Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/oAmOqRyGNOlz9Ka4G15dnt1JLzs.roa
File:                     oAmOqRyGNOlz9Ka4G15dnt1JLzs.roa (raw, json)
Hash identifier:          PCxXwNfTendRIGIQeOXRMuY5UkUFKFkmszuXZpeHH0U=
Subject key identifier:   A0:09:8E:A9:1C:86:34:E9:73:F4:A6:B8:1B:5E:5D:9E:DD:49:2F:3B
Certificate issuer:       /CN=cd698f55b40959b178f7cecbc20c35e9c1379344
Certificate serial:       0780E48F
Authority key identifier: CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/oAmOqRyGNOlz9Ka4G15dnt1JLzs.roa
Signing time:             Sat 01 Jan 2022 06:57:55 +0000
ROA not before:           Sat 01 Jan 2022 06:57:55 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     25540
IP address blocks:        185.26.88.0/22 maxlen: 22
                          2a00:88a0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125887631 (0x780e48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd698f55b40959b178f7cecbc20c35e9c1379344
        Validity
            Not Before: Jan  1 06:57:55 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=a0098ea91c8634e973f4a6b81b5e5d9edd492f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:f2:15:cf:d8:d2:c5:f5:bb:73:e3:68:26:
                    5d:94:da:b7:90:9c:1d:d6:91:6e:6c:65:eb:67:0c:
                    ae:8b:a2:20:95:0c:61:71:41:ba:f2:29:34:a6:a5:
                    5f:93:2f:aa:c6:08:3b:fa:34:f3:cb:24:6d:64:30:
                    dd:4c:ea:ff:06:6d:fe:43:83:4e:4e:60:cd:16:07:
                    f0:3a:8c:82:f6:03:a1:5d:d6:0c:30:ba:64:f0:9b:
                    79:12:94:0f:a0:be:4a:a7:50:79:72:94:35:9a:e3:
                    ac:44:d0:73:8c:8a:82:f3:72:50:43:d0:81:30:5f:
                    1e:e3:97:6a:e1:34:95:cd:fc:ed:60:fb:07:3f:7c:
                    f2:3a:83:b1:4d:37:f3:a0:a7:ec:87:a2:50:a9:ec:
                    1f:0f:59:70:cf:1c:93:14:75:8c:38:b8:b7:9e:86:
                    cb:9c:40:ed:2f:63:71:1b:80:19:5f:29:8e:ab:ba:
                    e8:cc:1f:9c:9c:32:be:98:91:59:d8:43:be:5f:a8:
                    a4:22:66:13:4c:b9:e0:a0:c1:59:f3:7b:3c:d8:69:
                    9b:2d:10:0f:cb:e4:94:2f:a3:ed:be:1c:e2:40:d8:
                    24:e4:bc:fb:dd:7b:30:df:58:32:c1:8c:c9:46:31:
                    2b:e1:31:4e:25:8a:63:5c:b6:a1:53:cc:a6:53:49:
                    4d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:09:8E:A9:1C:86:34:E9:73:F4:A6:B8:1B:5E:5D:9E:DD:49:2F:3B
            X509v3 Authority Key Identifier:
                keyid:CD:69:8F:55:B4:09:59:B1:78:F7:CE:CB:C2:0C:35:E9:C1:37:93:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWmPVbQJWbF4987Lwgw16cE3k0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/oAmOqRyGNOlz9Ka4G15dnt1JLzs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a1449e-2adb-4b1a-b23c-bd6d8badcdc0/1/zWmPVbQJWbF4987Lwgw16cE3k0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.26.88.0/22
