Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/8wjcuSVB_iX46vK3xfprUzfFXWw.roa
File:                     8wjcuSVB_iX46vK3xfprUzfFXWw.roa (raw, json)
Hash identifier:          tMRQ7H6Fo/BSMAXNENAoyZhoJuKhe8iuRTM5jIqrfUY=
Subject key identifier:   F3:08:DC:B9:25:41:FE:25:F8:EA:F2:B7:C5:FA:6B:53:37:C5:5D:6C
Certificate issuer:       /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial:       033B78
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/8wjcuSVB_iX46vK3xfprUzfFXWw.roa
Signing time:             Fri 06 May 2022 06:56:03 +0000
ROA not before:           Fri 06 May 2022 06:56:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     57602
IP address blocks:        2001:67c:240c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211832 (0x33b78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
        Validity
            Not Before: May  6 06:56:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f308dcb92541fe25f8eaf2b7c5fa6b5337c55d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7e:77:64:6a:54:39:09:c0:1b:e6:75:07:a5:
                    c5:98:bd:97:65:1c:08:db:7e:63:af:93:f2:bb:6a:
                    cb:04:ac:5a:54:af:05:5d:3a:34:92:58:81:cc:28:
                    03:02:42:6c:01:ce:0f:f3:15:5b:84:02:a3:35:09:
                    2a:9e:45:32:b9:2d:40:ef:00:03:c1:59:7a:72:41:
                    ba:c0:c2:f9:8a:98:a7:2e:db:1e:96:e0:4c:dc:da:
                    f6:3d:4b:a0:a3:09:25:c3:ff:0a:ae:54:ee:9d:f6:
                    29:2b:e4:a1:37:38:b9:76:5d:3f:34:ed:ae:4b:c7:
                    6e:46:38:80:17:99:8a:9e:1f:59:55:1e:b3:42:a6:
                    32:78:6c:67:74:d4:09:dc:b2:b2:6b:48:25:be:05:
                    8d:2d:85:29:73:be:d8:20:27:c2:1d:61:3f:8f:81:
                    f9:e0:54:3a:e9:a5:6f:53:cb:41:18:9b:f6:89:75:
                    8a:09:73:ba:e9:d7:22:df:b2:79:0a:7b:7e:b8:50:
                    dd:52:51:c0:86:23:79:a2:94:8e:a6:d0:a0:85:23:
                    8e:f1:84:6b:93:6c:21:8f:c8:de:fd:eb:92:c1:7d:
                    5e:d1:06:d7:62:17:49:19:05:51:78:9c:79:28:4a:
                    4b:e2:83:9b:44:6c:19:27:d3:ad:33:0a:a0:25:d6:
                    d9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:08:DC:B9:25:41:FE:25:F8:EA:F2:B7:C5:FA:6B:53:37:C5:5D:6C
            X509v3 Authority Key Identifier:
                keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/8wjcuSVB_iX46vK3xfprUzfFXWw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:240c::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:40:11:9f:8d:57:63:22:54:cd:34:2b:b6:b1:5f:bd:db:9a:
         f1:be:3c:69:c3:56:6e:6e:a6:4c:45:48:74:62:e4:3a:12:7d:
         82:da:1d:84:da:61:fd:5f:74:4f:85:ff:da:0b:03:41:bf:31:
         a6:9e:5e:2e:b6:0d:fb:2e:92:ae:c2:56:57:cc:13:6b:36:78:
         3b:81:0e:8f:fc:17:15:f8:f1:fc:ff:f2:6e:29:90:18:af:4d:
         e6:60:26:2b:4e:47:f2:43:75:15:88:94:7f:97:fa:65:9a:f4:
         d8:f2:86:d9:89:3a:f3:d4:32:00:56:82:0c:f9:d6:06:8f:bc:
         96:c3:28:b2:19:0b:c5:7b:d1:4d:8c:b1:a9:58:1d:7e:40:2d:
         ee:88:59:93:5c:14:c6:3e:63:26:36:65:25:b0:93:5a:cc:4a:
         12:49:f9:8d:d5:38:30:aa:a9:45:40:68:2a:e5:31:61:a8:26:
         5b:a9:e5:b4:96:79:01:0f:97:76:72:a7:f5:19:ed:75:d4:3c:
         1a:2e:15:81:29:30:8b:ec:89:b0:dc:1c:67:19:00:12:64:8e:
         0c:c7:66:db:c2:18:1c:ae:95:11:71:75:92:fb:ec:8f:9d:2f:
         9c:56:31:e6:18:8d:09:2a:0b:93:b9:40:be:4b:5c:0a:93:a1:
         37:78:5d:e7
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIDAzt4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGY0
NWU3OTE0MTEzMGNlZWM4NTcyMTVmOWJiZGQ3YTU1YmFmNGU3N2YwHhcNMjIwNTA2
MDY1NjAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmMzA4ZGNiOTI1NDFm
ZTI1ZjhlYWYyYjdjNWZhNmI1MzM3YzU1ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA7H53ZGpUOQnAG+Z1B6XFmL2XZRwI235jr5Pyu2rLBKxaVK8F
XTo0kliBzCgDAkJsAc4P8xVbhAKjNQkqnkUyuS1A7wADwVl6ckG6wML5ipinLtse
luBM3Nr2PUugowklw/8KrlTunfYpK+ShNzi5dl0/NO2uS8duRjiAF5mKnh9ZVR6z
QqYyeGxndNQJ3LKya0glvgWNLYUpc77YICfCHWE/j4H54FQ66aVvU8tBGJv2iXWK
CXO66dci37J5Cnt+uFDdUlHAhiN5opSOptCghSOO8YRrk2whj8je/euSwX1e0QbX
YhdJGQVReJx5KEpL4oObRGwZJ9OtMwqgJdbZWQIDAQABo4ICDDCCAggwHQYDVR0O
BBYEFPMI3LklQf4l+Oryt8X6a1M3xV1sMB8GA1UdIwQYMBaAFPReeRQRMM7shXIV
+bvdelW69Od/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
OUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4LzEv
OHdqY3VTVkJfaVg0NnZLM3hmcHJVemZGWFd3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9l
YzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4LzEvOUY1NUZCRXd6dXlG
Y2hYNXU5MTZWYnIwNTM4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCQMMA0GCSqGSIb3DQEBCwUA
A4IBAQB0QBGfjVdjIlTNNCu2sV+925rxvjxpw1ZubqZMRUh0YuQ6En2C2h2E2mH9
X3RPhf/aCwNBvzGmnl4utg37LpKuwlZXzBNrNng7gQ6P/BcV+PH8//JuKZAYr03m
YCYrTkfyQ3UViJR/l/plmvTY8obZiTrz1DIAVoIM+dYGj7yWwyiyGQvFe9FNjLGp
WB1+QC3uiFmTXBTGPmMmNmUlsJNazEoSSfmN1TgwqqlFQGgq5TFhqCZbqeW0lnkB
D5d2cqf1Ge111DwaLhWBKTCL7Imw3BxnGQASZI4Mx2bbwhgcrpURcXWS++yPnS+c
VjHmGI0JKguTuUC+S1wKk6E3eF3n
-----END CERTIFICATE-----