Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/_O5ldXOtFBN4KfqT-FPLASARh2Q.roa
File:                     _O5ldXOtFBN4KfqT-FPLASARh2Q.roa (raw, json)
Hash identifier:          JM2d6X1UCCDugE12fZDwzlDn0M8yAiN78OcUgi9v86k=
Subject key identifier:   FC:EE:65:75:73:AD:14:13:78:29:FA:93:F8:53:CB:01:20:11:87:64
Certificate issuer:       /CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Certificate serial:       0909C7D8
Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/_O5ldXOtFBN4KfqT-FPLASARh2Q.roa
Signing time:             Sat 01 Jan 2022 09:53:42 +0000
ROA not before:           Sat 01 Jan 2022 09:53:42 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     197690
IP address blocks:        85.208.180.0/22 maxlen: 22
                          2a09:8b40::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151635928 (0x909c7d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389
        Validity
            Not Before: Jan  1 09:53:42 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=fcee657573ad14137829fa93f853cb0120118764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3a:fc:70:9b:58:0c:b8:32:a3:f7:fb:a3:83:
                    81:df:cd:3a:fe:66:30:95:bf:7b:8d:c4:ea:0b:6c:
                    99:46:b4:55:67:bd:48:2f:f8:d1:98:92:d6:5b:c6:
                    2a:2f:31:0a:5b:fa:40:eb:5c:92:fc:60:4c:76:41:
                    55:c0:3c:ba:7c:51:7c:c2:d8:74:45:d7:f8:57:45:
                    9a:2c:03:b9:bd:a2:67:3e:29:e2:98:c7:26:8a:ac:
                    6c:0a:21:fc:de:d8:22:ea:18:1e:e4:c2:3e:52:3c:
                    a6:da:25:a1:18:ca:b6:fd:98:65:2f:50:61:ba:0a:
                    60:55:c5:24:2c:e9:4e:d4:1f:eb:2c:6e:42:8b:c5:
                    fd:46:f6:6d:22:82:87:0e:10:0e:98:8c:9e:59:2d:
                    bc:b8:70:48:6e:b6:e0:c5:c9:7a:8e:1a:93:42:5a:
                    d5:ed:51:97:54:85:ef:ca:e5:b2:8e:6d:a3:1f:60:
                    4e:c0:03:f5:bd:73:5f:29:97:63:ea:9e:75:fa:2e:
                    5b:e6:95:e1:e4:2a:75:71:1a:fc:c1:c5:62:7a:21:
                    64:6e:96:99:40:2f:4b:53:36:f3:c7:09:5d:33:b2:
                    db:04:55:ce:9d:57:97:85:7d:64:63:64:80:f0:fc:
                    52:4b:76:8a:2d:f6:5a:0d:54:60:c7:88:c1:64:4e:
                    3f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EE:65:75:73:AD:14:13:78:29:FA:93:F8:53:CB:01:20:11:87:64
            X509v3 Authority Key Identifier:
                keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/_O5ldXOtFBN4KfqT-FPLASARh2Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.208.180.0/22
                IPv6:
                  2a09:8b40::/29

