Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/Q2K_Jdpa8INq2hXJFLoiSLqusWk.roa
File:                     Q2K_Jdpa8INq2hXJFLoiSLqusWk.roa (raw, json)
Hash identifier:          Ct1dMNrp/EvnfuhVRfcCTeS7aJCALyWWmp7xHOZ0JZs=
Subject key identifier:   43:62:BF:25:DA:5A:F0:83:6A:DA:15:C9:14:BA:22:48:BA:AE:B1:69
Certificate issuer:       /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Certificate serial:       02919AFF
Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/Q2K_Jdpa8INq2hXJFLoiSLqusWk.roa
Signing time:             Tue 22 Mar 2022 09:34:16 +0000
ROA not before:           Tue 22 Mar 2022 09:34:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     31438
IP address blocks:        83.137.64.0/21 maxlen: 21
                          212.89.192.0/19 maxlen: 19
                          2a0d:5f00::/30 maxlen: 30

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43096831 (0x2919aff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
        Validity
            Not Before: Mar 22 09:34:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=4362bf25da5af0836ada15c914ba2248baaeb169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:b2:eb:3f:d3:35:ad:f2:8b:7a:18:59:47:
                    1e:c7:66:92:d2:80:9f:2b:a3:87:fd:ed:fb:85:57:
                    29:6f:c9:08:37:98:ad:14:69:a3:5c:d1:40:b5:d7:
                    9c:1d:d0:15:17:84:6d:c0:99:ff:b3:bb:b8:41:7a:
                    d2:d9:1e:bc:07:d6:c6:d6:af:ed:ce:cf:ab:3d:87:
                    91:36:59:2f:fd:c5:e8:b4:66:95:80:76:e8:51:0a:
                    15:80:19:6e:c5:83:b8:06:17:0c:69:28:60:b0:63:
                    24:72:d7:59:bf:40:ef:7a:f4:96:92:94:b1:97:ba:
                    9b:1f:4b:f3:73:b5:42:45:11:f1:33:24:2a:cc:92:
                    d5:f2:7a:e3:42:12:6b:3b:b7:37:3e:dd:be:b6:7f:
                    67:ce:d7:44:99:15:81:d9:9b:87:a4:d5:79:52:89:
                    86:f4:d7:01:92:94:6a:ad:cf:3f:a3:82:54:78:d4:
                    47:86:19:a8:45:a2:7b:8d:fc:a1:61:65:03:af:72:
                    0a:b9:34:b9:5e:b6:28:4d:e9:02:b6:c0:f5:97:f5:
                    3b:c9:c2:db:94:40:ec:b5:18:92:cc:35:67:d8:88:
                    df:ec:c2:6c:46:fe:70:ba:f6:87:6a:c5:72:84:e7:
                    5d:04:b4:0a:8c:b7:de:dc:87:22:8b:e4:f9:ef:81:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:62:BF:25:DA:5A:F0:83:6A:DA:15:C9:14:BA:22:48:BA:AE:B1:69
            X509v3 Authority Key Identifier:
                keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/Q2K_Jdpa8INq2hXJFLoiSLqusWk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.137.64.0/21
                  212.89.192.0/19
                IPv6:
                  2a0d:5f00::/30

