Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/Q_YY2fDUejMDhM9E_RIgqDU1Bww.roa
File:                     Q_YY2fDUejMDhM9E_RIgqDU1Bww.roa (raw, json)
Hash identifier:          9XP7pyjUDk5hUsuIJVlZOgcCbDcABkAZDIG+Xw6fFBU=
Subject key identifier:   43:F6:18:D9:F0:D4:7A:33:03:84:CF:44:FD:12:20:A8:35:35:07:0C
Certificate issuer:       /CN=ae682c4f0a2940eea872542a6215e354991deb4b
Certificate serial:       182E1479
Authority key identifier: AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/Q_YY2fDUejMDhM9E_RIgqDU1Bww.roa
Signing time:             Sat 01 Jan 2022 15:07:27 +0000
ROA not before:           Sat 01 Jan 2022 15:07:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60156
IP address blocks:        185.47.76.0/22 maxlen: 22
                          2a04:ad40::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405673081 (0x182e1479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae682c4f0a2940eea872542a6215e354991deb4b
        Validity
            Not Before: Jan  1 15:07:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=43f618d9f0d47a330384cf44fd1220a83535070c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:12:d6:f2:6d:da:68:e5:81:ac:9c:8c:56:
                    d3:c6:81:59:c0:5e:84:7a:25:96:5a:d9:3f:09:5c:
                    2d:06:0f:f6:32:0d:34:06:86:af:2f:1f:d0:80:2a:
                    bf:fb:e9:c7:ab:e2:61:e9:54:64:a6:dd:0f:cb:c3:
                    2f:c9:12:17:2b:5b:78:e0:0c:f4:d4:49:3a:2c:87:
                    17:69:bf:39:45:7f:a8:01:15:fc:1c:f6:a7:55:32:
                    0b:ff:41:de:09:d5:29:92:0d:cd:5f:f2:0a:24:b2:
                    1c:96:50:10:d1:17:a2:6c:b5:75:8e:03:bb:67:bf:
                    31:81:85:0d:e1:55:15:58:8b:6e:c5:e1:8c:65:42:
                    14:0b:f3:4c:7f:45:63:df:46:e4:7f:93:c1:81:6f:
                    1c:94:eb:a1:68:4c:27:59:99:e0:73:ca:12:3a:a3:
                    b4:15:ba:33:7d:9c:ab:9f:7d:49:03:2f:e6:2f:e7:
                    a0:77:99:a8:47:fe:12:84:69:b1:1c:47:cd:d4:e1:
                    8e:18:ef:42:c1:5d:be:28:77:a8:cf:37:b6:e4:ba:
                    fd:2a:c4:9a:db:46:ec:5a:29:6b:42:90:bb:14:b8:
                    bd:4f:42:fe:cc:52:23:4a:f9:56:2e:a5:3b:c6:f9:
                    dc:95:90:b0:b8:95:fd:98:39:b8:fb:77:6e:18:ff:
                    21:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F6:18:D9:F0:D4:7A:33:03:84:CF:44:FD:12:20:A8:35:35:07:0C
            X509v3 Authority Key Identifier:
                keyid:AE:68:2C:4F:0A:29:40:EE:A8:72:54:2A:62:15:E3:54:99:1D:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmgsTwopQO6oclQqYhXjVJkd60s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/Q_YY2fDUejMDhM9E_RIgqDU1Bww.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c62c7f-f462-4348-b068-f049c66ef811/1/rmgsTwopQO6oclQqYhXjVJkd60s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.47.76.0/22
