Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/t84XdlatXVK8XJFEYMzDhi0NONo.roa
File:                     t84XdlatXVK8XJFEYMzDhi0NONo.roa (raw, json)
Hash identifier:          0Ljms9ptE6EaP+X6SclVL1b3TAaHwwL8+vYTPKHQECc=
Subject key identifier:   B7:CE:17:76:56:AD:5D:52:BC:5C:91:44:60:CC:C3:86:2D:0D:38:DA
Certificate issuer:       /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial:       08AB4801
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/t84XdlatXVK8XJFEYMzDhi0NONo.roa
Signing time:             Sat 01 Jan 2022 06:57:30 +0000
ROA not before:           Sat 01 Jan 2022 06:57:30 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     209042
IP address blocks:        5.182.248.0/22 maxlen: 24
                          2a0e:a400::/29 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145442817 (0x8ab4801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
        Validity
            Not Before: Jan  1 06:57:30 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=b7ce177656ad5d52bc5c914460ccc3862d0d38da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:d9:48:60:b3:a8:30:f6:f8:3b:bd:c4:d6:
                    80:b8:cb:c3:88:6c:c4:48:fd:7d:d6:b0:1e:ed:d0:
                    ed:84:89:f4:54:29:96:fa:31:f1:eb:65:b3:b2:62:
                    a9:3f:5f:f2:87:58:4e:47:e3:0b:c6:13:d9:56:a6:
                    46:26:4b:6b:90:99:c7:a5:8f:4a:02:b5:96:bb:62:
                    40:5c:17:67:24:82:c8:93:87:cd:14:89:cf:8c:e5:
                    f6:e9:7b:bf:e0:20:d9:b0:5e:dc:c7:c5:e6:2b:58:
                    e5:c1:bb:6f:c0:45:77:5d:8c:2a:fe:c8:4d:35:70:
                    11:89:29:b6:b2:4c:b4:b9:38:c2:fd:0f:a5:d1:bf:
                    8f:f0:84:2c:d6:8c:16:e0:90:93:fd:e0:dc:74:7f:
                    5d:cb:33:3a:ea:f8:b9:8c:1a:3f:c3:c2:a0:00:e7:
                    4f:34:f1:b8:65:18:be:c6:2e:6e:8c:c2:c0:3f:00:
                    99:32:82:e5:b0:72:02:fa:35:29:8c:20:c9:22:92:
                    cc:05:71:ca:03:6d:63:77:47:10:42:0c:18:2b:6f:
                    a4:cc:9c:59:cb:c8:14:25:37:31:01:ce:8f:38:02:
                    0c:9c:7c:69:d6:fe:32:bb:13:78:2e:ed:cd:9d:92:
                    5c:05:d2:5b:68:cf:7b:65:e6:2c:e5:2e:e1:a2:43:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CE:17:76:56:AD:5D:52:BC:5C:91:44:60:CC:C3:86:2D:0D:38:DA
            X509v3 Authority Key Identifier:
                keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/t84XdlatXVK8XJFEYMzDhi0NONo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.248.0/22
                IPv6:
                  2a0e:a400::/29

    Signature Algorithm: sha256WithRSAEncryption
