Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/nv_eHk3Dc9wPEeegQ98wXoXZhcU.roa
File:                     nv_eHk3Dc9wPEeegQ98wXoXZhcU.roa (raw, json)
Hash identifier:          ZiN7UwMhpOazVPoZyAKMfa9nMteJiMXCEiWlPYiQ0zA=
Subject key identifier:   9E:FF:DE:1E:4D:C3:73:DC:0F:11:E7:A0:43:DF:30:5E:85:D9:85:C5
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17A27A87
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/nv_eHk3Dc9wPEeegQ98wXoXZhcU.roa
Signing time:             Sat 01 Jan 2022 04:54:02 +0000
ROA not before:           Sat 01 Jan 2022 04:54:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     35487
IP address blocks:        45.136.0.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396524167 (0x17a27a87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=9effde1e4dc373dc0f11e7a043df305e85d985c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:98:ab:1d:62:21:99:d7:a9:47:96:bf:ca:
                    9f:6c:03:08:cb:b9:bd:d7:a4:8f:df:a4:4e:2c:ae:
                    69:72:4b:67:64:e7:71:a3:53:7d:93:fc:84:ef:71:
                    85:7a:6f:01:0a:df:b6:64:63:54:bb:3c:9c:26:3f:
                    47:36:2c:01:e0:b0:d6:03:a5:a5:12:16:f6:57:dc:
                    9b:80:c8:95:9c:cc:73:4a:62:2c:28:cc:1e:f0:2a:
                    89:cd:f1:4e:d5:14:13:5a:5f:10:96:34:68:05:eb:
                    45:e0:b7:ae:d9:c2:42:99:15:a2:93:24:0f:70:16:
                    32:2f:c1:db:e7:44:9d:f4:ce:3f:5e:76:65:30:cc:
                    0e:83:26:e8:93:31:09:12:49:ea:d6:fa:14:38:a4:
                    f4:20:c1:9d:1d:67:c2:04:a7:9e:de:b6:d9:e0:47:
                    24:08:ac:94:a4:17:c2:b6:6d:b8:a8:e6:bd:1b:46:
                    fc:67:29:16:5a:fe:d9:c3:aa:76:a9:a8:6a:c1:f5:
                    08:8d:d7:dd:ef:e4:2a:8d:99:c3:e1:db:48:9a:f1:
                    4b:c5:ac:83:9c:9d:10:94:b1:2a:bb:60:ad:71:79:
                    d3:eb:0a:a2:07:4e:12:b3:23:b0:67:77:32:e2:c6:
                    37:4b:1b:63:60:0f:79:7c:ce:cc:5a:73:ef:4b:59:
                    87:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FF:DE:1E:4D:C3:73:DC:0F:11:E7:A0:43:DF:30:5E:85:D9:85:C5
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/nv_eHk3Dc9wPEeegQ98wXoXZhcU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:a7:c1:bf:c6:89:02:ca:5d:0c:1b:26:ca:9b:33:1a:55:59:
         bb:19:32:67:db:78:d2:f1:cb:56:a6:62:a2:08:e2:b5:94:14:
         7f:c1:00:7a:38:e8:44:36:76:b0:8f:e4:b3:38:0b:b6:e8:06:
         d0:22:b1:06:5c:87:de:c7:f6:2e:e9:ff:60:82:2f:eb:de:1f:
         5d:01:72:8c:5f:17:a8:69:28:d8:c0:72:0d:e0:28:61:e6:59:
         3d:eb:db:52:fe:2d:14:7f:27:ee:46:7a:a3:ba:c5:9f:6d:a0:
         58:9e:69:6c:e7:67:aa:99:9d:16:b7:86:e1:73:b4:94:9b:05:
         a9:75:5b:1f:d1:86:5c:ab:2e:b2:52:ba:46:34:b4:54:df:30:
         aa:74:2b:c3:1a:5a:d7:91:1e:1d:0a:8b:2f:89:dd:bc:1d:53:
         96:9a:ae:3b:ba:a9:42:76:26:db:34:ad:af:f4:bc:21:1a:54:
         84:5e:cd:19:41:e8:77:17:6b:e2:87:d7:7c:67:23:fc:b0:f7:
         80:0f:a4:b4:34:5b:96:8c:7d:03:85:8c:a4:8f:26:95:e1:b1:
         ce:ee:91:62:7d:78:24:82:4e:f9:af:42:d1:98:08:67:09:72:
         03:fa:a1:37:b1:a5:e2:89:fb:5c:77:f3:c2:6a:07:b9:27:a5:
         de:fa:5b:6a
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF6J6hzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTQwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWVmZmRlMWU0ZGMz
NzNkYzBmMTFlN2EwNDNkZjMwNWU4NWQ5ODVjNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJZBmKsdYiGZ16lHlr/Kn2wDCMu5vdekj9+kTiyuaXJLZ2Tn
caNTfZP8hO9xhXpvAQrftmRjVLs8nCY/RzYsAeCw1gOlpRIW9lfcm4DIlZzMc0pi
LCjMHvAqic3xTtUUE1pfEJY0aAXrReC3rtnCQpkVopMkD3AWMi/B2+dEnfTOP152
ZTDMDoMm6JMxCRJJ6tb6FDik9CDBnR1nwgSnnt622eBHJAislKQXwrZtuKjmvRtG
/GcpFlr+2cOqdqmoasH1CI3X3e/kKo2Zw+HbSJrxS8Wsg5ydEJSxKrtgrXF50+sK
ogdOErMjsGd3MuLGN0sbY2APeXzOzFpz70tZh1cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSe/94eTcNz3A8R56BD3zBehdmFxTAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L252X2VIazNEYzl3UEVlZWdROTh3WG9YWmhjVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2IADANBgkqhkiG9w0BAQsFAAOC
AQEAM6fBv8aJAspdDBsmypszGlVZuxkyZ9t40vHLVqZiogjitZQUf8EAejjoRDZ2
sI/kszgLtugG0CKxBlyH3sf2Lun/YIIv694fXQFyjF8XqGko2MByDeAoYeZZPevb
Uv4tFH8n7kZ6o7rFn22gWJ5pbOdnqpmdFreG4XO0lJsFqXVbH9GGXKsuslK6RjS0
VN8wqnQrwxpa15EeHQqLL4ndvB1TlpquO7qpQnYm2zStr/S8IRpUhF7NGUHodxdr
4ofXfGcj/LD3gA+ktDRblox9A4WMpI8mleGxzu6RYn14JIJO+a9C0ZgIZwlyA/qh
N7Gl4on7XHfzwmoHuSel3vpbag==
-----END CERTIFICATE-----