Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/eE_rUnVMcw7P5EOZCsSLdKgeayw.roa
File:                     eE_rUnVMcw7P5EOZCsSLdKgeayw.roa (raw, json)
Hash identifier:          N9KZMxE9bQctgbpcG6TWU5/KS6jHhPOqj5ObKTxXwpo=
Subject key identifier:   78:4F:EB:52:75:4C:73:0E:CF:E4:43:99:0A:C4:8B:74:A8:1E:6B:2C
Certificate issuer:       /CN=d880c00d25e5a77e7d334cedf9e0f26a2c5aa328
Certificate serial:       033978
Authority key identifier: D8:80:C0:0D:25:E5:A7:7E:7D:33:4C:ED:F9:E0:F2:6A:2C:5A:A3:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2IDADSXlp359M0zt-eDyaixaoyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/eE_rUnVMcw7P5EOZCsSLdKgeayw.roa
Signing time:             Tue 22 Feb 2022 13:45:23 +0000
ROA not before:           Tue 22 Feb 2022 13:45:23 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31463
IP address blocks:        87.124.0.0/17 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211320 (0x33978)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d880c00d25e5a77e7d334cedf9e0f26a2c5aa328
        Validity
            Not Before: Feb 22 13:45:23 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=784feb52754c730ecfe443990ac48b74a81e6b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:9b:c0:15:ad:e2:bd:f8:ff:81:f3:db:d3:
                    85:e8:ee:96:0d:24:73:4e:e6:be:d2:43:ba:d4:34:
                    08:3a:e2:4d:6d:27:0b:d6:39:e5:a0:53:e1:46:b7:
                    b9:33:aa:bc:a3:5f:74:eb:aa:32:83:4a:f0:b8:8b:
                    b1:d0:37:9f:2c:39:f3:28:db:3e:10:01:d1:e3:8b:
                    98:c4:23:ed:75:76:63:5b:b4:e0:62:c4:2d:e8:8c:
                    f2:f8:a6:27:ff:c6:de:35:74:07:3b:b8:69:9d:50:
                    f5:57:0b:dd:dc:db:1d:90:92:fa:cf:c3:e1:5a:28:
                    4f:65:76:01:89:98:e7:5a:42:bc:92:48:f2:06:25:
                    c4:fd:83:0a:c3:47:7a:2f:f2:19:a3:d8:79:fe:74:
                    4d:1b:73:2a:89:9a:03:15:7e:2c:40:df:35:51:da:
                    76:0a:18:0f:d9:46:3f:a7:54:8e:36:b9:97:58:2d:
                    be:dd:ae:9f:05:47:a1:0e:22:2f:b9:1b:0c:c0:f2:
                    06:03:fd:1b:30:1e:1c:c0:32:13:22:84:be:ef:cb:
                    d2:3f:04:0b:7c:b0:79:65:a7:59:19:28:d9:5e:44:
                    2b:c6:f7:6b:62:97:36:9f:b5:d6:58:5c:57:88:26:
                    85:12:39:7e:9f:9a:a7:59:e8:02:60:47:a1:71:e7:
                    61:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4F:EB:52:75:4C:73:0E:CF:E4:43:99:0A:C4:8B:74:A8:1E:6B:2C
            X509v3 Authority Key Identifier:
