Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/R_bM71qcg7bYdqHD7PUdr1wqZbk.roa
File:                     R_bM71qcg7bYdqHD7PUdr1wqZbk.roa (raw, json)
Hash identifier:          beNQ8C0uCWedpMCjW/4w5H7vg7/Iw7NBiDTweu+jg6I=
Subject key identifier:   47:F6:CC:EF:5A:9C:83:B6:D8:76:A1:C3:EC:F5:1D:AF:5C:2A:65:B9
Certificate issuer:       /CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
Certificate serial:       018312BDF8BD232D7C6DC34B47F2E0562521
Authority key identifier: F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/R_bM71qcg7bYdqHD7PUdr1wqZbk.roa
Signing time:             Tue 06 Sep 2022 12:19:43 +0000
ROA not before:           Tue 06 Sep 2022 12:19:43 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     62563
IP address blocks:        45.135.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:12:bd:f8:bd:23:2d:7c:6d:c3:4b:47:f2:e0:56:25:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4db95f9d1b5c3ec934ff84d6ff7f01242da842a
        Validity
            Not Before: Sep  6 12:19:43 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=47f6ccef5a9c83b6d876a1c3ecf51daf5c2a65b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f8:82:03:b8:6c:21:b9:7f:4b:e8:d7:db:44:
                    c3:3f:25:c8:c9:29:e1:86:f9:78:38:b4:98:b0:a4:
                    68:11:90:6d:de:18:a0:be:79:c8:87:be:27:07:e3:
                    f5:19:9b:49:25:4d:a1:d5:eb:2b:4c:ac:e8:fe:4e:
                    5b:59:0d:23:16:15:91:21:67:47:2f:05:ec:4d:00:
                    38:6b:da:d4:aa:75:0a:1c:cb:bc:4e:b8:67:ac:63:
                    de:bb:93:55:67:3d:68:92:ea:0f:45:98:c9:88:81:
                    17:4d:52:a3:63:3f:64:62:d6:07:58:27:e1:72:e8:
                    f4:fa:be:6a:e7:17:1e:10:f9:47:c0:dc:c3:b3:43:
                    7e:61:bc:89:ec:b9:ab:01:04:f9:0d:ff:88:6e:af:
                    9b:2e:bc:73:76:a0:16:4f:fb:3b:ad:99:c4:c5:08:
                    d5:92:c9:7c:13:99:b5:09:c6:72:bd:da:13:75:3e:
                    22:42:6c:d9:18:87:7f:65:a6:38:aa:96:0b:93:52:
                    ee:36:bc:0f:da:be:d4:1f:bd:c9:f8:43:7f:43:0d:
                    a0:c7:5f:f8:76:87:ff:d7:4f:57:50:43:3b:bc:ae:
                    c3:55:06:90:d5:5d:ea:9d:b3:2c:10:bb:78:45:ef:
                    ce:44:e9:d9:35:4a:ec:de:51:c0:a9:5a:f8:ad:b6:
                    3b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F6:CC:EF:5A:9C:83:B6:D8:76:A1:C3:EC:F5:1D:AF:5C:2A:65:B9
            X509v3 Authority Key Identifier:
                keyid:F4:DB:95:F9:D1:B5:C3:EC:93:4F:F8:4D:6F:F7:F0:12:42:DA:84:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuV-dG1w-yTT_hNb_fwEkLahCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/R_bM71qcg7bYdqHD7PUdr1wqZbk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/46d7af-02fb-45f9-a922-14b38b6e00a7/1/9NuV-dG1w-yTT_hNb_fwEkLahCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:7b:f6:58:93:50:11:e5:47:3c:b2:12:82:c6:61:14:89:48:
         7a:50:71:d0:bd:bc:30:21:4c:4d:d8:7d:80:e0:68:6b:cb:67:
         39:86:7b:b8:b0:fa:55:d0:8f:d5:f3:3d:93:b4:64:35:c0:4b:
         b6:77:6c:9d:9d:ad:49:26:8c:36:e2:9f:1d:ce:c1:f1:cd:ec:
         ae:4b:79:46:24:02:36:f6:b8:d3:f8:8e:fd:cd:09:14:2e:36:
         9a:10:70:a6:74:f5:bd:90:81:3d:41:c4:9c:37:95:08:f8:c8:
         e6:81:d2:e4:3f:4c:46:43:c1:40:18:e5:54:4a:df:ca:2c:b1:
         07:f9:5f:88:18:bf:11:1c:f3:ba:eb:26:05:de:f3:15:10:50:
         1d:36:60:79:64:be:e7:67:11:a4:42:1c:67:71:f6:a9:e4:a4:
         0c:68:c5:b9:f3:8c:f0:49:27:a7:d8:7a:b3:79:58:ab:4d:b6:
         eb:a5:d7:a8:9f:be:71:9d:8a:51:2d:9d:ff:de:97:f3:09:c8:
         19:ee:55:d5:db:ab:91:b3:9e:0f:9b:54:eb:9c:45:b2:9a:88:
         8a:c4:c7:1d:38:b4:1a:7f:bd:85:aa:7c:48:bf:7d:82:3b:13:
         69:62:9b:7e:af:40:1c:49:97:9b:bc:8a:4f:61:3c:87:ac:34:
         78:3d:d0:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYMSvfi9Iy18bcNLR/LgViUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGI5NWY5ZDFiNWMzZWM5MzRmZjg0ZDZmZjdmMDEyNDJk
YTg0MmEwHhcNMjIwOTA2MTIxOTQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2Y2Y2NlZjVhOWM4M2I2ZDg3NmExYzNlY2Y1MWRhZjVjMmE2NWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/iCA7hsIbl/S+jX20TDPyXIySnh
hvl4OLSYsKRoEZBt3higvnnIh74nB+P1GZtJJU2h1esrTKzo/k5bWQ0jFhWRIWdH
LwXsTQA4a9rUqnUKHMu8TrhnrGPeu5NVZz1okuoPRZjJiIEXTVKjYz9kYtYHWCfh
cuj0+r5q5xceEPlHwNzDs0N+YbyJ7LmrAQT5Df+Ibq+bLrxzdqAWT/s7rZnExQjV
ksl8E5m1CcZyvdoTdT4iQmzZGId/ZaY4qpYLk1LuNrwP2r7UH73J+EN/Qw2gx1/4
dof/109XUEM7vK7DVQaQ1V3qnbMsELt4Re/OROnZNUrs3lHAqVr4rbY7nwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEf2zO9anIO22Hahw+z1Ha9cKmW5MB8GA1UdIwQY
MBaAFPTblfnRtcPsk0/4TW/38BJC2oQqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU51Vi1kRzF3LXlUVF9oTmJfZndFa0xhaENvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80NmQ3YWYtMDJmYi00NWY5LWE5MjIt
MTRiMzhiNmUwMGE3LzEvUl9iTTcxcWNnN2JZZHFIRDdQVWRyMXdxWmJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80NmQ3YWYtMDJmYi00NWY5LWE5MjItMTRiMzhiNmUwMGE3
LzEvOU51Vi1kRzF3LXlUVF9oTmJfZndFa0xhaENvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYcMMA0G
CSqGSIb3DQEBCwUAA4IBAQA5e/ZYk1AR5Uc8shKCxmEUiUh6UHHQvbwwIUxN2H2A
4Ghry2c5hnu4sPpV0I/V8z2TtGQ1wEu2d2ydna1JJow24p8dzsHxzeyuS3lGJAI2
9rjT+I79zQkULjaaEHCmdPW9kIE9QcScN5UI+MjmgdLkP0xGQ8FAGOVUSt/KLLEH
+V+IGL8RHPO66yYF3vMVEFAdNmB5ZL7nZxGkQhxncfap5KQMaMW584zwSSen2Hqz
eVirTbbrpdeon75xnYpRLZ3/3pfzCcgZ7lXV26uRs54Pm1TrnEWymoiKxMcdOLQa
f72FqnxIv32COxNpYpt+r0AcSZebvIpPYTyHrDR4PdBb
-----END CERTIFICATE-----