwZi00YzZhLWJkOTYt
NzE4YjhjN2M5MzM1LzEvOHUxSksxM3Z1dkNudTUtVXVwZ2YwcWZzVkVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mZGZmZTMtMDEwZi00YzZhLWJkOTYtNzE4YjhjN2M5MzM1
LzEvVnEyYkxDSjdRVHhRV0JNcFQ2cmJiYnZDM1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwrB1MA0E
AgACMAcDBQEqExTAMA0GCSqGSIb3DQEBCwUAA4IBAQB60Wv9OJKzF0wpHoJID9fc
jHCPYz+dIVyrFlJHeMIAaxWEO5yvU/f4MLQ2AQ3r18qni5tVdT+frh3N4/77Vp9D
DgK/cS0vddUAJdp8FGQu7L/0GU0PZSNPqQx/cjf1rCLQRx5I6hcHY/Bl1acX4dAw
jCucmQLHlMYAnrwG91dzJxQQAvceXGTNPmcvxe9jFH4B895/7AHdWKgdHwhggFyo
FtKUFXAPzAmUjhQSlMMV5B0z2HUirg49Cc3q2hDCqrOU0nSR4ipFfTXrtqL2mmKm
LG07eRJLJNT1XkkPHzsHhxIVd+uJmhbVqKxinR5qBy/gOTr2KSFxLdv7+Ge1x0Yy
-----END CERTIFICATE-----