                keyid:D8:80:C0:0D:25:E5:A7:7E:7D:33:4C:ED:F9:E0:F2:6A:2C:5A:A3:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IDADSXlp359M0zt-eDyaixaoyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/eE_rUnVMcw7P5EOZCsSLdKgeayw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f84b27-f01c-48ce-a99a-3aa663f828fc/1/2IDADSXlp359M0zt-eDyaixaoyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.124.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5b:f8:37:90:db:71:fd:eb:02:64:52:f1:f4:65:1e:04:42:10:
         25:a1:54:73:d1:85:ff:2e:9a:38:c2:2c:c5:3a:7c:a6:a6:c8:
         71:34:9f:2f:90:17:c8:49:fc:c6:9c:25:c7:1e:70:2e:45:77:
         fe:f6:25:48:0e:66:c0:63:5b:f8:da:04:66:ff:53:18:d7:31:
         7a:a5:60:41:8f:17:51:c3:84:49:71:46:58:eb:17:01:32:42:
         aa:80:d6:86:f1:23:62:e2:de:c2:ce:51:45:f6:5f:77:26:b2:
         c7:98:f2:66:93:64:58:ac:d6:bc:16:43:d1:13:f9:71:a4:e3:
         96:93:20:ad:82:f1:d9:65:e4:8f:3b:81:e8:77:32:48:fc:8e:
         7b:5e:df:42:30:a0:41:a6:94:62:98:30:5b:27:b6:cd:ec:ce:
         ff:3c:ac:bf:f9:58:31:b0:ef:91:95:f6:3a:90:e2:55:0b:47:
         ed:84:a1:c2:68:aa:ca:d3:68:fe:fd:8a:29:8a:2c:c0:4c:42:
         37:95:1a:79:92:35:79:2e:31:3c:27:9d:d8:f9:47:f7:af:1b:
         8c:d6:8c:03:84:29:6f:63:d1:e6:50:6e:5b:13:65:07:ba:f6:
         51:03:2b:5a:5a:1c:2a:db:7d:49:2d:72:d8:b4:2a:f6:93:1e:
         6c:01:d1:b5
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAzl4MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
ODBjMDBkMjVlNWE3N2U3ZDMzNGNlZGY5ZTBmMjZhMmM1YWEzMjgwHhcNMjIwMjIy
MTM0NTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg3ODRmZWI1Mjc1NGM3
MzBlY2ZlNDQzOTkwYWM0OGI3NGE4MWU2YjJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0B2bwBWt4r34/4Hz29OF6O6WDSRzTua+0kO61DQIOuJNbScL
1jnloFPhRre5M6q8o19066oyg0rwuIux0DefLDnzKNs+EAHR44uYxCPtdXZjW7Tg
YsQt6Izy+KYn/8beNXQHO7hpnVD1Vwvd3NsdkJL6z8PhWihPZXYBiZjnWkK8kkjy
BiXE/YMKw0d6L/IZo9h5/nRNG3MqiZoDFX4sQN81Udp2ChgP2UY/p1SONrmXWC2+
3a6fBUehDiIvuRsMwPIGA/0bMB4cwDITIoS+78vSPwQLfLB5ZadZGSjZXkQrxvdr
Ypc2n7XWWFxXiCaFEjl+n5qnWegCYEehcedhiQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFHhP61J1THMOz+RDmQrEi3SoHmssMB8GA1UdIwQYMBaAFNiAwA0l5ad+fTNM
7fng8mosWqMoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MklEQURTWGxwMzU5TTB6dC1lRHlhaXhhb3lnLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9mZi9mODRiMjctZjAxYy00OGNlLWE5OWEtM2FhNjYzZjgyOGZjLzEv
ZUVfclVuVk1jdzdQNUVPWkNzU0xkS2dlYXl3LnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9m
ODRiMjctZjAxYy00OGNlLWE5OWEtM2FhNjYzZjgyOGZjLzEvMklEQURTWGxwMzU5
TTB6dC1lRHlhaXhhb3lnLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHV3wAMA0GCSqGSIb3DQEBCwUAA4IB
AQBb+DeQ23H96wJkUvH0ZR4EQhAloVRz0YX/Lpo4wizFOnympshxNJ8vkBfISfzG
nCXHHnAuRXf+9iVIDmbAY1v42gRm/1MY1zF6pWBBjxdRw4RJcUZY6xcBMkKqgNaG
8SNi4t7CzlFF9l93JrLHmPJmk2RYrNa8FkPRE/lxpOOWkyCtgvHZZeSPO4HodzJI
/I57Xt9CMKBBppRimDBbJ7bN7M7/PKy/+VgxsO+RlfY6kOJVC0fthKHCaKrK02j+
/YopiizATEI3lRp5kjV5LjE8J53Y+Uf3rxuM1owDhClvY9HmUG5bE2UHuvZRAyta
Whwq231JLXLYtCr2kx5sAdG1
-----END CERTIFICATE-----