Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/NjP7TjO3OMwcJAc7fYuUQGVcHKM.roa
File:                     NjP7TjO3OMwcJAc7fYuUQGVcHKM.roa (raw, json)
Hash identifier:          8x+Hfkzqsx5gW8GjzXGxpA5C7u+WZOZTYA3bR5YY9uU=
Subject key identifier:   36:33:FB:4E:33:B7:38:CC:1C:24:07:3B:7D:8B:94:40:65:5C:1C:A3
Certificate issuer:       /CN=d3adbb6123781ff0e35413446ac7931cff4a490d
Certificate serial:       0C694001
Authority key identifier: D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/NjP7TjO3OMwcJAc7fYuUQGVcHKM.roa
Signing time:             Sat 01 Jan 2022 01:51:24 +0000
ROA not before:           Sat 01 Jan 2022 01:51:24 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6805
IP address blocks:        212.94.224.0/19 maxlen: 19

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208224257 (0xc694001)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3adbb6123781ff0e35413446ac7931cff4a490d
        Validity
            Not Before: Jan  1 01:51:24 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=3633fb4e33b738cc1c24073b7d8b9440655c1ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:d8:79:64:16:46:06:37:e4:b3:b6:3f:42:
                    39:00:6d:55:9d:63:8f:6e:a2:ec:7b:6d:52:4a:48:
                    a5:08:fc:d0:31:d0:29:aa:7e:09:b0:af:da:51:1c:
                    d7:bd:40:51:72:40:91:f6:74:65:de:e0:08:0e:e1:
                    90:a1:5f:9e:53:ac:07:b5:f1:e3:7a:c7:85:12:8b:
                    e2:9c:a4:ea:9f:06:ed:ea:f3:1f:00:ea:3f:5c:21:
                    66:6c:05:cb:02:32:74:15:6f:0e:31:37:ec:7f:de:
                    6f:20:27:e8:ed:47:c6:67:9f:97:87:25:03:8e:8a:
                    25:74:4a:4b:09:cb:b5:26:b3:36:a2:dd:47:3d:e8:
                    39:36:9e:7a:4e:50:c4:67:7e:e2:2d:05:bb:e6:42:
                    f5:57:aa:78:18:79:4f:30:e0:1f:68:03:70:a5:ee:
                    7a:83:68:47:77:38:1a:2b:ae:26:b7:a4:2b:fe:e9:
                    21:5a:e2:c8:51:98:1c:cb:4f:33:2c:2b:69:65:07:
                    70:d0:f2:f1:56:1d:80:35:8d:66:f8:45:45:fc:ca:
                    43:0a:e1:ed:6c:2a:d3:8d:42:98:03:75:9f:74:db:
                    8c:8f:76:88:93:78:ed:87:15:e3:fe:61:38:60:9f:
                    e7:d3:83:04:38:25:8c:b6:b1:0d:b2:62:8f:08:df:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:33:FB:4E:33:B7:38:CC:1C:24:07:3B:7D:8B:94:40:65:5C:1C:A3
            X509v3 Authority Key Identifier:
                keyid:D3:AD:BB:61:23:78:1F:F0:E3:54:13:44:6A:C7:93:1C:FF:4A:49:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0627YSN4H_DjVBNEaseTHP9KSQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/NjP7TjO3OMwcJAc7fYuUQGVcHKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8a3ee9-4f37-45be-8aac-798ab773eafa/1/0627YSN4H_DjVBNEaseTHP9KSQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.94.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3b:28:92:e2:7f:6d:ad:75:4f:66:65:1b:95:39:80:1a:25:2b:
         d4:1e:4a:8d:ad:b9:5e:66:e1:2e:13:4b:a4:6e:3d:c3:1d:ac:
         87:8b:f7:dc:32:c4:15:13:de:29:fb:49:53:78:9d:80:25:9d:
         6c:2e:20:b8:f2:bf:6c:d8:32:f6:1a:17:10:3c:52:36:35:6c:
         57:33:02:27:9d:c6:34:b6:79:73:51:fb:a5:d4:5c:19:a7:02:
         dd:ae:79:d7:f8:92:d0:10:05:d0:56:88:3c:d4:46:01:54:ba:
         7e:f0:2e:9f:ac:e1:9c:de:55:bb:c8:9c:8a:50:1f:70:07:dd:
         f3:f3:e5:c3:67:88:4f:b4:a1:6a:7c:87:cf:d8:a7:4a:b0:fe:
         4e:5e:5a:8d:51:4e:76:9a:02:41:78:18:9a:f7:10:60:58:a8:
         44:51:04:83:2a:ed:3e:da:06:74:dd:2c:8b:fb:a8:1d:c8:68:
         06:65:a5:15:bb:94:7b:9d:59:36:7a:91:66:82:17:2c:2c:d4:
         4b:c8:23:e7:42:07:81:c2:00:f9:94:61:e8:5b:62:11:2a:05:
         71:d6:ee:00:3a:c7:23:9f:14:31:12:14:e4:91:39:58:7f:0d:
         13:2e:e3:92:54:6d:94:36:8b:4d:5c:03:ea:72:d2:dd:4c:0c:
         7d:0b:59:54
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEDGlAATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
M2FkYmI2MTIzNzgxZmYwZTM1NDEzNDQ2YWM3OTMxY2ZmNGE0OTBkMB4XDTIyMDEw
MTAxNTEyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMzYzM2ZiNGUzM2I3
MzhjYzFjMjQwNzNiN2Q4Yjk0NDA2NTVjMWNhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJt72HlkFkYGN+Sztj9COQBtVZ1jj26i7HttUkpIpQj80DHQ
Kap+CbCv2lEc171AUXJAkfZ0Zd7gCA7hkKFfnlOsB7Xx43rHhRKL4pyk6p8G7erz
HwDqP1whZmwFywIydBVvDjE37H/ebyAn6O1Hxmefl4clA46KJXRKSwnLtSazNqLd
Rz3oOTaeek5QxGd+4i0Fu+ZC9VeqeBh5TzDgH2gDcKXueoNoR3c4GiuuJrekK/7p
IVriyFGYHMtPMywraWUHcNDy8VYdgDWNZvhFRfzKQwrh7Wwq041CmAN1n3TbjI92
iJN47YcV4/5hOGCf59ODBDgljLaxDbJijwjfRRcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ2M/tOM7c4zBwkBzt9i5RAZVwcozAfBgNVHSMEGDAWgBTTrbthI3gf8ONU
E0Rqx5Mc/0pJDTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzA2MjdZU040SF9EalZCTkVhc2VUSFA5S1NRMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZmUvOGEzZWU5LTRmMzctNDViZS04YWFjLTc5OGFiNzczZWFmYS8x
L05qUDdUak8zT013Y0pBYzdmWXVVUUdWY0hLTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmUv
OGEzZWU5LTRmMzctNDViZS04YWFjLTc5OGFiNzczZWFmYS8xLzA2MjdZU040SF9E
alZCTkVhc2VUSFA5S1NRMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdRe4DANBgkqhkiG9w0BAQsFAAOC
AQEAOyiS4n9trXVPZmUblTmAGiUr1B5Kja25XmbhLhNLpG49wx2sh4v33DLEFRPe
KftJU3idgCWdbC4guPK/bNgy9hoXEDxSNjVsVzMCJ53GNLZ5c1H7pdRcGacC3a55
1/iS0BAF0FaIPNRGAVS6fvAun6zhnN5Vu8icilAfcAfd8/Plw2eIT7ShanyHz9in
SrD+Tl5ajVFOdpoCQXgYmvcQYFioRFEEgyrtPtoGdN0si/uoHchoBmWlFbuUe51Z
NnqRZoIXLCzUS8gj50IHgcIA+ZRh6FtiESoFcdbuADrHI58UMRIU5JE5WH8NEy7j
klRtlDaLTVwD6nLS3UwMfQtZVA==
-----END CERTIFICATE-----