Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/hL6c6OTNLYRwXjqEwOdPl6iqPPE.roa
File:                     hL6c6OTNLYRwXjqEwOdPl6iqPPE.roa (raw, json)
Hash identifier:          nu4VKf6ytOvgeuTXJBv8hMg943/SQiQxwh19uQIDZD8=
Subject key identifier:   84:BE:9C:E8:E4:CD:2D:84:70:5E:3A:84:C0:E7:4F:97:A8:AA:3C:F1
Certificate issuer:       /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Certificate serial:       02C7245C
Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/hL6c6OTNLYRwXjqEwOdPl6iqPPE.roa
Signing time:             Thu 30 Jun 2022 09:57:22 +0000
ROA not before:           Thu 30 Jun 2022 09:57:22 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     59437
IP address blocks:        91.239.86.0/24 maxlen: 24
                          2a11:cc80::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46605404 (0x2c7245c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
        Validity
            Not Before: Jun 30 09:57:22 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=84be9ce8e4cd2d84705e3a84c0e74f97a8aa3cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:34:85:39:12:12:50:9a:dd:93:eb:49:51:17:
                    b4:0c:40:50:87:a0:e8:5c:d1:63:11:05:50:3c:f7:
                    a4:4f:6e:f7:92:fb:00:1e:59:8d:d0:47:e4:c4:30:
                    a2:70:a5:80:15:45:58:da:1f:45:04:38:5f:e3:77:
                    57:60:b8:ee:72:ed:27:59:ca:cf:aa:50:2e:4f:d2:
                    3c:d9:c8:0f:c7:b0:7e:a4:64:e3:a4:f9:9d:04:3f:
                    41:5a:33:97:1c:97:7a:a4:80:95:a3:9c:a6:11:f1:
                    79:ca:7d:0d:f7:29:6a:8c:a7:76:d9:a3:a3:92:4f:
                    32:96:17:15:96:c3:59:39:0d:2e:ca:78:d1:c3:8d:
                    c9:c7:b1:69:f5:08:e1:45:d4:63:d4:10:52:ed:2f:
                    c1:8b:9b:b5:bf:6c:b6:29:f0:33:07:2e:4d:ec:a7:
                    9b:07:b4:14:18:b7:05:d7:80:11:e4:28:a0:6d:a6:
                    ae:ee:d0:c7:56:bb:0d:07:ed:44:ff:67:ea:2e:0b:
                    19:6a:ea:49:3b:86:a8:e1:98:51:03:06:a2:e6:84:
                    13:99:db:94:b8:76:0d:36:f5:c3:43:49:87:84:1f:
                    18:82:e4:b1:9e:ea:62:f1:c4:05:48:f8:e2:c2:bd:
                    c7:f6:f8:9d:14:58:39:89:b9:e3:6f:a9:1d:4f:4d:
                    d7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BE:9C:E8:E4:CD:2D:84:70:5E:3A:84:C0:E7:4F:97:A8:AA:3C:F1
            X509v3 Authority Key Identifier:
                keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/hL6c6OTNLYRwXjqEwOdPl6iqPPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.239.86.0/24
                IPv6:
                  2a11:cc80::/29

