Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EqDxh8pcDPwEKLfZEgXzPMgg5z0.roa
File:                     EqDxh8pcDPwEKLfZEgXzPMgg5z0.roa (raw, json)
Hash identifier:          SmC3ZxBDKxqduO4oXthW1OKApORASVHKQ+KQ9ihCb+Q=
Subject key identifier:   12:A0:F1:87:CA:5C:0C:FC:04:28:B7:D9:12:05:F3:3C:C8:20:E7:3D
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       18C06523
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EqDxh8pcDPwEKLfZEgXzPMgg5z0.roa
Signing time:             Wed 16 Feb 2022 15:57:23 +0000
ROA not before:           Wed 16 Feb 2022 15:57:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     46261
IP address blocks:        5.183.204.0/23 maxlen: 32
                          45.12.232.0/24 maxlen: 32
                          45.82.206.0/23 maxlen: 32
                          185.182.60.0/24 maxlen: 32
                          45.15.38.0/23 maxlen: 32
                          92.119.151.0/24 maxlen: 32
                          193.187.154.0/23 maxlen: 32
                          45.14.46.0/24 maxlen: 32
                          45.138.210.0/23 maxlen: 24
                          45.10.3.0/24 maxlen: 32
                          45.10.2.0/24 maxlen: 32
                          193.160.212.0/24 maxlen: 32
                          213.232.104.0/24 maxlen: 32
                          5.181.148.0/23 maxlen: 32
                          45.67.16.0/23 maxlen: 32
                          185.226.75.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 415261987 (0x18c06523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Feb 16 15:57:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=12a0f187ca5c0cfc0428b7d91205f33cc820e73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:5c:38:7f:d1:30:78:43:c2:57:d4:70:87:
                    64:f0:f3:32:76:88:c1:48:a4:70:e4:f3:c8:e8:43:
                    0f:bb:b1:c3:3c:b1:49:a0:1a:b5:b3:31:e1:a8:76:
                    9b:02:74:75:e0:88:f9:0c:d4:38:b1:20:f0:ae:15:
                    73:5b:c9:36:82:cb:f2:ea:bb:61:e7:1f:75:ce:6b:
                    f5:4b:e1:a3:d2:c0:d8:55:fc:60:0d:e5:a4:34:bf:
                    7d:e1:64:04:a5:1e:7a:60:aa:41:6e:95:f2:ff:f2:
                    a2:9b:e2:bb:09:0a:b9:8f:d2:4a:36:e0:a4:bc:8b:
                    eb:d9:d2:cc:9b:49:6b:95:03:ee:7c:be:a8:6f:ed:
                    6a:68:99:22:70:5d:55:f9:c1:6e:53:0a:ee:ff:3d:
                    ff:47:d4:82:be:69:95:51:1f:83:73:33:5b:47:b6:
                    6f:6b:59:2d:57:11:23:15:36:bc:d8:5e:00:6f:26:
                    f6:b7:10:b5:a6:a6:4e:31:71:c2:a1:df:65:50:82:
                    da:6c:99:e0:64:dc:f3:6b:37:79:39:03:61:15:cc:
                    de:8b:3f:58:84:62:a2:73:64:da:ca:a0:7a:9c:4e:
                    f4:80:03:b5:de:68:3a:9f:11:c1:ae:d5:63:28:c2:
                    a6:9b:d9:53:03:26:73:55:9b:88:9b:b2:a0:ab:2e:
                    18:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A0:F1:87:CA:5C:0C:FC:04:28:B7:D9:12:05:F3:3C:C8:20:E7:3D
