Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/KXBDeYrBj75NY2ykboe2UVNVWIg.roa
File:                     KXBDeYrBj75NY2ykboe2UVNVWIg.roa (raw, json)
Hash identifier:          rC7kOEGisyTd+/jyew9iIc7YvWjdiSK7H5jmjeKb5GU=
Subject key identifier:   29:70:43:79:8A:C1:8F:BE:4D:63:6C:A4:6E:87:B6:51:53:55:58:88
Certificate issuer:       /CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
Certificate serial:       023FA76E
Authority key identifier: 3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/KXBDeYrBj75NY2ykboe2UVNVWIg.roa
Signing time:             Sat 01 Jan 2022 10:05:01 +0000
ROA not before:           Sat 01 Jan 2022 10:05:01 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     1239
IP address blocks:        213.178.140.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37726062 (0x23fa76e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b13bf822592bd1b54b77cc2c1cc42b28ccf1669
        Validity
            Not Before: Jan  1 10:05:01 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=297043798ac18fbe4d636ca46e87b65153555888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:92:64:14:e3:29:57:18:dd:67:17:50:a4:42:
                    6e:92:ea:1c:e8:7f:67:05:79:eb:35:e9:63:ed:1d:
                    00:bd:cf:58:a9:f4:e5:60:32:0a:5b:cb:21:59:5b:
                    c2:01:7a:86:e6:45:62:65:86:97:b5:41:2c:64:ff:
                    7f:46:09:99:a0:be:1b:5a:d7:23:d0:14:f2:12:66:
                    5f:14:21:4a:bc:eb:4f:98:0a:cb:8a:de:ba:17:af:
                    3c:5f:ac:32:bb:c9:7e:37:4d:ca:ca:e3:d5:c2:73:
                    0c:ff:20:a0:60:78:38:ae:2b:30:ab:2f:3e:42:33:
                    0a:c0:7c:9f:d4:dc:e8:fa:aa:54:22:95:85:ea:55:
                    41:16:e8:d4:f2:b5:e1:2b:7b:0f:a0:0a:3d:1c:18:
                    74:db:65:ef:58:47:cc:98:c0:c8:f2:c9:0b:b2:71:
                    78:17:40:36:e3:e0:82:c9:23:90:28:ad:28:0e:d5:
                    ed:d2:aa:fa:27:83:5a:4e:bb:87:b2:2c:8a:9c:d7:
                    70:3d:6b:c7:90:cf:ad:e3:95:bc:49:3f:4b:82:ac:
                    0d:fb:83:9b:23:3e:95:2e:e2:2f:6c:b3:a3:dd:44:
                    95:e9:fa:56:15:f9:51:e5:a6:99:23:63:8e:6e:b2:
                    fa:9a:73:d5:5f:92:c5:cb:51:5f:fc:cf:db:5b:87:
                    19:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:70:43:79:8A:C1:8F:BE:4D:63:6C:A4:6E:87:B6:51:53:55:58:88
            X509v3 Authority Key Identifier:
                keyid:3B:13:BF:82:25:92:BD:1B:54:B7:7C:C2:C1:CC:42:B2:8C:CF:16:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxO_giWSvRtUt3zCwcxCsozPFmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/KXBDeYrBj75NY2ykboe2UVNVWIg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/a64061-52c9-43dc-9ee0-5afde294d1c2/1/OxO_giWSvRtUt3zCwcxCsozPFmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.178.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:ec:73:03:99:82:05:4c:a8:97:74:fc:de:b9:06:43:20:c7:
         f1:c2:61:4f:54:b3:62:0e:85:49:9a:0d:55:62:cc:8a:31:b8:
         8e:d3:04:fc:b5:0f:35:8b:4e:5e:b2:b4:e5:f5:02:bb:1e:10:
         cb:95:31:08:95:4c:0d:9b:01:a1:8b:ec:a4:8b:c9:02:33:2f:
         54:33:b1:d0:e7:db:f2:1e:5a:e0:5d:1f:fd:81:85:25:22:fc:
         a1:6c:0d:d5:f1:8e:23:f1:00:cb:9d:5a:e5:8d:7f:55:b1:93:
         02:4e:3e:d5:e8:22:28:86:9e:3c:cb:f8:d9:53:3d:87:b5:78:
         92:58:36:a5:fc:18:6c:c6:fc:b4:98:1f:43:e1:13:da:6e:50:
         d9:6d:27:ee:bc:70:d6:b2:bf:4b:32:25:a9:80:0b:c2:db:c9:
         ee:0c:56:37:5a:10:74:07:18:b8:a2:d9:c7:9c:29:3a:d0:1c:
         36:48:a1:ab:37:36:bd:03:ec:91:d8:e9:b6:c9:ae:50:0d:c6:
         e1:17:0e:d0:c1:16:bb:47:2b:41:b6:f3:a3:aa:47:93:96:c3:
         c6:8b:bb:3d:5a:50:f8:02:00:df:e2:6f:53:7a:00:c9:a3:67:
         5b:18:9c:15:95:b9:f2:d0:52:19:3b:56:a5:e8:61:14:a8:2a:
         0c:55:7c:e9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAj+nbjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjEzYmY4MjI1OTJiZDFiNTRiNzdjYzJjMWNjNDJiMjhjY2YxNjY5MB4XDTIyMDEw
MTEwMDUwMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjk3MDQzNzk4YWMx
OGZiZTRkNjM2Y2E0NmU4N2I2NTE1MzU1NTg4ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOCSZBTjKVcY3WcXUKRCbpLqHOh/ZwV56zXpY+0dAL3PWKn0
5WAyClvLIVlbwgF6huZFYmWGl7VBLGT/f0YJmaC+G1rXI9AU8hJmXxQhSrzrT5gK
y4reuhevPF+sMrvJfjdNysrj1cJzDP8goGB4OK4rMKsvPkIzCsB8n9Tc6PqqVCKV
hepVQRbo1PK14St7D6AKPRwYdNtl71hHzJjAyPLJC7JxeBdANuPggskjkCitKA7V
7dKq+ieDWk67h7IsipzXcD1rx5DPreOVvEk/S4KsDfuDmyM+lS7iL2yzo91Elen6
VhX5UeWmmSNjjm6y+ppz1V+SxctRX/zP21uHGe0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQpcEN5isGPvk1jbKRuh7ZRU1VYiDAfBgNVHSMEGDAWgBQ7E7+CJZK9G1S3
fMLBzEKyjM8WaTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L094T19naVdTdlJ0VXQzekN3Y3hDc296UEZtay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmYvYTY0MDYxLTUyYzktNDNkYy05ZWUwLTVhZmRlMjk0ZDFjMi8x
L0tYQkRlWXJCajc1TlkyeWtib2UyVVZOVldJZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYv
YTY0MDYxLTUyYzktNDNkYy05ZWUwLTVhZmRlMjk0ZDFjMi8xL094T19naVdTdlJ0
VXQzekN3Y3hDc296UEZtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtWyjDANBgkqhkiG9w0BAQsFAAOC
AQEAROxzA5mCBUyol3T83rkGQyDH8cJhT1SzYg6FSZoNVWLMijG4jtME/LUPNYtO
XrK05fUCux4Qy5UxCJVMDZsBoYvspIvJAjMvVDOx0Ofb8h5a4F0f/YGFJSL8oWwN
1fGOI/EAy51a5Y1/VbGTAk4+1egiKIaePMv42VM9h7V4klg2pfwYbMb8tJgfQ+ET
2m5Q2W0n7rxw1rK/SzIlqYALwtvJ7gxWN1oQdAcYuKLZx5wpOtAcNkihqzc2vQPs
kdjptsmuUA3G4RcO0MEWu0crQbbzo6pHk5bDxou7PVpQ+AIA3+JvU3oAyaNnWxic
FZW58tBSGTtWpehhFKgqDFV86Q==
-----END CERTIFICATE-----