Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/9v1Ywja1y0JrBhxurlb4o-lLYHU.roa
File:                     9v1Ywja1y0JrBhxurlb4o-lLYHU.roa (raw, json)
Hash identifier:          6KacH8ZGNDOPbg8peOh0vWflkkQaa/DtrEgIuDig/Qo=
Subject key identifier:   F6:FD:58:C2:36:B5:CB:42:6B:06:1C:6E:AE:56:F8:A3:E9:4B:60:75
Certificate issuer:       /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial:       03583911
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/9v1Ywja1y0JrBhxurlb4o-lLYHU.roa
Signing time:             Sat 01 Jan 2022 11:57:53 +0000
ROA not before:           Sat 01 Jan 2022 11:57:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     32931
IP address blocks:        185.183.244.0/22 maxlen: 24
                          2a0b:2280::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56113425 (0x3583911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
        Validity
            Not Before: Jan  1 11:57:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f6fd58c236b5cb426b061c6eae56f8a3e94b6075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:27:21:11:84:3e:78:fa:96:fd:af:65:1f:8f:
                    d1:0d:bd:7f:ab:60:66:c2:7b:6e:c7:d6:54:16:e1:
                    75:fd:72:2d:59:a8:f0:d3:b5:b1:d8:56:88:0e:02:
                    72:c0:46:dd:fb:59:6f:c6:d4:b4:40:62:d3:b8:07:
                    89:c7:c2:c8:b8:2a:8f:02:d5:cc:18:b6:28:2a:8e:
                    c3:43:81:c0:06:20:88:0a:32:6c:46:a2:59:47:76:
                    ff:be:92:de:df:6b:68:4a:0e:29:80:fb:71:45:e0:
                    73:09:42:d2:49:0e:6d:78:12:70:6e:73:8d:e6:55:
                    e7:47:37:28:d6:8b:55:76:16:51:a7:dc:33:7a:2e:
                    e9:b9:99:ec:fa:32:21:c2:e9:3e:c3:4a:3e:07:fd:
                    bb:38:c0:3f:96:8e:5f:b9:b3:e8:ce:60:3f:f5:37:
                    9b:ae:d5:54:ad:73:cb:18:5e:a1:23:55:d2:30:55:
                    66:5a:26:b7:d4:9e:1e:e8:5d:93:69:50:d5:c0:5d:
                    81:6c:07:87:a2:58:6f:b5:56:e7:4a:f9:f4:c7:c1:
                    cf:a0:9c:8a:47:e9:d6:d6:3b:99:78:5f:82:48:31:
                    26:c6:bc:f0:7d:7f:5d:40:22:59:2e:bf:c8:b2:31:
                    67:e6:00:67:ca:e2:1a:b5:dc:af:f9:17:9d:a4:b7:
                    8f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FD:58:C2:36:B5:CB:42:6B:06:1C:6E:AE:56:F8:A3:E9:4B:60:75
            X509v3 Authority Key Identifier:
                keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/9v1Ywja1y0JrBhxurlb4o-lLYHU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.183.244.0/22
                IPv6:
                  2a0b:2280::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:0d:f5:7e:c8:d1:82:1e:8a:14:fc:5d:97:70:fc:bc:dd:2f:
         5a:d4:17:b1:86:cf:08:27:f7:95:70:62:37:02:07:99:64:9c:
         68:74:3c:01:01:ca:c3:0f:ce:97:09:43:45:66:1c:e9:6f:67:
         b3:4b:ac:fd:01:94:64:4b:de:84:52:52:9e:14:cb:c9:99:8f:
         fd:af:3a:47:1b:0e:96:53:52:a8:89:34:15:58:06:61:b7:bc:
         70:64:54:1c:82:10:4b:2b:3b:ed:05:b9:51:a1:33:77:a4:cc:
         f5:cf:7a:e9:23:33:c5:d9:16:bd:3e:ba:51:28:7b:b6:85:8a:
         eb:f3:c6:70:9e:77:a9:58:ae:26:28:41:db:b5:34:41:20:17:
         64:a2:22:1b:dd:28:48:e3:6f:b0:f5:31:3a:cf:a8:a0:81:bc:
         68:e5:fc:11:9b:9c:7d:9b:45:a2:dc:22:43:12:2e:53:a2:be:
         aa:0b:4e:2c:d0:64:b6:e0:db:54:98:56:bb:b6:f4:2b:48:8d:
         20:35:dc:c1:a7:2d:33:54:70:2b:90:fb:e8:5e:c3:d5:ab:b6:
         72:f1:95:e3:c4:99:b3:63:77:59:e9:33:35:0c:2a:ab:09:1d:
         9c:3e:e4:52:89:b2:17:4d:33:15:87:ae:6f:2f:c7:b4:a5:99:
         bb:c9:f3:dd
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEA1g5ETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YjNhNzM1ZDA5YWFhNzk3MGRlZjEyYzRhYzYwZTgyN2ZkYjNmODI1MB4XDTIyMDEw
MTExNTc1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjZmZDU4YzIzNmI1
Y2I0MjZiMDYxYzZlYWU1NmY4YTNlOTRiNjA3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK8nIRGEPnj6lv2vZR+P0Q29f6tgZsJ7bsfWVBbhdf1yLVmo
8NO1sdhWiA4CcsBG3ftZb8bUtEBi07gHicfCyLgqjwLVzBi2KCqOw0OBwAYgiAoy
bEaiWUd2/76S3t9raEoOKYD7cUXgcwlC0kkObXgScG5zjeZV50c3KNaLVXYWUafc
M3ou6bmZ7PoyIcLpPsNKPgf9uzjAP5aOX7mz6M5gP/U3m67VVK1zyxheoSNV0jBV
Zlomt9SeHuhdk2lQ1cBdgWwHh6JYb7VW50r59MfBz6Ccikfp1tY7mXhfgkgxJsa8
8H1/XUAiWS6/yLIxZ+YAZ8riGrXcr/kXnaS3j7MCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBT2/VjCNrXLQmsGHG6uVvij6UtgdTAfBgNVHSMEGDAWgBRrOnNdCaqnlw3v
EsSsYOgn/bP4JTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2F6cHpYUW1xcDVjTjd4TEVyR0RvSl8yei1DVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmYvY2M3MjQ3LTZmMGMtNGI3NC04NjkwLTA1MTA3Njc0NGE2NS8x
Lzl2MVl3amExeTBKckJoeHVybGI0by1sTFlIVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmYv
Y2M3MjQ3LTZmMGMtNGI3NC04NjkwLTA1MTA3Njc0NGE2NS8xL2F6cHpYUW1xcDVj
Tjd4TEVyR0RvSl8yei1DVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArm39DANBAIAAjAHAwUDKgsigDAN
BgkqhkiG9w0BAQsFAAOCAQEAjg31fsjRgh6KFPxdl3D8vN0vWtQXsYbPCCf3lXBi
NwIHmWScaHQ8AQHKww/OlwlDRWYc6W9ns0us/QGUZEvehFJSnhTLyZmP/a86RxsO
llNSqIk0FVgGYbe8cGRUHIIQSys77QW5UaEzd6TM9c966SMzxdkWvT66USh7toWK
6/PGcJ53qViuJihB27U0QSAXZKIiG90oSONvsPUxOs+ooIG8aOX8EZucfZtFotwi
QxIuU6K+qgtOLNBktuDbVJhWu7b0K0iNIDXcwactM1RwK5D76F7D1au2cvGV48SZ
s2N3WekzNQwqqwkdnD7kUomyF00zFYeuby/HtKWZu8nz3Q==
-----END CERTIFICATE-----