Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/8Dt_qD5KhPfVU3lPN8MvXXrAhFM.roa
File:                     8Dt_qD5KhPfVU3lPN8MvXXrAhFM.roa (raw, json)
Hash identifier:          WrG2cKvUxBOIr3UG0j4f03v6wbSQAUKCVZTHGXBqYzA=
Subject key identifier:   F0:3B:7F:A8:3E:4A:84:F7:D5:53:79:4F:37:C3:2F:5D:7A:C0:84:53
Certificate issuer:       /CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
Certificate serial:       07FEA6AA
Authority key identifier: 63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/8Dt_qD5KhPfVU3lPN8MvXXrAhFM.roa
Signing time:             Sat 01 Jan 2022 02:01:25 +0000
ROA not before:           Sat 01 Jan 2022 02:01:25 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     6866
IP address blocks:        88.218.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134129322 (0x7fea6aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b82772af3d611b99b1ba6e3eb6cbfd16965363
        Validity
            Not Before: Jan  1 02:01:25 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=f03b7fa83e4a84f7d553794f37c32f5d7ac08453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:48:2c:37:c2:05:9f:8c:e5:04:4d:6b:93:af:
                    c4:58:ba:be:73:a5:20:89:fd:d4:fa:6e:61:cb:9a:
                    6b:0c:e1:9e:82:ff:dd:9b:c2:50:49:07:c9:b9:2e:
                    0c:ef:35:1c:90:11:47:4f:1f:00:0b:ae:17:78:fb:
                    9e:6b:50:48:2b:62:ab:b8:95:5e:34:85:ab:a8:8a:
                    79:c0:4c:c4:70:75:42:50:c8:00:a4:6f:cb:00:ec:
                    d3:00:3e:2c:c5:05:a2:54:b8:bc:26:20:f2:e3:ef:
                    ff:99:a3:52:57:81:c2:19:62:1a:6c:73:ef:b2:66:
                    17:a7:b4:05:ad:34:47:fa:c9:dd:da:22:53:ef:00:
                    13:4d:a0:ed:48:78:e2:40:19:31:6d:a1:37:78:33:
                    cd:52:7a:e3:47:22:ea:19:0d:4f:8f:ed:04:f3:d7:
                    07:c4:33:47:81:91:0d:f7:81:e9:1b:c3:09:d3:d8:
                    f1:6b:7e:02:d9:f6:19:39:ef:ed:20:64:18:fa:a2:
                    58:6b:56:af:34:5f:22:dd:f1:2d:c2:09:08:b3:12:
                    0c:dd:06:f4:bb:a6:25:cd:24:1e:af:95:24:fb:93:
                    df:50:81:96:2f:cc:db:f5:88:55:9c:c6:8a:2d:ce:
                    0c:c9:3b:ac:48:3c:9e:4b:24:de:48:67:67:03:c5:
                    61:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:3B:7F:A8:3E:4A:84:F7:D5:53:79:4F:37:C3:2F:5D:7A:C0:84:53
            X509v3 Authority Key Identifier:
                keyid:63:B8:27:72:AF:3D:61:1B:99:B1:BA:6E:3E:B6:CB:FD:16:96:53:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7gncq89YRuZsbpuPrbL_RaWU2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/8Dt_qD5KhPfVU3lPN8MvXXrAhFM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cb0d91-8270-4550-8fac-0ce2038aaa7b/1/Y7gncq89YRuZsbpuPrbL_RaWU2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:1b:19:b8:01:71:67:90:6f:32:96:67:75:e1:5e:3c:35:3d:
