Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/NIY8ijVihx-wlwpRYCwhPptrVgA.roa
File:                     NIY8ijVihx-wlwpRYCwhPptrVgA.roa (raw, json)
Hash identifier:          N5rfwmwxuZqh88e+RCdJHN1O08qIFR9/l36B51sHikQ=
Subject key identifier:   34:86:3C:8A:35:62:87:1F:B0:97:0A:51:60:2C:21:3E:9B:6B:56:00
Certificate issuer:       /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial:       322D3681
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/NIY8ijVihx-wlwpRYCwhPptrVgA.roa
Signing time:             Sat 01 Jan 2022 05:05:57 +0000
ROA not before:           Sat 01 Jan 2022 05:05:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     3356
IP address blocks:        213.174.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841823873 (0x322d3681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
        Validity
            Not Before: Jan  1 05:05:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=34863c8a3562871fb0970a51602c213e9b6b5600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:3a:05:b8:4e:9a:e8:b8:7e:4d:03:88:02:
                    93:14:fb:e3:1a:e6:37:14:fd:69:09:f0:be:e7:6a:
                    7f:52:a1:e0:06:3f:7f:12:7d:3e:f3:18:40:ca:f7:
                    74:96:73:59:c2:73:db:3d:99:8a:43:cc:73:8f:62:
                    08:75:ad:a4:9b:14:df:dc:86:47:f5:5e:db:69:76:
                    be:91:79:54:e8:35:b8:7c:5e:e8:34:7f:ea:00:99:
                    07:07:23:83:cb:bc:75:a1:b1:65:d2:23:3f:82:a1:
                    57:7c:1b:42:d3:9c:ff:13:27:b9:35:da:67:fb:49:
                    cb:5c:33:4e:dd:6e:17:51:04:26:aa:6b:ce:7c:1c:
                    2e:e2:75:64:86:c2:14:30:d7:ec:5a:39:9b:a5:9e:
                    c3:4f:1a:37:14:e2:ec:e5:24:9d:07:ce:1e:b5:10:
                    c5:db:c5:1a:7a:6e:5f:a1:b7:ba:92:c9:20:26:10:
                    4c:a7:a9:3b:b0:01:ab:4c:1e:95:8c:f1:0f:ae:d0:
                    f9:90:fe:4c:df:99:e5:97:24:37:e8:9b:02:a6:fc:
                    76:c4:b1:74:f6:86:da:9e:94:aa:9e:38:ef:cc:49:
                    25:c1:1d:2d:c6:9a:64:aa:9f:c2:b8:2d:3c:de:3b:
                    7c:e9:7b:07:12:23:8d:6c:1d:56:05:ae:89:f3:1e:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:86:3C:8A:35:62:87:1F:B0:97:0A:51:60:2C:21:3E:9B:6B:56:00
            X509v3 Authority Key Identifier:
                keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/NIY8ijVihx-wlwpRYCwhPptrVgA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.174.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:44:9c:34:d5:1a:4d:a2:2c:b8:07:c7:9d:7f:9b:2d:b3:fd:
         94:f6:b9:41:c3:1a:37:71:8a:b0:75:fe:16:b1:ea:01:02:f6:
         6f:67:6b:1a:a2:2b:72:9d:35:34:d7:6f:a3:88:90:ed:64:2c:
         ca:da:18:a5:59:9d:81:c4:df:aa:50:b8:3a:61:42:16:88:21:
         6d:e2:bf:8f:7e:69:47:47:eb:ec:58:ce:17:ee:a6:45:88:8b:
         35:fb:40:bc:59:c8:9f:58:ad:f9:60:9a:84:7e:8c:37:7b:b0:
         0f:90:a6:98:a6:6b:5c:81:78:a1:fb:44:bd:a4:1f:09:90:4f:
         be:b9:f0:69:58:f3:a1:65:22:c0:93:10:2b:40:ca:bf:b5:26:
         ef:54:14:57:c2:ea:d1:3a:e8:9f:57:33:6f:70:cd:a6:95:33:
         3a:cc:20:0d:19:59:ac:7f:a6:c0:67:be:2b:69:42:95:ca:12:
         7c:fc:9b:df:a4:a9:62:71:54:09:97:b0:1b:15:65:c3:1a:fc:
         d1:bc:ee:fd:01:5d:b1:82:3d:c9:c1:d5:02:82:21:63:9e:9f:
         91:34:e1:37:c7:04:e8:ed:90:fa:6b:29:e8:71:ec:b3:e3:82:
         d7:f6:e4:e7:0c:10:fe:ce:fc:59:c7:ca:5f:9f:c4:cd:da:e4:
         c0:d6:bd:e4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEMi02gTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OWVkNjRjOTNkZGZkZjJmNDliN2VhMWMyM2VhYWQwODcwMjQ5YTMzMB4XDTIyMDEw
MTA1MDU1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzQ4NjNjOGEzNTYy
ODcxZmIwOTcwYTUxNjAyYzIxM2U5YjZiNTYwMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALM/OgW4TprouH5NA4gCkxT74xrmNxT9aQnwvudqf1Kh4AY/
fxJ9PvMYQMr3dJZzWcJz2z2ZikPMc49iCHWtpJsU39yGR/Ve22l2vpF5VOg1uHxe
6DR/6gCZBwcjg8u8daGxZdIjP4KhV3wbQtOc/xMnuTXaZ/tJy1wzTt1uF1EEJqpr
znwcLuJ1ZIbCFDDX7Fo5m6Wew08aNxTi7OUknQfOHrUQxdvFGnpuX6G3upLJICYQ
TKepO7ABq0welYzxD67Q+ZD+TN+Z5ZckN+ibAqb8dsSxdPaG2p6Uqp4478xJJcEd
LcaaZKqfwrgtPN47fOl7BxIjjWwdVgWuifMexFECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ0hjyKNWKHH7CXClFgLCE+m2tWADAfBgNVHSMEGDAWgBTJ7WTJPd/fL0m3
6hwj6q0IcCSaMzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3llMWt5VDNmM3k5SnQtb2NJLXF0Q0hBa21qTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTgvMmEyYWIyLTMwOTgtNGEwZi04MDljLTM1ZWQ1YjUzZGEwNS8x
L05JWThpalZpaHgtd2x3cFJZQ3doUHB0clZnQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgv
MmEyYWIyLTMwOTgtNGEwZi04MDljLTM1ZWQ1YjUzZGEwNS8xL3llMWt5VDNmM3k5
SnQtb2NJLXF0Q0hBa21qTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWufzANBgkqhkiG9w0BAQsFAAOC
AQEAXEScNNUaTaIsuAfHnX+bLbP9lPa5QcMaN3GKsHX+FrHqAQL2b2drGqIrcp01
NNdvo4iQ7WQsytoYpVmdgcTfqlC4OmFCFoghbeK/j35pR0fr7FjOF+6mRYiLNftA
vFnIn1it+WCahH6MN3uwD5CmmKZrXIF4oftEvaQfCZBPvrnwaVjzoWUiwJMQK0DK
v7Um71QUV8Lq0Tron1czb3DNppUzOswgDRlZrH+mwGe+K2lClcoSfPyb36SpYnFU
CZewGxVlwxr80bzu/QFdsYI9ycHVAoIhY56fkTThN8cE6O2Q+msp6HHss+OC1/bk
5wwQ/s78WcfKX5/EzdrkwNa95A==
-----END CERTIFICATE-----