Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-TwWVe-sjw4AfJJnFVHjek5a-J4.roa
File:                     1-TwWVe-sjw4AfJJnFVHjek5a-J4.roa (raw, json)
Hash identifier:          fwSnMepKLY/gKy3YSM7wwUTxZTuHgcj56XdAowIFaOw=
Subject key identifier:   F9:3C:16:55:EF:AC:8F:0E:00:7C:92:67:15:51:E3:7A:4E:5A:F8:9E
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       1794C023
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-TwWVe-sjw4AfJJnFVHjek5a-J4.roa
Signing time:             Sat 01 Jan 2022 04:53:53 +0000
ROA not before:           Sat 01 Jan 2022 04:53:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     13830
IP address blocks:        185.251.233.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395624483 (0x1794c023)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:53:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f93c1655efac8f0e007c92671551e37a4e5af89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:4c:a9:1c:b8:88:da:e2:ea:83:1a:b0:65:
                    07:61:43:fd:a7:1b:06:48:c2:df:25:c4:65:f4:cc:
                    5e:b7:a6:23:7b:99:10:81:ab:f2:1e:55:19:0d:f1:
                    6d:8d:c8:b3:c8:95:4d:34:a1:2b:db:a4:6e:cf:59:
                    86:49:ba:f7:1d:2b:c9:04:a5:c0:ca:24:a9:7b:35:
                    f3:89:8a:ae:68:28:cd:73:6a:e1:22:7e:43:03:49:
                    51:8d:32:a8:eb:69:e0:59:e5:e9:ef:b4:dd:e3:fe:
                    c8:3a:8d:e0:22:c7:fc:2e:03:7f:ea:f0:23:6b:fb:
                    00:80:0a:26:d0:b8:e2:2d:ad:f5:f3:d2:32:d8:cc:
                    46:28:20:bb:bb:76:5d:28:49:64:54:17:12:24:fa:
                    2b:10:45:63:ec:3c:76:1e:2a:84:d1:cc:7b:b7:d2:
                    7e:bf:69:ef:39:c8:b1:3c:17:82:da:84:82:61:d8:
                    ca:90:63:a7:4d:51:7d:14:90:b4:3a:5e:77:21:ee:
                    ce:6f:9e:60:66:92:e5:db:2a:b9:fa:02:cb:a8:cf:
                    eb:30:6d:10:e9:e5:b1:13:f7:e9:6f:0e:1e:ca:49:
                    51:8b:f0:61:6e:ec:2d:01:74:8d:5b:ec:b7:05:cc:
                    f9:ae:76:e3:3b:23:55:ef:10:82:77:da:74:f2:66:
                    9b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3C:16:55:EF:AC:8F:0E:00:7C:92:67:15:51:E3:7A:4E:5A:F8:9E
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/1-TwWVe-sjw4AfJJnFVHjek5a-J4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.251.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:76:b8:9b:2a:4e:6a:7f:37:7b:11:fd:45:4f:52:50:2a:4a:
         d2:2f:d9:d7:be:bf:14:cc:5a:33:7d:c3:dd:b0:71:48:33:ce:
         6a:28:dd:e7:76:53:26:58:79:81:29:b2:5e:f2:a6:17:db:97:
         dc:6b:b0:84:b7:5c:8b:d3:ff:78:d5:b2:14:84:56:49:86:2b:
         bc:32:0d:32:03:ef:f9:ca:55:63:9c:17:a9:51:a9:72:25:a7:
         7c:54:e6:6a:90:56:36:de:2f:a9:55:82:12:36:e2:49:13:90:
         56:68:7c:e5:90:1e:4b:b6:a7:11:95:9c:78:fc:0c:fb:5e:da:
         33:3b:27:67:7f:38:0b:6d:73:2a:d3:18:07:c3:32:97:47:7e:
         b3:84:16:c9:00:5c:33:c0:0d:97:cf:53:72:56:c5:a9:33:e0:
         33:0d:34:9d:1d:3f:25:21:8b:5f:62:80:07:77:2d:2d:dd:7d:
         59:6a:3c:90:fa:72:ea:53:5b:ca:3c:70:f0:85:66:55:78:d0:
         c8:72:ad:a6:5c:68:fe:e6:e6:3f:2e:66:6e:fa:39:ee:9d:96:
         d6:d0:46:f9:fa:f7:5f:7b:e0:3d:d7:f3:30:dc:b2:f8:7c:8d:
         84:e0:11:dc:56:86:77:14:ad:76:ba:fc:e1:3a:79:fe:a9:6f:
         81:59:67:76
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgIEF5TAIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTM1M1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjkzYzE2NTVlZmFj
OGYwZTAwN2M5MjY3MTU1MWUzN2E0ZTVhZjg5ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK/NTKkcuIja4uqDGrBlB2FD/acbBkjC3yXEZfTMXremI3uZ
EIGr8h5VGQ3xbY3Is8iVTTShK9ukbs9Zhkm69x0ryQSlwMokqXs184mKrmgozXNq
4SJ+QwNJUY0yqOtp4Fnl6e+03eP+yDqN4CLH/C4Df+rwI2v7AIAKJtC44i2t9fPS
MtjMRiggu7t2XShJZFQXEiT6KxBFY+w8dh4qhNHMe7fSfr9p7znIsTwXgtqEgmHY
ypBjp01RfRSQtDpedyHuzm+eYGaS5dsqufoCy6jP6zBtEOnlsRP36W8OHspJUYvw
YW7sLQF0jVvstwXM+a524zsjVe8QgnfadPJmmy8CAwEAAaOCAgowggIGMB0GA1Ud
DgQWBBT5PBZV76yPDgB8kmcVUeN6Tlr4njAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY4GCCsGAQUFBwELBIGB
MH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
LzEtVHdXVmUtc2p3NEFmSkpuRlZIamVrNWEtSjQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Qw
LzQ5MjU5MC1hMDJmLTQ0M2UtYWFhMy1mZWFjMjZlYWVjYzIvMS9iSV9ScUs1Wmxz
SGxhU3dhakVLXzZjTzZWMFUuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5++kwDQYJKoZIhvcNAQELBQAD
ggEBAB92uJsqTmp/N3sR/UVPUlAqStIv2de+vxTMWjN9w92wcUgzzmoo3ed2UyZY
eYEpsl7yphfbl9xrsIS3XIvT/3jVshSEVkmGK7wyDTID7/nKVWOcF6lRqXIlp3xU
5mqQVjbeL6lVghI24kkTkFZofOWQHku2pxGVnHj8DPte2jM7J2d/OAttcyrTGAfD
MpdHfrOEFskAXDPADZfPU3JWxakz4DMNNJ0dPyUhi19igAd3LS3dfVlqPJD6cupT
W8o8cPCFZlV40MhyraZcaP7m5j8uZm76Oe6dltbQRvn691974D3X8zDcsvh8jYTg
EdxWhncUrXa6/OE6ef6pb4FZZ3Y=
-----END CERTIFICATE-----