Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Xt6ePO9DW8y3jXfrxpD0LU8kIf0.roa
File:                     Xt6ePO9DW8y3jXfrxpD0LU8kIf0.roa (raw, json)
Hash identifier:          ybYVpors2zdXC4voPd8b7grtJrGElFN8A06F6/zI2LU=
Subject key identifier:   5E:DE:9E:3C:EF:43:5B:CC:B7:8D:77:EB:C6:90:F4:2D:4F:24:21:FD
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17F0B3DE
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Xt6ePO9DW8y3jXfrxpD0LU8kIf0.roa
Signing time:             Sat 01 Jan 2022 04:54:50 +0000
ROA not before:           Sat 01 Jan 2022 04:54:50 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     212238
IP address blocks:        45.138.210.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401650654 (0x17f0b3de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:50 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=5ede9e3cef435bccb78d77ebc690f42d4f2421fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:a3:75:d8:ff:fd:ee:f5:b5:10:bd:87:2d:
                    18:47:0f:d2:23:b0:5c:34:02:a1:54:54:02:c8:50:
                    93:06:e3:f7:b9:cd:25:3f:80:ad:80:b9:a4:2c:9e:
                    cb:72:16:74:8a:89:47:33:53:cc:35:95:98:c3:10:
                    99:a0:e6:e8:c6:51:c8:81:ce:3f:2c:6c:89:52:52:
                    ec:f4:ed:7f:3c:84:23:c7:75:aa:f3:e4:70:e1:8b:
                    77:92:01:62:a0:55:38:79:47:57:2a:fd:43:e8:2b:
                    92:2e:4b:dc:12:9a:dc:95:35:3c:07:d7:27:c8:6c:
                    e6:57:14:ac:6b:a3:17:ee:01:9c:18:f3:d4:0d:cf:
                    6e:01:1f:46:0b:20:f7:9e:f4:2a:79:77:c5:32:3c:
                    c4:80:07:d6:48:9e:1d:66:5e:a3:d6:c0:0e:67:f2:
                    37:71:df:1a:34:30:34:db:5c:6f:12:b1:7b:5a:d2:
                    6b:03:14:0e:b8:9c:71:b4:68:db:eb:34:4a:35:c5:
                    63:e9:c0:1c:2d:50:2d:a9:7c:57:0f:28:1a:c9:3a:
                    e2:84:cf:88:18:1c:8b:42:6a:81:24:8c:15:22:bf:
                    21:82:79:ae:c1:04:7b:8f:7d:bc:29:07:bb:d1:33:
                    89:fe:21:43:84:ce:bf:9b:11:f1:7b:d6:bb:8d:79:
                    df:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DE:9E:3C:EF:43:5B:CC:B7:8D:77:EB:C6:90:F4:2D:4F:24:21:FD
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Xt6ePO9DW8y3jXfrxpD0LU8kIf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:7b:d1:ab:3c:62:cb:89:df:ec:ee:4d:de:25:f3:af:2e:c5:
         48:3e:be:6e:92:33:7d:e2:47:c5:b5:aa:36:cc:23:1a:68:96:
         0d:ae:0a:b1:9e:8e:ae:a2:8e:c6:1f:45:12:c9:77:06:e6:84:
         25:9f:fd:10:a6:30:69:cb:5d:10:a1:b5:1f:72:61:61:5c:2e:
         af:3a:1b:f1:95:73:b4:c6:2b:10:6e:e8:1d:fb:2a:76:ff:c6:
         32:29:9b:ee:4b:95:13:26:3e:0e:39:18:59:a8:02:5a:2e:13:
         e0:04:13:8b:4a:7c:b5:2e:17:bd:80:27:73:76:20:0e:2a:87:
         63:72:b0:3a:c7:f4:f9:a9:2c:85:de:fa:44:75:28:bf:08:c1:
         c2:e6:fa:17:7d:10:23:d4:db:4b:1e:ed:1a:8e:37:01:eb:ff:
         73:6d:d0:22:e6:23:97:f8:d9:32:51:8e:76:84:ec:8a:1f:0f:
         b3:49:cb:62:3c:6f:97:6c:a6:04:c9:09:b7:67:6b:f5:5e:06:
         3d:9e:c2:1f:c0:3d:71:95:e7:38:9b:87:b8:f2:5b:8e:dc:23:
         ea:c2:bc:71:75:05:02:1c:f2:dd:8f:78:e8:42:c2:0e:da:eb:
         ee:53:1b:42:5c:f6:73:6c:27:51:b8:fb:fb:78:9f:02:60:a0:
         89:8b:54:4e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF/Cz3jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTQ1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWVkZTllM2NlZjQz
NWJjY2I3OGQ3N2ViYzY5MGY0MmQ0ZjI0MjFmZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDeo3XY//3u9bUQvYctGEcP0iOwXDQCoVRUAshQkwbj97nN
JT+ArYC5pCyey3IWdIqJRzNTzDWVmMMQmaDm6MZRyIHOPyxsiVJS7PTtfzyEI8d1
qvPkcOGLd5IBYqBVOHlHVyr9Q+grki5L3BKa3JU1PAfXJ8hs5lcUrGujF+4BnBjz
1A3PbgEfRgsg9570Knl3xTI8xIAH1kieHWZeo9bADmfyN3HfGjQwNNtcbxKxe1rS
awMUDriccbRo2+s0SjXFY+nAHC1QLal8Vw8oGsk64oTPiBgci0JqgSSMFSK/IYJ5
rsEEe499vCkHu9Ezif4hQ4TOv5sR8XvWu41531sCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRe3p4870NbzLeNd+vGkPQtTyQh/TAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L1h0NmVQTzlEVzh5M2pYZnJ4cEQwTFU4a0lmMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2K0jANBgkqhkiG9w0BAQsFAAOC
AQEAbnvRqzxiy4nf7O5N3iXzry7FSD6+bpIzfeJHxbWqNswjGmiWDa4KsZ6OrqKO
xh9FEsl3BuaEJZ/9EKYwactdEKG1H3JhYVwurzob8ZVztMYrEG7oHfsqdv/GMimb
7kuVEyY+DjkYWagCWi4T4AQTi0p8tS4XvYAnc3YgDiqHY3KwOsf0+akshd76RHUo
vwjBwub6F30QI9TbSx7tGo43Aev/c23QIuYjl/jZMlGOdoTsih8Ps0nLYjxvl2ym
BMkJt2dr9V4GPZ7CH8A9cZXnOJuHuPJbjtwj6sK8cXUFAhzy3Y946ELCDtrr7lMb
Qlz2c2wnUbj7+3ifAmCgiYtUTg==
-----END CERTIFICATE-----