Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/3goEuFK0rRfulgza4iYo5HwA9HE.roa
File:                     3goEuFK0rRfulgza4iYo5HwA9HE.roa (raw, json)
Hash identifier:          k0KAqBg391nj7qxAnBVtYxozKTCU/kE0cgt+RbqOE6E=
Subject key identifier:   DE:0A:04:B8:52:B4:AD:17:EE:96:0C:DA:E2:26:28:E4:7C:00:F4:71
Certificate issuer:       /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial:       0182438F599AC6587A050CC77F800C00A484
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/3goEuFK0rRfulgza4iYo5HwA9HE.roa
Signing time:             Thu 28 Jul 2022 06:47:24 +0000
ROA not before:           Thu 28 Jul 2022 06:47:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201660
IP address blocks:        185.56.72.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:43:8f:59:9a:c6:58:7a:05:0c:c7:7f:80:0c:00:a4:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
        Validity
            Not Before: Jul 28 06:47:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=de0a04b852b4ad17ee960cdae22628e47c00f471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1d:d9:5f:53:52:ec:ea:97:f2:5c:d1:6e:9a:
                    d1:6d:8b:85:d1:20:8d:16:b6:d8:b6:77:5d:b0:00:
                    77:df:cf:ad:9f:74:36:38:c5:e6:75:f7:ec:5c:28:
                    0b:bc:9c:3a:42:ac:1a:3f:aa:d0:8a:0f:f1:9d:03:
                    b1:5c:33:1c:8c:65:da:4b:a7:e9:66:1a:c4:de:b9:
                    b5:4e:be:b1:b4:64:9b:92:77:28:4b:9c:a2:94:d3:
                    d6:4a:49:82:4d:9e:26:60:ab:28:7b:a2:21:a4:66:
                    43:4e:0b:62:c1:93:7a:ff:ee:30:b6:b9:6f:f3:4a:
                    64:16:28:6c:65:2a:7c:fd:24:b4:f9:82:fd:11:18:
                    7c:ee:be:af:2c:d4:d7:d4:52:0d:0f:b4:97:cc:23:
                    98:c6:da:8a:3b:c0:13:00:01:c3:7e:0f:2c:90:a7:
                    26:fa:35:0b:76:76:62:04:52:61:10:cf:07:09:c1:
                    ed:4b:46:d3:1c:b0:90:f8:16:e7:9b:99:a3:2d:65:
                    aa:a6:a9:39:29:86:9f:de:f7:28:5a:87:81:d0:9d:
                    32:64:76:4b:66:6f:a3:99:63:e3:93:37:ce:e2:a9:
                    dd:c0:c2:df:f2:37:31:5d:08:34:d2:95:85:5b:8b:
                    f9:9b:b3:6d:ab:35:94:02:ef:ab:b3:76:38:bf:2f:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0A:04:B8:52:B4:AD:17:EE:96:0C:DA:E2:26:28:E4:7C:00:F4:71
            X509v3 Authority Key Identifier:
                keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/3goEuFK0rRfulgza4iYo5HwA9HE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.56.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:b7:fc:e2:ef:55:6f:78:a7:9b:73:05:83:d8:d8:e4:91:ec:
         dd:97:f5:21:18:4e:50:16:61:86:5e:72:5c:a2:59:86:69:d2:
         3b:34:c4:f3:b5:50:28:f6:73:33:c8:84:8b:f6:6d:b9:b1:8e:
         c6:90:26:b7:20:91:a3:2b:64:7f:d7:74:a1:37:b7:32:15:0f:
         c2:37:03:4a:6e:cc:c7:c9:20:f7:ab:31:6b:47:28:52:a9:69:
         e6:99:62:ce:3f:26:b6:04:a3:17:65:e7:2e:84:9d:6b:04:2e:
         13:56:fd:7c:26:3d:ad:37:84:ad:3f:f0:a9:9f:2b:c4:62:e5:
         1e:d5:97:6c:98:7f:29:56:e9:4f:64:49:4d:e9:80:e8:2b:f1:
         2c:0f:3a:c8:30:b7:96:28:69:10:38:01:8a:3e:c9:b2:5b:69:
         3e:cc:24:ac:db:5c:cd:22:7e:cf:2f:2f:2c:8c:cc:16:9a:f1:
         c5:98:21:b4:10:a9:ea:03:dd:93:e9:49:d1:f6:11:7c:2b:89:
         11:44:6f:71:db:30:8d:fd:49:6c:77:2e:d0:cf:a1:97:12:98:
         e3:76:c2:99:f5:d7:96:d3:e0:a1:b3:2b:5a:0b:28:87:d9:91:
         cf:95:8f:b6:a0:a0:2d:52:88:bb:70:3e:f1:65:95:ac:ae:5e:
         86:4d:35:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYJDj1maxlh6BQzHf4AMAKSEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4
MmVkNmQwHhcNMjIwNzI4MDY0NzI0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTBhMDRiODUyYjRhZDE3ZWU5NjBjZGFlMjI2MjhlNDdjMDBmNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R3ZX1NS7OqX8lzRbprRbYuF0SCN
FrbYtnddsAB338+tn3Q2OMXmdffsXCgLvJw6QqwaP6rQig/xnQOxXDMcjGXaS6fp
ZhrE3rm1Tr6xtGSbkncoS5yilNPWSkmCTZ4mYKsoe6IhpGZDTgtiwZN6/+4wtrlv
80pkFihsZSp8/SS0+YL9ERh87r6vLNTX1FIND7SXzCOYxtqKO8ATAAHDfg8skKcm
+jULdnZiBFJhEM8HCcHtS0bTHLCQ+Bbnm5mjLWWqpqk5KYaf3vcoWoeB0J0yZHZL
Zm+jmWPjkzfO4qndwMLf8jcxXQg00pWFW4v5m7NtqzWUAu+rs3Y4vy87tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN4KBLhStK0X7pYM2uImKOR8APRxMB8GA1UdIwQY
MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut
MjZkMWU1NDU3OGYxLzEvM2dvRXVGSzByUmZ1bGd6YTRpWW81SHdBOUhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx
LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuThIMA0G
CSqGSIb3DQEBCwUAA4IBAQBDt/zi71VveKebcwWD2Njkkezdl/UhGE5QFmGGXnJc
olmGadI7NMTztVAo9nMzyISL9m25sY7GkCa3IJGjK2R/13ShN7cyFQ/CNwNKbszH
ySD3qzFrRyhSqWnmmWLOPya2BKMXZecuhJ1rBC4TVv18Jj2tN4StP/CpnyvEYuUe
1ZdsmH8pVulPZElN6YDoK/EsDzrIMLeWKGkQOAGKPsmyW2k+zCSs21zNIn7PLy8s
jMwWmvHFmCG0EKnqA92T6UnR9hF8K4kRRG9x2zCN/Ulsdy7Qz6GXEpjjdsKZ9deW
0+ChsytaCyiH2ZHPlY+2oKAtUoi7cD7xZZWsrl6GTTXt
-----END CERTIFICATE-----