    Signature Algorithm: sha256WithRSAEncryption
         21:3b:78:69:76:0e:c2:bb:57:e6:93:c7:f4:96:31:12:f5:f3:
         6d:13:c2:c0:d2:0a:49:44:0f:62:f8:95:0d:47:3a:e1:ea:47:
         e0:b1:d1:4a:ff:c0:ab:53:b6:37:67:58:67:ec:e9:81:d6:72:
         60:22:e7:57:cb:ab:a3:c5:19:d8:e5:38:6c:14:93:75:27:81:
         37:8a:66:10:a2:bc:ae:da:86:27:2a:cc:70:a1:b7:45:1f:09:
         be:2b:0b:2c:d2:2e:70:75:94:26:c2:c1:60:93:97:92:59:4e:
         7e:ca:35:24:a1:53:5c:11:95:55:cd:e4:f5:43:40:9f:20:f6:
         19:eb:2f:8f:bc:9e:2a:b8:4e:58:62:84:b1:d2:bf:fe:7e:d4:
         33:d7:83:76:68:c8:b3:71:95:37:c3:25:2c:e4:8c:d2:7c:20:
         11:d4:78:a2:ef:ac:37:46:5a:6e:40:c2:95:b6:78:d2:7e:5b:
         79:1a:ae:94:f6:cd:1e:09:0e:87:5d:fc:cf:f3:74:f4:d2:c8:
         ab:14:7d:17:36:aa:85:1d:2b:b4:0f:20:b8:39:fa:e3:b3:48:
         a3:f5:3e:81:a0:fd:9c:47:53:f3:f6:c8:bb:79:3d:4d:8e:52:
         15:36:97:f4:0b:c2:e5:67:b5:b2:24:7d:aa:a5:ef:c0:ab:07:
         2f:92:c6:1a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEAsckXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
OTY1YzYyZjEwYzI1ZTdhN2VmMTgzNTY4MzNhYTRmOWI5ODQyYzZhMB4XDTIyMDYz
MDA5NTcyMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoODRiZTljZThlNGNk
MmQ4NDcwNWUzYTg0YzBlNzRmOTdhOGFhM2NmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM40hTkSElCa3ZPrSVEXtAxAUIeg6FzRYxEFUDz3pE9u95L7
AB5ZjdBH5MQwonClgBVFWNofRQQ4X+N3V2C47nLtJ1nKz6pQLk/SPNnID8ewfqRk
46T5nQQ/QVozlxyXeqSAlaOcphHxecp9Dfcpaoyndtmjo5JPMpYXFZbDWTkNLsp4
0cONycexafUI4UXUY9QQUu0vwYubtb9stinwMwcuTeynmwe0FBi3BdeAEeQooG2m
ru7Qx1a7DQftRP9n6i4LGWrqSTuGqOGYUQMGouaEE5nblLh2DTb1w0NJh4QfGILk
sZ7qYvHEBUj44sK9x/b4nRRYOYm542+pHU9N11MCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBSEvpzo5M0thHBeOoTA50+XqKo88TAfBgNVHSMEGDAWgBRZZcYvEMJeen7x
g1aDOqT5uYQsajAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dXWEdMeERDWG5wLThZTldnenFrLWJtRUxHby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNjUvYWJkMmE3LTNiZmQtNDYxMy05ZjAxLTZjYTdjNTQyNjNiOS8x
L2hMNmM2T1ROTFlSd1hqcUV3T2RQbDZpcVBQRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUv
YWJkMmE3LTNiZmQtNDYxMy05ZjAxLTZjYTdjNTQyNjNiOS8xL1dXWEdMeERDWG5w
LThZTldnenFrLWJtRUxHby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAFvvVjANBAIAAjAHAwUDKhHMgDAN
BgkqhkiG9w0BAQsFAAOCAQEAITt4aXYOwrtX5pPH9JYxEvXzbRPCwNIKSUQPYviV
DUc64epH4LHRSv/Aq1O2N2dYZ+zpgdZyYCLnV8uro8UZ2OU4bBSTdSeBN4pmEKK8
rtqGJyrMcKG3RR8JvisLLNIucHWUJsLBYJOXkllOfso1JKFTXBGVVc3k9UNAnyD2
Gesvj7yeKrhOWGKEsdK//n7UM9eDdmjIs3GVN8MlLOSM0nwgEdR4ou+sN0ZabkDC
lbZ40n5beRqulPbNHgkOh138z/N09NLIqxR9FzaqhR0rtA8guDn647NIo/U+gaD9
nEdT8/bIu3k9TY5SFTaX9AvC5We1siR9qqXvwKsHL5LGGg==
-----END CERTIFICATE-----