Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/fnbhadEZlrDbvLUp-h8GBwwlIHo.roa
File:                     fnbhadEZlrDbvLUp-h8GBwwlIHo.roa (raw, json)
Hash identifier:          zkg5lYUAMfJy1aTuOd2Tj3dVCkE1XsM9e09q6iL/HeI=
Subject key identifier:   7E:76:E1:69:D1:19:96:B0:DB:BC:B5:29:FA:1F:06:07:0C:25:20:7A
Certificate issuer:       /CN=e466483396afb377e5e379d1615bde0fd4d9ed47
Certificate serial:       01E42A
Authority key identifier: E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/fnbhadEZlrDbvLUp-h8GBwwlIHo.roa
Signing time:             Thu 21 Apr 2022 12:08:58 +0000
ROA not before:           Thu 21 Apr 2022 12:08:58 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     210974
IP address blocks:        5.44.254.0/24 maxlen: 24
                          2a12:cf40::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123946 (0x1e42a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e466483396afb377e5e379d1615bde0fd4d9ed47
        Validity
            Not Before: Apr 21 12:08:58 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7e76e169d11996b0dbbcb529fa1f06070c25207a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4c:41:1e:57:65:c8:a3:9b:4e:42:ea:1d:bf:
                    66:de:78:df:eb:9f:4c:79:85:05:46:a4:bc:98:ea:
                    f4:6f:51:2f:33:22:02:a1:e6:78:7b:4c:44:53:3d:
                    8c:6c:a4:b1:02:fc:9e:5a:90:85:ac:2a:7d:75:a8:
                    c7:c3:cd:e8:d5:0b:39:77:2e:d6:fb:b6:ea:03:32:
                    1e:74:42:4f:29:b5:20:44:3e:f8:58:44:79:dc:5c:
                    5c:3b:ae:48:52:ff:3d:a5:91:ba:d1:8c:66:1b:f3:
                    70:2c:c0:00:d7:f3:1f:19:fc:91:5f:08:9c:4f:a6:
                    40:c9:53:9b:f1:9a:09:ba:74:f5:03:d2:cc:3e:29:
                    92:6a:63:6d:0f:90:35:bc:66:18:b9:3d:a0:ca:53:
                    65:eb:94:c2:0d:f3:55:ef:b1:ac:97:0b:76:87:dc:
                    93:19:d1:f3:88:6e:34:47:46:91:9b:f6:61:f9:f4:
                    19:d0:35:7d:53:80:30:dc:06:08:be:6d:cb:1d:37:
                    f2:10:a4:92:39:78:18:b9:1e:dd:7e:19:03:31:c6:
                    fa:db:f2:67:03:63:85:b7:db:75:7b:f2:47:ed:65:
                    52:0e:d3:8e:7c:65:6d:99:2d:56:4f:d2:e9:d2:b4:
                    d9:c2:69:28:4c:39:8b:2b:35:6d:45:d3:6a:7e:c9:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:76:E1:69:D1:19:96:B0:DB:BC:B5:29:FA:1F:06:07:0C:25:20:7A
            X509v3 Authority Key Identifier:
                keyid:E4:66:48:33:96:AF:B3:77:E5:E3:79:D1:61:5B:DE:0F:D4:D9:ED:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GZIM5avs3fl43nRYVveD9TZ7Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/fnbhadEZlrDbvLUp-h8GBwwlIHo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/18b5bb-8e41-4e88-bdbe-341c63614280/1/5GZIM5avs3fl43nRYVveD9TZ7Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.44.254.0/24
