Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/N_c3eskmrV-IB_SKcyVdpvXbTMw.roa
File:                     N_c3eskmrV-IB_SKcyVdpvXbTMw.roa (raw, json)
Hash identifier:          /knle/aLDKjEXh6j+tZAbQF9G1zi7bQ1MTED92KS65s=
Subject key identifier:   37:F7:37:7A:C9:26:AD:5F:88:07:F4:8A:73:25:5D:A6:F5:DB:4C:CC
Certificate issuer:       /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial:       0184691436372EEF0EABA06DA26A670946FD
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/N_c3eskmrV-IB_SKcyVdpvXbTMw.roa
Signing time:             Fri 11 Nov 2022 23:44:03 +0000
ROA not before:           Fri 11 Nov 2022 23:44:03 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     201565
IP address blocks:        185.91.148.0/23 maxlen: 23
                          185.91.150.0/23 maxlen: 23
                          94.176.185.0/24 maxlen: 24
                          94.176.184.0/24 maxlen: 24
                          185.59.96.0/22 maxlen: 22
                          89.35.206.0/24 maxlen: 24
                          89.35.207.0/24 maxlen: 24
                          185.11.232.0/22 maxlen: 22
                          2a03:7e40:2000::/36 maxlen: 36
                          2a03:7e40:4000::/36 maxlen: 36
                          2a03:7e40:5000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:69:14:36:37:2e:ef:0e:ab:a0:6d:a2:6a:67:09:46:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
        Validity
            Not Before: Nov 11 23:44:03 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=37f7377ac926ad5f8807f48a73255da6f5db4ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:db:f6:f9:e7:54:16:fb:33:7d:74:dc:26:
                    fd:1a:96:c7:58:73:7e:01:a0:d3:74:d3:54:a6:2b:
                    d1:1a:fa:48:88:95:70:35:62:7c:09:b9:b8:26:88:
                    18:74:ff:e5:d7:73:78:0a:b4:68:0f:51:01:6a:f7:
                    01:dd:dc:25:68:33:09:7d:6f:99:4b:31:fb:41:8a:
                    4d:33:79:12:c8:cb:20:8f:a5:1f:6c:51:ad:49:93:
                    60:34:d0:c3:ae:ab:c1:bd:0d:9b:f6:fa:e8:86:8d:
                    a6:0b:64:50:42:6c:63:a8:32:75:f0:b4:99:48:25:
                    8b:25:fd:27:f5:f2:29:fe:53:5c:ac:2b:d1:01:02:
                    08:c9:42:51:3f:7c:ca:d8:c0:03:38:09:d1:99:74:
                    3d:5b:30:08:84:6f:3c:c5:e9:38:85:ed:40:a3:b8:
                    33:66:0d:01:d8:83:45:e1:28:3d:bc:71:71:ae:de:
                    87:5c:5a:d7:2f:71:c1:6c:9a:ff:4d:3c:99:fe:80:
                    04:ba:0c:fd:22:21:7a:85:a3:74:c6:8d:66:06:f0:
                    8a:8f:45:af:ac:b3:4b:9c:e1:a2:35:3c:d9:4c:4f:
                    8c:f5:78:d4:33:ca:2e:5f:f9:ad:63:af:1b:a1:78:
                    45:11:3c:62:2e:18:7d:9a:41:f5:7b:cb:4e:47:8d:
                    40:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F7:37:7A:C9:26:AD:5F:88:07:F4:8A:73:25:5D:A6:F5:DB:4C:CC
            X509v3 Authority Key Identifier:
                keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/N_c3eskmrV-IB_SKcyVdpvXbTMw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.206.0/23
                  94.176.184.0/23
                  185.11.232.0/22
                  185.59.96.0/22
                  185.91.148.0/22
                IPv6:
                  2a03:7e40:2000::/36
                  2a03:7e40:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1d:ee:7a:b9:8a:3f:b9:5b:cd:e8:b9:f7:79:7d:6c:a2:6a:91:
         e0:92:33:da:1c:7e:7b:74:b6:3f:91:c9:cb:08:fb:46:29:f2:
         8d:62:33:44:82:f4:3b:f9:8e:1a:98:8f:47:48:a5:2b:27:32:
         e8:8c:eb:19:3b:b8:fa:34:12:e2:20:0b:aa:e5:d9:2d:7d:1f:
         cf:0e:00:36:77:33:fd:78:d7:f4:b6:43:7e:cc:d8:5d:d6:64:
         1b:20:50:6b:c7:78:49:eb:56:73:3a:54:18:50:51:ef:09:c7:
         61:37:5f:40:15:74:67:c0:25:ff:e5:01:46:29:cc:e3:59:e0:
         04:6f:fb:e9:2b:8c:8f:9e:98:eb:2e:c9:4b:1f:00:eb:ae:08:
         ab:e4:88:69:98:3a:46:da:8b:23:e4:db:0c:68:3c:14:61:9d:
         63:22:90:42:b8:c4:a0:df:74:54:c0:84:b2:66:a5:5b:2e:32:
         80:a0:9f:aa:7e:95:8c:ae:1a:89:cd:fa:d8:c6:dc:92:d4:49:
         cf:a0:87:02:fd:45:f5:50:71:a7:37:55:d0:42:2c:c8:7c:70:
         60:29:9a:22:c6:28:9a:eb:8a:3f:df:a3:83:ca:ab:a8:70:27:
         f5:6c:25:74:c7:66:37:fd:b0:64:40:4f:49:15:a9:51:38:df:
         02:01:89:91
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYRpFDY3Lu8Oq6BtompnCUb9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzY4ZmViOWU1NTNiZGQxMzE1NjI1ODRhMzM1M2IxZDc1
NTVjNTAwHhcNMjIxMTExMjM0NDAzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2Y3Mzc3YWM5MjZhZDVmODgwN2Y0OGE3MzI1NWRhNmY1ZGI0Y2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntfb9vnnVBb7M3103Cb9GpbHWHN+
AaDTdNNUpivRGvpIiJVwNWJ8Cbm4JogYdP/l13N4CrRoD1EBavcB3dwlaDMJfW+Z
SzH7QYpNM3kSyMsgj6UfbFGtSZNgNNDDrqvBvQ2b9vroho2mC2RQQmxjqDJ18LSZ
SCWLJf0n9fIp/lNcrCvRAQIIyUJRP3zK2MADOAnRmXQ9WzAIhG88xek4he1Ao7gz
Zg0B2INF4Sg9vHFxrt6HXFrXL3HBbJr/TTyZ/oAEugz9IiF6haN0xo1mBvCKj0Wv
rLNLnOGiNTzZTE+M9XjUM8ouX/mtY68boXhFETxiLhh9mkH1e8tOR41AiwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFDf3N3rJJq1fiAf0inMlXab120zMMB8GA1UdIwQY
MBaAFI82j+ueVTvdExViWEozU7HXVVxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjct
M2VjYTdkZjJhZTU3LzEvTl9jM2Vza21yVi1JQl9TS2N5VmRwdlhiVE13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjctM2VjYTdkZjJhZTU3
LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAkBAIAATAeAwQBWSPOAwQB
XrC4AwQCuQvoAwQCuTtgAwQCuVuUMBYEAgACMBADBgQqA35AIAMGBSoDfkBAMA0G
CSqGSIb3DQEBCwUAA4IBAQAd7nq5ij+5W83oufd5fWyiapHgkjPaHH57dLY/kcnL
CPtGKfKNYjNEgvQ7+Y4amI9HSKUrJzLojOsZO7j6NBLiIAuq5dktfR/PDgA2dzP9
eNf0tkN+zNhd1mQbIFBrx3hJ61ZzOlQYUFHvCcdhN19AFXRnwCX/5QFGKczjWeAE
b/vpK4yPnpjrLslLHwDrrgir5IhpmDpG2osj5NsMaDwUYZ1jIpBCuMSg33RUwISy
ZqVbLjKAoJ+qfpWMrhqJzfrYxtyS1EnPoIcC/UX1UHGnN1XQQizIfHBgKZoixiia
64o/36ODyquocCf1bCV0x2Y3/bBkQE9JFalRON8CAYmR
-----END CERTIFICATE-----