Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/eS93LH1vZiWab_J-4xwuesNGSFE.roa
File:                     eS93LH1vZiWab_J-4xwuesNGSFE.roa (raw, json)
Hash identifier:          kuwgAiULdjRAnmEsETzv9JQkNvhXwuxrLWS9SITRzaE=
Subject key identifier:   79:2F:77:2C:7D:6F:66:25:9A:6F:F2:7E:E3:1C:2E:7A:C3:46:48:51
Certificate issuer:       /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial:       06F7EF96
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/eS93LH1vZiWab_J-4xwuesNGSFE.roa
Signing time:             Sat 01 Jan 2022 05:01:02 +0000
ROA not before:           Sat 01 Jan 2022 05:01:02 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     47767
IP address blocks:        94.124.184.0/21 maxlen: 24
                          2a03:9780::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116912022 (0x6f7ef96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
        Validity
            Not Before: Jan  1 05:01:02 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=792f772c7d6f66259a6ff27ee31c2e7ac3464851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:b5:a2:ae:9d:9f:49:e8:c0:b0:89:e8:23:
                    74:07:c1:9d:44:3c:c2:d4:e4:a7:31:c7:04:55:d7:
                    80:19:4f:93:be:82:02:1e:eb:5f:4d:13:95:f7:f9:
                    ab:f7:4e:91:0d:fc:9d:5d:fd:c7:16:67:61:b5:8d:
                    04:a3:4a:59:6c:41:00:66:26:a5:36:b7:b5:63:d9:
                    a3:3f:d6:7b:93:dc:50:90:b9:70:c3:df:a7:7d:6a:
                    14:4f:8f:c0:8c:b6:61:b3:45:40:51:83:a1:b6:03:
                    db:cd:fb:0b:cb:43:fd:61:de:0e:a9:36:67:c4:7d:
                    f9:bb:99:25:4a:f9:58:71:bf:9a:a8:f2:7e:d4:dd:
                    9f:12:49:6d:c8:3a:ad:11:45:1d:39:40:84:0b:ae:
                    0d:51:a9:41:96:92:14:60:0e:5b:70:7b:39:e2:eb:
                    36:d0:2d:66:00:6a:10:e7:e3:bc:f4:0c:c1:2c:71:
                    26:58:38:92:70:8e:97:96:e7:bb:e3:4d:97:43:66:
                    53:ac:3c:93:73:23:5b:6a:87:63:4c:82:f7:8b:12:
                    ea:7b:f9:ba:d5:18:ac:3c:f3:cb:93:18:02:92:53:
                    f3:46:41:13:44:e3:01:68:af:5d:b3:42:a0:6f:bf:
                    21:d9:17:ab:22:4d:b0:d4:25:ca:cc:80:9f:d8:fb:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2F:77:2C:7D:6F:66:25:9A:6F:F2:7E:E3:1C:2E:7A:C3:46:48:51
            X509v3 Authority Key Identifier:
                keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/eS93LH1vZiWab_J-4xwuesNGSFE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.124.184.0/21
                IPv6:
                  2a03:9780::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:1d:c9:2b:2f:b3:c7:4f:84:ca:c1:6a:46:0e:ea:6f:df:b0:
         52:a8:35:d9:73:ca:46:aa:ad:cd:41:d0:12:55:ab:90:f2:de:
         4b:25:a9:07:1d:71:d8:ec:52:07:05:b5:63:e9:11:2a:4e:74:
         75:11:48:16:e5:e0:82:2c:a6:4a:2d:46:86:4e:97:6d:25:17:
         3c:5e:6c:a5:b5:7e:97:df:13:20:e0:7a:49:b9:2a:17:bd:af:
         81:fd:e6:a8:35:69:cc:1b:7a:1c:6a:d8:2d:0a:e2:48:08:92:
         0f:4a:89:58:bb:36:f2:34:3a:3e:4c:53:88:b9:66:32:2f:a7:
         f2:84:74:5e:c8:f1:8e:df:59:93:9a:36:44:32:51:0f:c4:d7:
         d2:e5:8d:30:89:4f:03:b0:73:7e:ff:90:8a:ba:6b:22:24:cc:
         61:3a:de:3b:9c:bb:da:23:77:8b:72:87:33:44:cb:1f:c4:34:
         e6:7d:64:fe:20:7b:69:3f:5f:04:66:dd:96:5e:53:26:bf:eb:
         59:82:af:c2:92:01:df:b7:fb:43:8c:89:e3:86:88:bf:d7:7b:
         5c:8d:93:7a:d4:8a:81:ea:10:17:e8:72:a7:e9:ed:5b:b1:28:
         c2:51:1a:d2:96:d7:39:42:55:5d:92:1e:51:2f:b1:57:11:e0:
         88:08:15:9f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBvfvljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MGEwMDhhODBkOGZmMjYyNjI1ZTY1ZmUyNTg3NjkxNThiMjk5OGYwMB4XDTIyMDEw
MTA1MDEwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzkyZjc3MmM3ZDZm
NjYyNTlhNmZmMjdlZTMxYzJlN2FjMzQ2NDg1MTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKnotaKunZ9J6MCwiegjdAfBnUQ8wtTkpzHHBFXXgBlPk76C
Ah7rX00Tlff5q/dOkQ38nV39xxZnYbWNBKNKWWxBAGYmpTa3tWPZoz/We5PcUJC5
cMPfp31qFE+PwIy2YbNFQFGDobYD2837C8tD/WHeDqk2Z8R9+buZJUr5WHG/mqjy
ftTdnxJJbcg6rRFFHTlAhAuuDVGpQZaSFGAOW3B7OeLrNtAtZgBqEOfjvPQMwSxx
Jlg4knCOl5bnu+NNl0NmU6w8k3MjW2qHY0yC94sS6nv5utUYrDzzy5MYApJT80ZB
E0TjAWivXbNCoG+/IdkXqyJNsNQlysyAn9j74bkCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBR5L3csfW9mJZpv8n7jHC56w0ZIUTAfBgNVHSMEGDAWgBTgoAioDY/yYmJe
Zf4lh2kViymY8DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzRLQUlxQTJQOG1KaVhtWC1KWWRwRllzcG1QQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWMvMDMzOGYzLTA4MDItNGU1Yi05MjQxLTYwYmY3MTkzNzEwNC8x
L2VTOTNMSDF2WmlXYWJfSi00eHd1ZXNOR1NGRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMv
MDMzOGYzLTA4MDItNGU1Yi05MjQxLTYwYmY3MTkzNzEwNC8xLzRLQUlxQTJQOG1K
aVhtWC1KWWRwRllzcG1QQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA158uDANBAIAAjAHAwUAKgOXgDAN
BgkqhkiG9w0BAQsFAAOCAQEAhh3JKy+zx0+EysFqRg7qb9+wUqg12XPKRqqtzUHQ
ElWrkPLeSyWpBx1x2OxSBwW1Y+kRKk50dRFIFuXggiymSi1Ghk6XbSUXPF5spbV+
l98TIOB6SbkqF72vgf3mqDVpzBt6HGrYLQriSAiSD0qJWLs28jQ6PkxTiLlmMi+n
8oR0Xsjxjt9Zk5o2RDJRD8TX0uWNMIlPA7Bzfv+QirprIiTMYTreO5y72iN3i3KH
M0TLH8Q05n1k/iB7aT9fBGbdll5TJr/rWYKvwpIB37f7Q4yJ44aIv9d7XI2TetSK
geoQF+hyp+ntW7EowlEa0pbXOUJVXZIeUS+xVxHgiAgVnw==
-----END CERTIFICATE-----