Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/F1V6NXlrELXTPm7fijjyaNM1Zv8.roa
File:                     F1V6NXlrELXTPm7fijjyaNM1Zv8.roa (raw, json)
Hash identifier:          WVdk1KnnEH2XqhrEJEXllEwYnzJKDsKVnVd5pWNAGZU=
Subject key identifier:   17:55:7A:35:79:6B:10:B5:D3:3E:6E:DF:8A:38:F2:68:D3:35:66:FF
Certificate issuer:       /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial:       03BF3AC5
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/F1V6NXlrELXTPm7fijjyaNM1Zv8.roa
Signing time:             Sat 01 Jan 2022 12:57:09 +0000
ROA not before:           Sat 01 Jan 2022 12:57:09 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41127
IP address blocks:        212.74.238.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62864069 (0x3bf3ac5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
        Validity
            Not Before: Jan  1 12:57:09 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=17557a35796b10b5d33e6edf8a38f268d33566ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:d1:11:0c:3a:94:f7:ad:4a:ec:c6:af:c8:
                    7f:ed:97:a5:75:ed:52:32:2b:49:e9:c9:10:56:1a:
                    46:59:b5:c3:e3:fc:ce:b9:86:20:e4:d2:8e:2c:0f:
                    3c:31:3d:56:6d:54:70:97:25:11:dd:bc:d5:b8:a4:
                    e5:ce:20:7d:df:94:d2:11:d8:b0:83:00:cb:d1:d7:
                    e1:ff:5e:2a:12:de:8b:62:8f:3b:69:fa:af:28:8d:
                    78:23:3f:bf:fa:4f:70:a5:b4:65:5e:36:30:56:c6:
                    b4:47:dd:f2:a6:e0:95:33:8e:b7:45:d1:3f:ec:d1:
                    dc:56:e6:4a:c4:1a:85:cf:37:ff:d3:26:c1:19:87:
                    7c:f8:cb:c4:92:93:09:49:8e:18:63:8f:56:47:e1:
                    44:33:88:27:94:a8:75:7c:24:87:da:85:3a:cc:0b:
                    0a:7d:a9:4e:34:10:9f:9f:e9:30:7d:13:78:d8:f9:
                    af:e9:0f:90:c9:52:70:88:46:59:1a:7d:71:eb:96:
                    44:17:64:da:fd:8e:22:b4:26:b6:1b:f3:7d:03:c2:
                    23:d5:81:fe:1b:a5:ec:e2:58:86:23:2c:4a:5c:15:
                    7c:75:b7:27:17:7f:b7:fa:5d:78:2b:3f:0f:57:a8:
                    e0:be:9e:e0:11:a3:4b:64:ee:30:cd:5e:13:29:5f:
                    35:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:55:7A:35:79:6B:10:B5:D3:3E:6E:DF:8A:38:F2:68:D3:35:66:FF
            X509v3 Authority Key Identifier:
                keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/F1V6NXlrELXTPm7fijjyaNM1Zv8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.74.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:d2:ab:ac:83:30:66:b2:d2:a3:b4:1e:a0:34:87:a5:3e:0c:
         fe:93:5f:ed:8e:7d:99:8b:92:02:05:bb:49:00:b3:f5:35:6d:
         dc:54:c7:8e:d9:d3:f9:48:90:80:60:8b:2c:36:e6:e2:98:ab:
         aa:9a:7d:eb:0b:e0:ea:33:45:57:f6:be:1d:a8:2e:9e:f0:87:
         4f:53:23:3b:ed:49:e6:c5:10:43:a8:21:dc:5c:21:23:8a:35:
         bb:5a:5c:eb:69:98:a4:67:ab:d2:86:d6:38:99:76:0f:6a:0f:
         78:e6:52:cd:cf:a0:9b:91:1b:3a:d7:16:ef:4a:35:7b:80:89:
         d7:f8:93:44:85:1e:73:68:16:67:21:6e:05:0c:86:f9:22:97:
         b9:98:5b:14:cd:da:d9:f6:73:bb:ff:a9:c9:92:81:67:00:e5:
         ae:6b:b5:e7:ac:82:a1:fb:15:1b:da:d7:f1:ac:44:e3:bf:c9:
         72:53:3b:a2:15:18:13:e5:b1:c0:ad:48:aa:6c:91:20:94:b7:
         4e:eb:f9:aa:d1:1b:54:8a:d6:ad:c1:b8:e4:e0:45:dd:66:d7:
         86:68:1e:b2:ed:e8:ab:3e:29:40:eb:aa:aa:7b:3f:09:3e:29:
         d0:1a:ff:db:e1:30:5e:72:27:54:d3:3d:cf:8e:32:97:d8:80:
         14:b8:cf:55
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA786xTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YjU1NGM0NDA0NmMzNjQzOWE5MTk3Mzg5NDJmMzFmYTc1NmI2OTExMB4XDTIyMDEw
MTEyNTcwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTc1NTdhMzU3OTZi
MTBiNWQzM2U2ZWRmOGEzOGYyNjhkMzM1NjZmZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANZ/0REMOpT3rUrsxq/If+2XpXXtUjIrSenJEFYaRlm1w+P8
zrmGIOTSjiwPPDE9Vm1UcJclEd281bik5c4gfd+U0hHYsIMAy9HX4f9eKhLei2KP
O2n6ryiNeCM/v/pPcKW0ZV42MFbGtEfd8qbglTOOt0XRP+zR3FbmSsQahc83/9Mm
wRmHfPjLxJKTCUmOGGOPVkfhRDOIJ5SodXwkh9qFOswLCn2pTjQQn5/pMH0TeNj5
r+kPkMlScIhGWRp9ceuWRBdk2v2OIrQmthvzfQPCI9WB/hul7OJYhiMsSlwVfHW3
Jxd/t/pdeCs/D1eo4L6e4BGjS2TuMM1eEylfNX8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQXVXo1eWsQtdM+bt+KOPJo0zVm/zAfBgNVHSMEGDAWgBTrVUxEBGw2Q5qR
lziULzH6dWtpETAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzYxVk1SQVJzTmtPYWtaYzRsQzh4LW5WcmFSRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvYzU0N2I4LTk5YWItNDJmMS1hNmNjLWJjNjY1YmIyMTY4Ni8x
L0YxVjZOWGxyRUxYVFBtN2Zpamp5YU5NMVp2OC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
YzU0N2I4LTk5YWItNDJmMS1hNmNjLWJjNjY1YmIyMTY4Ni8xLzYxVk1SQVJzTmtP
YWtaYzRsQzh4LW5WcmFSRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdRK7jANBgkqhkiG9w0BAQsFAAOC
AQEAb9KrrIMwZrLSo7QeoDSHpT4M/pNf7Y59mYuSAgW7SQCz9TVt3FTHjtnT+UiQ
gGCLLDbm4pirqpp96wvg6jNFV/a+HagunvCHT1MjO+1J5sUQQ6gh3FwhI4o1u1pc
62mYpGer0obWOJl2D2oPeOZSzc+gm5EbOtcW70o1e4CJ1/iTRIUec2gWZyFuBQyG
+SKXuZhbFM3a2fZzu/+pyZKBZwDlrmu156yCofsVG9rX8axE47/JclM7ohUYE+Wx
wK1IqmyRIJS3Tuv5qtEbVIrWrcG45OBF3WbXhmgesu3oqz4pQOuqqns/CT4p0Br/
2+EwXnInVNM9z44yl9iAFLjPVQ==
-----END CERTIFICATE-----