Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/lpRLYBrjjSiS3liZK6uRYnb5egI.roa
File:                     lpRLYBrjjSiS3liZK6uRYnb5egI.roa (raw, json)
Hash identifier:          UD1AdzMKnHOqdkKZbPs9EwmSjQplqwhkoFEX5a6Wv/E=
Subject key identifier:   96:94:4B:60:1A:E3:8D:28:92:DE:58:99:2B:AB:91:62:76:F9:7A:02
Certificate issuer:       /CN=302d11e852615740076b3281b8aff0fac5ca2f33
Certificate serial:       022E4EE5
Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/lpRLYBrjjSiS3liZK6uRYnb5egI.roa
Signing time:             Sat 01 Jan 2022 03:59:29 +0000
ROA not before:           Sat 01 Jan 2022 03:59:29 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     39212
IP address blocks:        185.182.26.0/24 maxlen: 24
                          2a0a:df80:26::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36589285 (0x22e4ee5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33
        Validity
            Not Before: Jan  1 03:59:29 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=96944b601ae38d2892de58992bab916276f97a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:c4:30:a6:80:15:7a:cb:16:3e:7c:97:1e:
                    4c:06:a2:e8:8a:ad:37:35:1e:6b:e5:ad:5b:f4:c0:
                    ef:a8:58:d9:ed:47:e5:0d:8e:71:3e:e9:33:98:3e:
                    de:3e:71:3f:8d:d8:c0:45:cc:55:4d:a5:65:52:54:
                    3e:bb:cd:ea:f3:c1:11:33:23:74:dd:d5:98:6d:01:
                    1a:7e:ae:e1:1c:2d:15:b6:9e:1c:21:10:43:ea:15:
                    58:06:95:0a:c4:fb:72:bd:2f:87:46:46:56:14:7c:
                    63:fe:d3:a4:dd:25:10:b3:6a:28:8e:ca:cf:d8:6a:
                    5f:43:1e:bb:39:c6:33:00:64:94:9e:9a:f0:cd:25:
                    a3:f4:6e:f7:c7:40:a5:69:13:5a:96:b4:1c:54:65:
                    c6:84:25:e0:4d:7a:5a:97:a2:00:82:33:20:ba:9d:
                    28:31:5f:52:27:0d:c1:62:97:c4:0f:cb:b1:20:0b:
                    bc:27:57:ba:79:54:e3:c2:7a:c6:99:70:c8:8b:62:
                    b1:b7:4b:cd:86:82:bc:61:91:75:43:e8:d2:7a:fb:
                    74:c7:33:cd:49:0e:bd:a8:00:ae:27:9e:65:d7:2c:
                    2c:5a:0a:92:36:5f:cf:9b:3e:1e:ec:f2:a7:d3:22:
                    a8:6f:e9:9e:f6:a6:bd:2c:49:dc:48:97:5a:89:37:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:94:4B:60:1A:E3:8D:28:92:DE:58:99:2B:AB:91:62:76:F9:7A:02
            X509v3 Authority Key Identifier:
                keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/lpRLYBrjjSiS3liZK6uRYnb5egI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.182.26.0/24
                IPv6:
                  2a0a:df80:26::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:6f:06:af:c5:95:df:76:0e:89:39:90:16:d8:20:4a:7f:8e:
         c6:c5:fd:4e:0e:d8:0a:94:7e:a0:be:cd:7c:be:5c:ca:cf:20:
         da:4d:b4:1c:0a:5f:fc:d8:74:a0:09:7f:50:55:f7:33:4d:b6:
         6f:e7:ef:44:a1:ae:cb:89:4c:74:77:b2:ce:43:b3:01:fa:92:
         bd:6d:0e:45:56:22:73:41:93:49:f0:dc:9c:f8:a8:55:4e:9e:
         75:a2:eb:7b:74:21:9f:02:fe:e0:e1:44:09:3d:d6:5d:17:13:
         30:e8:25:8f:b5:f9:00:07:f4:e5:a7:49:6f:37:01:18:b1:26:
         22:a3:6b:9e:88:47:a1:a9:52:06:b6:aa:8b:f5:05:dc:3f:16:
         8a:ac:02:e2:59:2e:02:d8:d7:d4:51:c5:94:a1:a3:ff:59:e8:
         9b:09:87:07:01:23:e7:00:34:d3:8f:bf:11:43:08:1b:ff:0a:
         85:35:e1:f7:92:bc:13:11:81:6e:2d:04:ee:77:64:7c:d7:d3:
         f7:d2:f8:ee:92:b5:aa:ce:a3:bc:2e:b6:9a:e8:99:74:13:29:
         3a:69:b2:42:e7:a7:85:55:f8:94:e6:96:32:49:68:2b:94:01:
         3b:dd:b6:26:fd:22:32:6d:bb:5d:81:cd:6a:d7:9a:de:0f:57:
         b1:d2:4a:14
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEAi5O5TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
MDJkMTFlODUyNjE1NzQwMDc2YjMyODFiOGFmZjBmYWM1Y2EyZjMzMB4XDTIyMDEw
MTAzNTkyOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTY5NDRiNjAxYWUz
OGQyODkyZGU1ODk5MmJhYjkxNjI3NmY5N2EwMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALdRxDCmgBV6yxY+fJceTAai6IqtNzUea+WtW/TA76hY2e1H
5Q2OcT7pM5g+3j5xP43YwEXMVU2lZVJUPrvN6vPBETMjdN3VmG0BGn6u4RwtFbae
HCEQQ+oVWAaVCsT7cr0vh0ZGVhR8Y/7TpN0lELNqKI7Kz9hqX0MeuznGMwBklJ6a
8M0lo/Ru98dApWkTWpa0HFRlxoQl4E16WpeiAIIzILqdKDFfUicNwWKXxA/LsSAL
vCdXunlU48J6xplwyItisbdLzYaCvGGRdUPo0nr7dMczzUkOvagArieeZdcsLFoK
kjZfz5s+Huzyp9MiqG/pnvamvSxJ3EiXWok39wsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBSWlEtgGuONKJLeWJkrq5Fidvl6AjAfBgNVHSMEGDAWgBQwLRHoUmFXQAdr
MoG4r/D6xcovMzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L01DMFI2RkpoVjBBSGF6S0J1S193LXNYS0x6TS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODIvYmQzODgwLWZjMjYtNDEyMS1iMmU0LWU2ZDZlOGFlYmVmOC8x
L2xwUkxZQnJqalNpUzNsaVpLNnVSWW5iNWVnSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIv
YmQzODgwLWZjMjYtNDEyMS1iMmU0LWU2ZDZlOGFlYmVmOC8xL01DMFI2RkpoVjBB
SGF6S0J1S193LXNYS0x6TS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEALm2GjAPBAIAAjAJAwcAKgrfgAAm
MA0GCSqGSIb3DQEBCwUAA4IBAQABbwavxZXfdg6JOZAW2CBKf47Gxf1ODtgKlH6g
vs18vlzKzyDaTbQcCl/82HSgCX9QVfczTbZv5+9Eoa7LiUx0d7LOQ7MB+pK9bQ5F
ViJzQZNJ8Nyc+KhVTp51out7dCGfAv7g4UQJPdZdFxMw6CWPtfkAB/Tlp0lvNwEY
sSYio2ueiEehqVIGtqqL9QXcPxaKrALiWS4C2NfUUcWUoaP/WeibCYcHASPnADTT
j78RQwgb/wqFNeH3krwTEYFuLQTud2R819P30vjukrWqzqO8Lraa6Jl0Eyk6abJC
56eFVfiU5pYySWgrlAE73bYm/SIybbtdgc1q15reD1ex0koU
-----END CERTIFICATE-----