    Signature Algorithm: sha256WithRSAEncryption
         31:5e:5f:76:b5:0b:39:18:90:46:5d:c3:9b:7b:c5:94:18:3e:
         05:db:8c:3c:ca:36:59:1a:9e:7c:9f:28:cd:b8:ee:8c:d5:d0:
         ee:f5:36:28:87:fa:59:f1:f2:c5:cb:49:d6:6c:ac:39:40:0b:
         d2:ab:5e:2f:4c:61:fa:07:67:94:d4:9e:13:04:53:fa:46:ef:
         f3:68:a5:bb:40:80:29:e0:04:52:58:b8:f9:71:6b:1a:45:1b:
         6c:44:84:ef:02:ac:21:2d:2e:e1:f3:18:73:b4:02:fa:b5:e2:
         1f:8a:2e:80:ff:38:69:0e:90:cb:cd:5d:b1:de:5d:9e:0a:b7:
         cb:e2:93:bd:58:c5:48:d8:62:9c:30:0e:c7:74:3a:35:f0:8f:
         53:84:e5:f8:65:6d:f1:e2:e5:63:bb:94:49:c6:83:17:22:60:
         c5:d2:12:02:b7:a2:1c:ac:c3:8e:02:f5:4f:4d:68:2a:97:2a:
         ad:06:4a:f9:80:a7:94:ae:18:62:b0:84:50:ba:a2:d4:5e:4c:
         86:03:2f:c3:99:29:c2:98:71:5e:8f:ba:db:2a:48:ac:7a:bc:
         59:a9:11:a0:2d:54:1a:7f:02:80:fe:77:a1:f9:99:21:d1:e9:
         39:88:ce:b3:b7:f3:02:40:a0:e4:a5:08:6b:9c:f9:9e:54:ca:
         83:cf:8b:7d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECQnH2DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YmM4OTMzNzVhZDE1NWI1ZmZjZWQzY2JlZTI1MzViODY1OWZlMzg5MB4XDTIyMDEw
MTA5NTM0MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZmNlZTY1NzU3M2Fk
MTQxMzc4MjlmYTkzZjg1M2NiMDEyMDExODc2NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANs6/HCbWAy4MqP3+6ODgd/NOv5mMJW/e43E6gtsmUa0VWe9
SC/40ZiS1lvGKi8xClv6QOtckvxgTHZBVcA8unxRfMLYdEXX+FdFmiwDub2iZz4p
4pjHJoqsbAoh/N7YIuoYHuTCPlI8ptoloRjKtv2YZS9QYboKYFXFJCzpTtQf6yxu
QovF/Ub2bSKChw4QDpiMnlktvLhwSG624MXJeo4ak0Ja1e1Rl1SF78rlso5tox9g
TsAD9b1zXymXY+qedfouW+aV4eQqdXEa/MHFYnohZG6WmUAvS1M288cJXTOy2wRV
zp1Xl4V9ZGNkgPD8Ukt2ii32Wg1UYMeIwWROP1ECAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBT87mV1c60UE3gp+pP4U8sBIBGHZDAfBgNVHSMEGDAWgBQLyJM3WtFVtf/O
08vuJTW4ZZ/jiTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0M4aVROMXJSVmJYX3p0UEw3aVUxdUdXZjQ0ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNzcvMzM2NzAxLWUzNmEtNGRiMi05NzRlLTBlZDA3OGY0YmNhZi8x
L19PNWxkWE90RkJONEtmcVQtRlBMQVNBUmgyUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcv
MzM2NzAxLWUzNmEtNGRiMi05NzRlLTBlZDA3OGY0YmNhZi8xL0M4aVROMXJSVmJY
X3p0UEw3aVUxdUdXZjQ0ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAlXQtDANBAIAAjAHAwUDKgmLQDAN
BgkqhkiG9w0BAQsFAAOCAQEAMV5fdrULORiQRl3Dm3vFlBg+BduMPMo2WRqefJ8o
zbjujNXQ7vU2KIf6WfHyxctJ1mysOUAL0qteL0xh+gdnlNSeEwRT+kbv82ilu0CA
KeAEUli4+XFrGkUbbESE7wKsIS0u4fMYc7QC+rXiH4ougP84aQ6Qy81dsd5dngq3
y+KTvVjFSNhinDAOx3Q6NfCPU4Tl+GVt8eLlY7uUScaDFyJgxdISAreiHKzDjgL1
T01oKpcqrQZK+YCnlK4YYrCEULqi1F5MhgMvw5kpwphxXo+62ypIrHq8WakRoC1U
Gn8CgP53ofmZIdHpOYjOs7fzAkCg5KUIa5z5nlTKg8+LfQ==
-----END CERTIFICATE-----