         14:b8:22:11:cf:17:b6:26:64:5f:b1:73:0f:4e:c4:c3:f5:63:
         67:42:9c:6b:dc:4e:b6:51:ad:9f:46:a2:7c:99:be:0b:97:02:
         b1:06:60:0d:77:87:47:29:dd:cc:5b:ec:7a:c8:64:00:de:f0:
         d8:bf:f5:5e:88:1a:e7:79:c4:bf:67:d7:a8:9b:cf:8f:8c:cc:
         d9:dd:6b:8e:9a:c1:db:ee:57:b0:1a:78:91:25:d6:3b:33:cc:
         7b:6e:46:d4:cc:26:5b:38:ea:03:ac:1f:03:ac:84:80:d9:4d:
         3f:36:f4:9d:33:13:e9:ec:e9:6c:4c:1a:69:68:9e:37:89:e8:
         27:b8:d8:8e:51:f4:eb:82:36:2d:7e:e2:1b:4b:c2:bc:06:74:
         d5:ff:9f:9a:07:96:0c:2d:bd:2c:26:03:88:9f:79:68:e1:ec:
         45:b3:62:7e:09:b4:b9:11:af:70:64:cb:51:a9:bd:ec:0b:61:
         b8:8b:1e:e6:fd:99:68:f2:df:9f:d0:7c:bd:33:99:1a:7b:e9:
         c8:8c:4a:03:1d:c2:b9:28:b2:0a:74:ed:74:29:4d:e2:37:00:
         5b:94:d0:ad:59:d1:38:c7:13:92:db:30:04:78:f0:07:ae:45:
         fe:2b:54:c4
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEB/6mqjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
M2I4Mjc3MmFmM2Q2MTFiOTliMWJhNmUzZWI2Y2JmZDE2OTY1MzYzMB4XDTIyMDEw
MTAyMDEyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjAzYjdmYTgzZTRh
ODRmN2Q1NTM3OTRmMzdjMzJmNWQ3YWMwODQ1MzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIpILDfCBZ+M5QRNa5OvxFi6vnOlIIn91PpuYcuaawzhnoL/
3ZvCUEkHybkuDO81HJARR08fAAuuF3j7nmtQSCtiq7iVXjSFq6iKecBMxHB1QlDI
AKRvywDs0wA+LMUFolS4vCYg8uPv/5mjUleBwhliGmxz77JmF6e0Ba00R/rJ3doi
U+8AE02g7Uh44kAZMW2hN3gzzVJ640ci6hkNT4/tBPPXB8QzR4GRDfeB6RvDCdPY
8Wt+Atn2GTnv7SBkGPqiWGtWrzRfIt3xLcIJCLMSDN0G9LumJc0kHq+VJPuT31CB
li/M2/WIVZzGii3ODMk7rEg8nksk3khnZwPFYbkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTwO3+oPkqE99VTeU83wy9desCEUzAfBgNVHSMEGDAWgBRjuCdyrz1hG5mx
um4+tsv9FpZTYzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1k3Z25jcTg5WVJ1WnNicHVQcmJMX1JhV1UyTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDYvY2IwZDkxLTgyNzAtNDU1MC04ZmFjLTBjZTIwMzhhYWE3Yi8x
LzhEdF9xRDVLaFBmVlUzbFBOOE12WFhyQWhGTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYv
Y2IwZDkxLTgyNzAtNDU1MC04ZmFjLTBjZTIwMzhhYWE3Yi8xL1k3Z25jcTg5WVJ1
WnNicHVQcmJMX1JhV1UyTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlja6DANBgkqhkiG9w0BAQsFAAOC
AQEATRsZuAFxZ5BvMpZndeFePDU9FLgiEc8XtiZkX7FzD07Ew/VjZ0Kca9xOtlGt
n0aifJm+C5cCsQZgDXeHRyndzFvseshkAN7w2L/1Xoga53nEv2fXqJvPj4zM2d1r
jprB2+5XsBp4kSXWOzPMe25G1MwmWzjqA6wfA6yEgNlNPzb0nTMT6ezpbEwaaWie
N4noJ7jYjlH064I2LX7iG0vCvAZ01f+fmgeWDC29LCYDiJ95aOHsRbNifgm0uRGv
cGTLUam97AthuIse5v2ZaPLfn9B8vTOZGnvpyIxKAx3CuSiyCnTtdClN4jcAW5TQ
rVnROMcTktswBHjwB65F/itUxA==
-----END CERTIFICATE-----