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EqDxh8pcDPwEKLfZEgXzPMgg5z0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.148.0/23
                  5.183.204.0/23
                  45.10.2.0/23
                  45.12.232.0/24
                  45.14.46.0/24
                  45.15.38.0/23
                  45.67.16.0/23
                  45.82.206.0/23
                  45.138.210.0/23
                  92.119.151.0/24
                  185.182.60.0/24
                  185.226.75.0/24
                  193.160.212.0/24
                  193.187.154.0/23
                  213.232.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:18:98:c2:4c:5f:05:cd:4a:c7:58:4b:ab:9a:e1:e8:40:00:
         93:63:dc:66:33:1a:97:72:56:58:5e:e8:4e:47:7d:81:d2:0b:
         8a:37:9f:90:ed:ac:de:14:5c:67:33:13:b9:05:bd:eb:c4:9b:
         8d:dd:3c:7b:90:71:39:4e:31:02:8e:a8:24:a4:90:28:84:70:
         e3:5e:6d:5b:93:2e:90:62:24:45:e1:0b:94:0d:d7:7d:d9:b1:
         f4:df:40:f6:f5:6c:90:1b:95:44:72:12:17:de:0a:c3:8e:c7:
         2b:60:10:43:4c:0d:19:a0:53:56:3a:2c:6e:10:75:a0:4f:f2:
         dd:c5:eb:0a:d4:c2:43:dc:ad:85:e0:bc:e1:3c:e1:8f:22:4f:
         e6:31:21:81:15:16:51:40:f9:fb:23:f1:a5:ee:91:74:19:09:
         48:47:2c:4e:7d:ee:10:86:c6:e9:4f:22:bc:e1:00:9d:b9:06:
         97:46:29:b1:aa:6f:4c:be:e4:f5:1b:85:4a:9c:d3:e8:21:09:
         c9:0c:5a:57:85:a5:9d:d7:e2:11:76:13:e9:88:f2:5d:19:56:
         ab:d8:f6:75:7e:45:c3:7c:7c:e4:5e:29:7f:1e:90:65:28:67:
         31:02:f8:8e:b9:3a:ea:aa:67:29:96:c1:cc:83:4a:bb:fb:32:
         89:d6:25:96
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIEGMBlIzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDIx
NjE1NTcyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTJhMGYxODdjYTVj
MGNmYzA0MjhiN2Q5MTIwNWYzM2NjODIwZTczZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKLGXDh/0TB4Q8JX1HCHZPDzMnaIwUikcOTzyOhDD7uxwzyx
SaAatbMx4ah2mwJ0deCI+QzUOLEg8K4Vc1vJNoLL8uq7Yecfdc5r9Uvho9LA2FX8
YA3lpDS/feFkBKUeemCqQW6V8v/yopviuwkKuY/SSjbgpLyL69nSzJtJa5UD7ny+
qG/tamiZInBdVfnBblMK7v89/0fUgr5plVEfg3MzW0e2b2tZLVcRIxU2vNheAG8m
9rcQtaamTjFxwqHfZVCC2myZ4GTc82s3eTkDYRXM3os/WIRionNk2sqgepxO9IAD
td5oOp8Rwa7VYyjCppvZUwMmc1WbiJuyoKsuGMkCAwEAAaOCAl0wggJZMB0GA1Ud
DgQWBBQSoPGHylwM/AQot9kSBfM8yCDnPTAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L0VxRHhoOHBjRFB3RUtMZlpFZ1h6UE1nZzV6MC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBz
BggrBgEFBQcBBwEB/wRkMGIwYAQCAAEwWgMEAQW1lAMEAQW3zAMEAS0KAgMEAC0M
6AMEAC0OLgMEAS0PJgMEAS1DEAMEAS1SzgMEAS2K0gMEAFx3lwMEALm2PAMEALni
SwMEAMGg1AMEAcG7mgMEANXoaDANBgkqhkiG9w0BAQsFAAOCAQEAsxiYwkxfBc1K
x1hLq5rh6EAAk2PcZjMal3JWWF7oTkd9gdILijefkO2s3hRcZzMTuQW968Sbjd08
e5BxOU4xAo6oJKSQKIRw415tW5MukGIkReELlA3Xfdmx9N9A9vVskBuVRHISF94K
w47HK2AQQ0wNGaBTVjosbhB1oE/y3cXrCtTCQ9ytheC84TzhjyJP5jEhgRUWUUD5
+yPxpe6RdBkJSEcsTn3uEIbG6U8ivOEAnbkGl0YpsapvTL7k9RuFSpzT6CEJyQxa
V4WlndfiEXYT6YjyXRlWq9j2dX5Fw3x85F4pfx6QZShnMQL4jrk66qpnKZbBzINK
u/syidYllg==
-----END CERTIFICATE-----