Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/w2yb5fj8-wWr2_b-I4HwE2dITTs.roa
File:                     w2yb5fj8-wWr2_b-I4HwE2dITTs.roa (raw, json)
Hash identifier:          Sykv7zmmD/g9dx9mQZZK73A2lfyNfsjPjosgENXABTw=
Subject key identifier:   C3:6C:9B:E5:F8:FC:FB:05:AB:DB:F6:FE:23:81:F0:13:67:48:4D:3B
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       17D4AFA1
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/w2yb5fj8-wWr2_b-I4HwE2dITTs.roa
Signing time:             Sat 01 Jan 2022 04:54:33 +0000
ROA not before:           Sat 01 Jan 2022 04:54:33 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     140224
IP address blocks:        45.142.60.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399814561 (0x17d4afa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 04:54:33 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=c36c9be5f8fcfb05abdbf6fe2381f01367484d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a3:70:1f:c8:9a:7f:67:50:11:0a:b7:e0:c8:
                    9a:44:1a:1d:9f:a5:cf:b3:a4:fe:22:5c:db:7b:99:
                    89:77:ec:13:cf:b8:7a:73:48:41:b4:65:02:94:22:
                    42:1f:06:0d:ad:00:e3:18:4c:a1:e8:e9:3e:31:d1:
                    c1:db:f6:b2:ee:21:7e:cf:85:71:5d:6f:00:1d:b3:
                    bc:be:75:25:d3:e1:8b:03:12:fb:98:a0:98:1d:dd:
                    35:ea:ee:14:38:37:9f:59:42:e2:c3:d6:fb:1d:01:
                    47:3d:93:f5:72:fb:c6:c5:f9:12:0f:96:87:73:6a:
                    70:98:a6:67:f6:d1:d7:7c:6d:ed:61:9f:17:aa:b4:
                    ad:83:46:aa:1d:c2:60:60:e6:0c:0d:d7:ab:58:cd:
                    cc:3c:30:7c:1a:de:af:de:ad:ae:72:dd:dd:34:06:
                    b6:14:3e:02:c2:3a:77:d9:e3:cc:59:ec:80:96:c2:
                    7d:62:0d:07:ad:6b:06:5c:4d:d7:b8:4f:74:05:19:
                    fd:ec:1f:0a:4c:ff:9a:d5:70:93:01:a4:2c:fa:7a:
                    5a:d2:0f:5b:35:69:36:ee:66:4d:cb:63:eb:51:4e:
                    39:5c:5f:9f:9d:a0:80:ff:17:9f:a4:6c:72:11:cf:
                    45:4d:c7:a4:2d:9b:17:28:39:e7:81:ab:94:f2:78:
                    64:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6C:9B:E5:F8:FC:FB:05:AB:DB:F6:FE:23:81:F0:13:67:48:4D:3B
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/w2yb5fj8-wWr2_b-I4HwE2dITTs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:30:e7:72:2d:ec:2b:67:07:0f:96:fa:87:a4:9a:ab:bf:4a:
         c8:94:69:dd:cf:1f:ba:ec:ea:d1:5b:99:9f:98:e9:5c:05:da:
         71:7d:be:a9:e7:0e:4d:c3:8d:52:0e:ef:1e:05:7e:d9:8b:fb:
         1b:c3:7b:69:12:22:0c:4a:97:e3:ac:b4:5c:33:0b:57:83:8b:
         47:c9:4c:47:ff:f9:a0:be:97:47:1f:20:2d:fd:c3:55:93:84:
         25:e4:bd:0b:af:04:22:b9:ac:e7:8c:d5:3c:5e:4e:c7:82:0c:
         b0:91:68:87:af:6e:fe:ba:db:69:8f:1e:04:1b:a4:67:5c:f6:
         3e:9a:73:5c:d2:a1:6a:ce:f9:d0:cb:6b:37:8e:36:83:f7:9e:
         34:2f:78:1d:22:bd:0d:c0:6b:20:0b:d8:c4:a1:13:36:6a:bb:
         c4:79:fc:30:2b:87:75:16:d0:80:00:53:33:7c:2a:e9:f0:6d:
         df:a8:64:b7:70:8e:2c:2a:56:6d:c1:55:1d:1a:37:a9:e9:3c:
         88:61:ef:2a:56:87:06:b8:9d:a5:ea:0b:9b:7a:21:c5:92:27:
         14:e7:e6:bd:bf:c2:7a:20:1c:53:b3:31:0d:83:c1:a5:26:55:
         90:98:6e:da:cc:6a:b6:a2:19:41:3e:ba:e1:e6:b3:50:ee:03:
         a4:60:ce:9b
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEF9SvoTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YzhmZDFhOGFlNTk5NmMxZTU2OTJjMWE4YzQyYmZlOWMzYmE1NzQ1MB4XDTIyMDEw
MTA0NTQzM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzM2YzliZTVmOGZj
ZmIwNWFiZGJmNmZlMjM4MWYwMTM2NzQ4NGQzYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKCjcB/Imn9nUBEKt+DImkQaHZ+lz7Ok/iJc23uZiXfsE8+4
enNIQbRlApQiQh8GDa0A4xhMoejpPjHRwdv2su4hfs+FcV1vAB2zvL51JdPhiwMS
+5igmB3dNeruFDg3n1lC4sPW+x0BRz2T9XL7xsX5Eg+Wh3NqcJimZ/bR13xt7WGf
F6q0rYNGqh3CYGDmDA3Xq1jNzDwwfBrer96trnLd3TQGthQ+AsI6d9njzFnsgJbC
fWINB61rBlxN17hPdAUZ/ewfCkz/mtVwkwGkLPp6WtIPWzVpNu5mTctj61FOOVxf
n52ggP8Xn6RschHPRU3HpC2bFyg554GrlPJ4ZEcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTDbJvl+Pz7Bavb9v4jgfATZ0hNOzAfBgNVHSMEGDAWgBRsj9GorlmWweVp
LBqMQr/pw7pXRTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2JJX1JxSzVabHNIbGFTd2FqRUtfNmNPNlYwVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDAvNDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8x
L3cyeWI1Zmo4LXdXcjJfYi1JNEh3RTJkSVRUcy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAv
NDkyNTkwLWEwMmYtNDQzZS1hYWEzLWZlYWMyNmVhZWNjMi8xL2JJX1JxSzVabHNI
bGFTd2FqRUtfNmNPNlYwVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2OPDANBgkqhkiG9w0BAQsFAAOC
AQEAxzDnci3sK2cHD5b6h6Saq79KyJRp3c8fuuzq0VuZn5jpXAXacX2+qecOTcON
Ug7vHgV+2Yv7G8N7aRIiDEqX46y0XDMLV4OLR8lMR//5oL6XRx8gLf3DVZOEJeS9
C68EIrms54zVPF5Ox4IMsJFoh69u/rrbaY8eBBukZ1z2PppzXNKhas750MtrN442
g/eeNC94HSK9DcBrIAvYxKETNmq7xHn8MCuHdRbQgABTM3wq6fBt36hkt3COLCpW
bcFVHRo3qek8iGHvKlaHBridpeoLm3ohxZInFOfmvb/CeiAcU7MxDYPBpSZVkJhu
2sxqtqIZQT664eazUO4DpGDOmw==
-----END CERTIFICATE-----