                IPv6:
                  2a00:88a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:57:8e:71:f2:e8:5a:e4:44:57:be:4e:94:16:25:4b:f0:14:
         92:84:f0:aa:40:08:e5:6a:74:00:9b:ef:2b:98:26:59:2b:60:
         de:2a:c2:9d:d9:48:2c:c1:d6:14:14:0e:2c:14:f5:02:16:05:
         14:b1:4c:0c:7b:21:54:47:06:2b:c0:cc:80:8d:33:4f:ac:cd:
         d5:ee:05:6b:50:93:07:23:d1:0c:40:49:8f:1c:b8:6c:67:7a:
         4d:ba:00:67:be:1b:50:04:21:77:fd:fd:bd:bf:8f:a8:6f:b6:
         32:a4:11:3a:26:56:ab:68:b8:50:b8:f6:48:f7:66:87:7a:fb:
         68:41:4a:f0:9e:df:92:02:d5:d0:36:3a:9c:58:6f:11:1b:a2:
         35:1f:ec:07:0e:a2:68:b6:bd:f1:42:37:9c:bb:d4:fb:77:87:
         2f:f3:7f:2c:82:82:5d:49:9e:2b:72:dc:12:68:0c:1e:53:8e:
         9c:1b:30:00:f2:ba:0e:79:79:2a:d7:20:c8:93:7b:f3:f1:c1:
         f2:f3:6a:90:c8:36:39:63:8d:c1:a3:da:ca:88:6b:6a:8b:87:
         53:55:98:cd:73:67:c8:39:76:59:73:a9:94:a2:7d:b9:09:65:
         d4:df:e0:17:18:3a:29:b8:f3:85:5c:09:aa:dd:e4:63:ef:7d:
         c4:f8:b3:bb
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEB4DkjzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZDY5OGY1NWI0MDk1OWIxNzhmN2NlY2JjMjBjMzVlOWMxMzc5MzQ0MB4XDTIyMDEw
MTA2NTc1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTAwOThlYTkxYzg2
MzRlOTczZjRhNmI4MWI1ZTVkOWVkZDQ5MmYzYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMok8hXP2NLF9btz42gmXZTat5CcHdaRbmxl62cMrouiIJUM
YXFBuvIpNKalX5MvqsYIO/o088skbWQw3Uzq/wZt/kODTk5gzRYH8DqMgvYDoV3W
DDC6ZPCbeRKUD6C+SqdQeXKUNZrjrETQc4yKgvNyUEPQgTBfHuOXauE0lc387WD7
Bz988jqDsU0386Cn7IeiUKnsHw9ZcM8ckxR1jDi4t56Gy5xA7S9jcRuAGV8pjqu6
6MwfnJwyvpiRWdhDvl+opCJmE0y54KDBWfN7PNhpmy0QD8vklC+j7b4c4kDYJOS8
+917MN9YMsGMyUYxK+ExTiWKY1y2oVPMplNJTYMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSgCY6pHIY06XP0prgbXl2e3UkvOzAfBgNVHSMEGDAWgBTNaY9VtAlZsXj3
zsvCDDXpwTeTRDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pXbVBWYlFKV2JGNDk4N0x3Z3cxNmNFM2swUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTAvYTE0NDllLTJhZGItNGIxYS1iMjNjLWJkNmQ4YmFkY2RjMC8x
L29BbU9xUnlHTk9sejlLYTRHMTVkbnQxSkx6cy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTAv
YTE0NDllLTJhZGItNGIxYS1iMjNjLWJkNmQ4YmFkY2RjMC8xL3pXbVBWYlFKV2JG
NDk4N0x3Z3cxNmNFM2swUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArkaWDANBAIAAjAHAwUAKgCIoDAN
BgkqhkiG9w0BAQsFAAOCAQEAcVeOcfLoWuREV75OlBYlS/AUkoTwqkAI5Wp0AJvv
K5gmWStg3irCndlILMHWFBQOLBT1AhYFFLFMDHshVEcGK8DMgI0zT6zN1e4Fa1CT
ByPRDEBJjxy4bGd6TboAZ74bUAQhd/39vb+PqG+2MqQROiZWq2i4ULj2SPdmh3r7
aEFK8J7fkgLV0DY6nFhvERuiNR/sBw6iaLa98UI3nLvU+3eHL/N/LIKCXUmeK3Lc
EmgMHlOOnBswAPK6Dnl5KtcgyJN78/HB8vNqkMg2OWONwaPayohraouHU1WYzXNn
yDl2WXOplKJ9uQll1N/gFxg6KbjzhVwJqt3kY+99xPizuw==
-----END CERTIFICATE-----