         20:81:45:71:4e:3f:15:95:80:0e:dd:dd:a4:35:2b:09:b5:bd:
         6c:bc:95:78:50:35:30:fe:b5:82:0b:5f:0f:d0:33:34:d5:99:
         7a:5c:c2:98:c1:50:58:a8:24:91:a0:fe:f7:1b:da:4c:c4:24:
         57:eb:5d:50:c1:1f:20:16:2c:e6:55:31:86:38:79:54:d2:71:
         fd:2c:44:97:8d:06:18:ac:39:a5:72:4d:58:87:9f:5d:ca:91:
         fd:d6:80:12:36:67:c8:c6:fa:4c:a1:75:de:ee:7b:6f:41:35:
         df:05:09:68:d7:40:4e:f9:91:b9:5d:e1:03:f4:60:08:9e:2e:
         07:e2:ee:60:b7:e0:fa:ab:33:e4:24:c7:be:65:55:0d:41:d1:
         a1:39:f8:e2:2a:3e:d0:cf:05:99:31:aa:86:1f:ab:c5:e9:fd:
         fa:38:e8:fa:da:da:18:1f:3d:97:7e:05:9c:75:db:f9:6f:27:
         bb:17:e8:58:90:a7:86:47:d7:30:9b:f8:6a:51:33:40:53:0c:
         17:96:46:79:5b:ee:35:33:34:72:ee:d1:b3:05:a1:d8:94:88:
         b9:16:28:5e:f6:cb:0b:57:af:00:c8:b4:33:f8:5e:d7:27:e5:
         c8:6c:8e:28:e8:9b:1b:9f:2e:94:99:ec:5c:cb:e7:83:ef:47:
         ee:16:ae:8a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECKtIATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MjJmNWE2YzBiOTU2NDdmMDcwMzUwZTY1MjRlMTIyMGZiYTQ3ZmEzMB4XDTIyMDEw
MTA2NTczMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjdjZTE3NzY1NmFk
NWQ1MmJjNWM5MTQ0NjBjY2MzODYyZDBkMzhkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALJw2Uhgs6gw9vg7vcTWgLjLw4hsxEj9fdawHu3Q7YSJ9FQp
lvox8etls7JiqT9f8odYTkfjC8YT2VamRiZLa5CZx6WPSgK1lrtiQFwXZySCyJOH
zRSJz4zl9ul7v+Ag2bBe3MfF5itY5cG7b8BFd12MKv7ITTVwEYkptrJMtLk4wv0P
pdG/j/CELNaMFuCQk/3g3HR/XcszOur4uYwaP8PCoADnTzTxuGUYvsYubozCwD8A
mTKC5bByAvo1KYwgySKSzAVxygNtY3dHEEIMGCtvpMycWcvIFCU3MQHOjzgCDJx8
adb+MrsTeC7tzZ2SXAXSW2jPe2XmLOUu4aJDFH0CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBS3zhd2Vq1dUrxckURgzMOGLQ042jAfBgNVHSMEGDAWgBSCL1psC5VkfwcD
UOZSThIg+6R/ozAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2dpOWFiQXVWWkg4SEExRG1VazRTSVB1a2Y2TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDIvNWRmMjYyLTJlMGItNGZiNy1iMGQzLTVkMGUwOWEwMjA0Zi8x
L3Q4NFhkbGF0WFZLOFhKRkVZTXpEaGkwTk9Oby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIv
NWRmMjYyLTJlMGItNGZiNy1iMGQzLTVkMGUwOWEwMjA0Zi8xL2dpOWFiQXVWWkg4
SEExRG1VazRTSVB1a2Y2TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAgW2+DANBAIAAjAHAwUDKg6kADAN
BgkqhkiG9w0BAQsFAAOCAQEAIIFFcU4/FZWADt3dpDUrCbW9bLyVeFA1MP61ggtf
D9AzNNWZelzCmMFQWKgkkaD+9xvaTMQkV+tdUMEfIBYs5lUxhjh5VNJx/SxEl40G
GKw5pXJNWIefXcqR/daAEjZnyMb6TKF13u57b0E13wUJaNdATvmRuV3hA/RgCJ4u
B+LuYLfg+qsz5CTHvmVVDUHRoTn44io+0M8FmTGqhh+rxen9+jjo+traGB89l34F
nHXb+W8nuxfoWJCnhkfXMJv4alEzQFMMF5ZGeVvuNTM0cu7RswWh2JSIuRYoXvbL
C1evAMi0M/he1yflyGyOKOibG58ulJnsXMvng+9H7hauig==
-----END CERTIFICATE-----