    Signature Algorithm: sha256WithRSAEncryption
         20:cd:28:fe:52:ad:58:c5:64:3b:13:b6:14:a6:5b:be:ac:78:
         f3:1d:fe:c6:fc:1b:a5:82:88:bc:b9:0f:c4:d0:d8:fc:2d:02:
         6e:f8:9c:ad:5e:98:55:22:64:66:d0:31:42:a1:20:6e:85:84:
         d7:1e:50:e7:cd:e7:a4:31:a7:1b:3d:9d:ee:d9:24:63:f0:34:
         8c:53:8c:8b:81:09:a5:f4:aa:ff:7c:ce:89:d5:1e:a8:ab:4f:
         45:6b:ac:22:4e:90:46:a0:24:0d:32:06:d5:d6:4d:20:af:2b:
         59:19:07:88:50:dc:20:86:30:ba:38:19:d9:e5:53:21:44:f8:
         86:2f:41:df:87:71:5a:67:58:15:19:56:b5:7a:ec:25:24:59:
         e6:d1:52:98:11:4d:1e:9f:9a:f5:d6:38:e1:d6:07:0e:34:66:
         72:60:25:4c:c8:73:f8:71:c8:4a:d3:1a:9d:64:a6:8c:4c:b6:
         cd:a7:fb:da:4f:1e:05:da:6f:f8:ad:e8:3a:ab:ae:90:c9:86:
         f3:0a:ba:23:a1:b8:2c:8d:02:b7:17:7c:ba:3e:13:0e:94:c0:
         47:13:9f:05:ca:bb:6c:57:6d:6f:84:c6:16:97:b8:cf:06:04:
         73:ce:6c:9a:34:64:22:ad:c2:98:f3:b4:b6:8c:77:5a:b9:70:
         e7:a4:24:56
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIEApGa/zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
N2JjZDc3MGY4ZWEzZDQ4ZWNiYjRjM2VhYjg5NWY0MjJmZmFjOTBkMB4XDTIyMDMy
MjA5MzQxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDM2MmJmMjVkYTVh
ZjA4MzZhZGExNWM5MTRiYTIyNDhiYWFlYjE2OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKUPsus/0zWt8ot6GFlHHsdmktKAnyujh/3t+4VXKW/JCDeY
rRRpo1zRQLXXnB3QFReEbcCZ/7O7uEF60tkevAfWxtav7c7Pqz2HkTZZL/3F6LRm
lYB26FEKFYAZbsWDuAYXDGkoYLBjJHLXWb9A73r0lpKUsZe6mx9L83O1QkUR8TMk
KsyS1fJ640ISazu3Nz7dvrZ/Z87XRJkVgdmbh6TVeVKJhvTXAZKUaq3PP6OCVHjU
R4YZqEWie438oWFlA69yCrk0uV62KE3pArbA9Zf1O8nC25RA7LUYksw1Z9iI3+zC
bEb+cLr2h2rFcoTnXQS0Coy33tyHIovk+e+Bpp0CAwEAAaOCAh4wggIaMB0GA1Ud
DgQWBBRDYr8l2lrwg2raFckUuiJIuq6xaTAfBgNVHSMEGDAWgBRHvNdw+Oo9SOy7
TD6riV9CL/rJDTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1I3elhjUGpxUFVqc3Uwdy1xNGxmUWlfNnlRMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDgvOTdhNWM5LTZiMjgtNGM2MS05NmUxLWE2ZDAwMDIwM2ZiNS8x
L1EyS19KZHBhOElOcTJoWEpGTG9pU0xxdXNXay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgv
OTdhNWM5LTZiMjgtNGM2MS05NmUxLWE2ZDAwMDIwM2ZiNS8xL1I3elhjUGpxUFVq
c3Uwdy1xNGxmUWlfNnlRMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0
BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEA1OJQAMEBdRZwDANBAIAAjAHAwUC
Kg1fADANBgkqhkiG9w0BAQsFAAOCAQEAIM0o/lKtWMVkOxO2FKZbvqx48x3+xvwb
pYKIvLkPxNDY/C0CbvicrV6YVSJkZtAxQqEgboWE1x5Q583npDGnGz2d7tkkY/A0
jFOMi4EJpfSq/3zOidUeqKtPRWusIk6QRqAkDTIG1dZNIK8rWRkHiFDcIIYwujgZ
2eVTIUT4hi9B34dxWmdYFRlWtXrsJSRZ5tFSmBFNHp+a9dY44dYHDjRmcmAlTMhz
+HHIStManWSmjEy2zaf72k8eBdpv+K3oOquukMmG8wq6I6G4LI0Ctxd8uj4TDpTA
RxOfBcq7bFdtb4TGFpe4zwYEc85smjRkIq3CmPO0tox3Wrlw56QkVg==
-----END CERTIFICATE-----