                IPv6:
                  2a04:ad40::/29

    Signature Algorithm: sha256WithRSAEncryption
         4b:a7:7a:74:d1:38:aa:48:cc:b7:fc:26:fb:67:ed:05:05:93:
         c5:ec:e6:3b:5f:11:99:84:b4:59:de:4c:1c:15:af:3f:48:b7:
         29:33:88:7f:32:17:2d:7a:a0:cf:c5:40:27:dd:9f:40:e3:ca:
         93:53:2d:57:73:26:7f:fa:89:ff:7f:da:19:bd:5a:48:1b:25:
         5f:9a:f5:8b:38:f5:db:8c:7f:d6:31:ac:10:28:71:76:1a:db:
         b3:28:64:45:6a:a2:6e:0f:c2:86:3d:b7:74:96:60:af:22:e5:
         03:39:a7:12:4f:60:03:0a:f5:e5:03:4a:f8:be:53:33:3c:d0:
         01:37:19:21:aa:f5:49:63:8c:9d:96:5a:8e:df:93:60:39:83:
         fb:fe:0a:1f:8a:12:bf:b1:d5:45:3c:cf:31:ba:22:12:06:3a:
         fa:74:28:05:ed:7a:1d:a7:71:f7:a2:b0:c6:08:aa:10:27:c9:
         25:32:43:1b:21:58:ef:a0:3e:51:ea:ec:81:ef:a4:d1:24:95:
         04:30:9a:62:3a:dd:d3:53:3b:34:02:d0:12:4a:d7:43:9e:6b:
         43:0e:58:6f:97:f9:7d:13:25:d9:84:08:12:86:43:43:f4:f6:
         a0:80:20:d2:08:89:04:3a:6c:99:34:f9:67:99:46:95:63:70:
         d5:3d:10:06
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEGC4UeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
ZTY4MmM0ZjBhMjk0MGVlYTg3MjU0MmE2MjE1ZTM1NDk5MWRlYjRiMB4XDTIyMDEw
MTE1MDcyN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDNmNjE4ZDlmMGQ0
N2EzMzAzODRjZjQ0ZmQxMjIwYTgzNTM1MDcwYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALr0Etbybdpo5YGsnIxW08aBWcBehHolllrZPwlcLQYP9jIN
NAaGry8f0IAqv/vpx6viYelUZKbdD8vDL8kSFytbeOAM9NRJOiyHF2m/OUV/qAEV
/Bz2p1UyC/9B3gnVKZINzV/yCiSyHJZQENEXomy1dY4Du2e/MYGFDeFVFViLbsXh
jGVCFAvzTH9FY99G5H+TwYFvHJTroWhMJ1mZ4HPKEjqjtBW6M32cq599SQMv5i/n
oHeZqEf+EoRpsRxHzdThjhjvQsFdvih3qM83tuS6/SrEmttG7Fopa0KQuxS4vU9C
/sxSI0r5Vi6lO8b53JWQsLiV/Zg5uPt3bhj/ITMCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRD9hjZ8NR6MwOEz0T9EiCoNTUHDDAfBgNVHSMEGDAWgBSuaCxPCilA7qhy
VCpiFeNUmR3rSzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3JtZ3NUd29wUU82b2NsUXFZaFhqVkprZDYwcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvM2YvYzYyYzdmLWY0NjItNDM0OC1iMDY4LWYwNDljNjZlZjgxMS8x
L1FfWVkyZkRVZWpNRGhNOUVfUklncURVMUJ3dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2Yv
YzYyYzdmLWY0NjItNDM0OC1iMDY4LWYwNDljNjZlZjgxMS8xL3JtZ3NUd29wUU82
b2NsUXFZaFhqVkprZDYwcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArkvTDANBAIAAjAHAwUDKgStQDAN
BgkqhkiG9w0BAQsFAAOCAQEAS6d6dNE4qkjMt/wm+2ftBQWTxezmO18RmYS0Wd5M
HBWvP0i3KTOIfzIXLXqgz8VAJ92fQOPKk1MtV3Mmf/qJ/3/aGb1aSBslX5r1izj1
24x/1jGsEChxdhrbsyhkRWqibg/Chj23dJZgryLlAzmnEk9gAwr15QNK+L5TMzzQ
ATcZIar1SWOMnZZajt+TYDmD+/4KH4oSv7HVRTzPMboiEgY6+nQoBe16Hadx96Kw
xgiqECfJJTJDGyFY76A+Uersge+k0SSVBDCaYjrd01M7NALQEkrXQ55rQw5Yb5f5
fRMl2YQIEoZDQ/T2oIAg0giJBDpsmTT5Z5lGlWNw1T0QBg==
-----END CERTIFICATE-----