                IPv6:
                  2a12:cf40::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:43:1a:d2:4d:c0:7a:50:80:33:d8:7b:ca:b7:8b:f9:a0:77:
         d0:51:8e:58:70:83:39:ef:9f:0a:f2:2d:e8:bd:3d:1a:c4:5f:
         cf:43:4d:72:da:b4:e5:47:38:a9:db:c9:74:4b:08:ed:e7:62:
         d3:67:c2:be:f2:01:08:54:f1:52:6a:3c:65:bf:d3:08:10:6a:
         75:e4:f2:9b:36:9e:17:d6:1c:bf:b1:1d:18:50:5c:80:6b:1d:
         20:5e:78:c6:c5:e3:25:b5:f8:ea:68:1a:f3:86:41:40:31:a6:
         6a:e7:c0:53:67:2f:61:39:dd:b2:9b:a1:9e:3f:62:6b:24:43:
         2d:f5:49:58:07:1f:54:00:69:e3:d8:2c:f7:b1:7e:8b:61:62:
         87:79:8a:a7:9d:3e:7b:ab:fd:e6:65:29:c8:1e:3a:38:79:d8:
         d1:dd:a9:ba:18:5f:22:ae:ae:1d:37:ad:2b:fc:5d:88:66:3a:
         1c:e5:eb:38:2e:95:cf:0e:33:5f:22:79:46:6f:8b:6f:90:79:
         83:2e:0b:c8:9f:17:10:a5:bc:f3:1a:34:aa:b0:c3:f1:5e:76:
         47:96:b2:89:46:28:5b:05:76:72:ec:ba:30:d7:4e:64:8d:55:
         ce:03:f0:20:50:29:6b:0f:9e:b2:42:cd:82:99:3d:f3:cb:b3:
         eb:5b:58:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIDAeQqMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU0
NjY0ODMzOTZhZmIzNzdlNWUzNzlkMTYxNWJkZTBmZDRkOWVkNDcwHhcNMjIwNDIx
MTIwODU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3ZTc2ZTE2OWQxMTk5
NmIwZGJiY2I1MjlmYTFmMDYwNzBjMjUyMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv0xBHldlyKObTkLqHb9m3njf659MeYUFRqS8mOr0b1EvMyIC
oeZ4e0xEUz2MbKSxAvyeWpCFrCp9dajHw83o1Qs5dy7W+7bqAzIedEJPKbUgRD74
WER53FxcO65IUv89pZG60YxmG/NwLMAA1/MfGfyRXwicT6ZAyVOb8ZoJunT1A9LM
PimSamNtD5A1vGYYuT2gylNl65TCDfNV77Gslwt2h9yTGdHziG40R0aRm/Zh+fQZ
0DV9U4Aw3AYIvm3LHTfyEKSSOXgYuR7dfhkDMcb62/JnA2OFt9t1e/JH7WVSDtOO
fGVtmS1WT9Lp0rTZwmkoTDmLKzVtRdNqfskKOQIDAQABo4ICGDCCAhQwHQYDVR0O
BBYEFH524WnRGZaw27y1KfofBgcMJSB6MB8GA1UdIwQYMBaAFORmSDOWr7N35eN5
0WFb3g/U2e1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
NUdaSU01YXZzM2ZsNDNuUllWdmVEOVRaN1VjLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kNC8xOGI1YmItOGU0MS00ZTg4LWJkYmUtMzQxYzYzNjE0MjgwLzEv
Zm5iaGFkRVpsckRidkxVcC1oOEdCd3dsSUhvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8x
OGI1YmItOGU0MS00ZTg4LWJkYmUtMzQxYzYzNjE0MjgwLzEvNUdaSU01YXZzM2Zs
NDNuUllWdmVEOVRaN1VjLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4G
CCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQABSz+MA0EAgACMAcDBQAqEs9AMA0G
CSqGSIb3DQEBCwUAA4IBAQCbQxrSTcB6UIAz2HvKt4v5oHfQUY5YcIM5758K8i3o
vT0axF/PQ01y2rTlRzip28l0Swjt52LTZ8K+8gEIVPFSajxlv9MIEGp15PKbNp4X
1hy/sR0YUFyAax0gXnjGxeMltfjqaBrzhkFAMaZq58BTZy9hOd2ym6GeP2JrJEMt
9UlYBx9UAGnj2Cz3sX6LYWKHeYqnnT57q/3mZSnIHjo4edjR3am6GF8irq4dN60r
/F2IZjoc5es4LpXPDjNfInlGb4tvkHmDLgvInxcQpbzzGjSqsMPxXnZHlrKJRihb
BXZy7Low105kjVXOA/AgUClrD56yQs2CmT3zy7PrW1gY
-----END CERTIFICATE-----