Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/kYhdYDgi4PwvHxhnFrUaPSyaT_E.roa
File:                     kYhdYDgi4PwvHxhnFrUaPSyaT_E.roa (raw, json)
Hash identifier:          rGZcuuxkrFOp/vGjfRyfmwSaCbBf5oNTGqhbJDWtUfI=
Subject key identifier:   91:88:5D:60:38:22:E0:FC:2F:1F:18:67:16:B5:1A:3D:2C:9A:4F:F1
Certificate issuer:       /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial:       09098072
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/kYhdYDgi4PwvHxhnFrUaPSyaT_E.roa
Signing time:             Sat 01 Jan 2022 16:05:15 +0000
ROA not before:           Sat 01 Jan 2022 16:05:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     60795
IP address blocks:        185.80.32.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151617650 (0x9098072)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
        Validity
            Not Before: Jan  1 16:05:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=91885d603822e0fc2f1f186716b51a3d2c9a4ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:1a:99:84:e2:1f:a4:84:53:8b:2f:82:3e:
                    95:46:99:c0:4a:4a:0d:8f:e6:02:c7:67:38:5b:48:
                    f6:04:8c:36:99:e2:1a:af:60:c3:28:65:cc:08:af:
                    a7:6e:7e:3d:38:bb:64:e0:a5:b7:49:40:6e:8c:3a:
                    15:64:5e:47:3a:5f:62:1a:31:83:de:65:48:f9:eb:
                    d0:47:3a:9d:86:ba:74:7c:a0:1b:92:35:05:b0:7e:
                    14:dc:89:cb:70:61:b6:06:6d:5a:54:0b:5e:17:62:
                    0b:0b:33:17:d0:98:36:6a:2d:f6:57:be:a3:aa:a1:
                    65:8d:25:b4:76:05:14:69:01:d9:ce:0f:07:63:4e:
                    59:62:12:a5:a2:1d:57:86:00:55:b3:89:7e:8c:fb:
                    b3:03:50:62:f8:8c:f7:d9:18:cc:de:8b:c0:35:93:
                    1c:cd:28:bf:7b:93:04:f2:87:1b:22:22:85:01:a1:
                    e5:73:c1:f1:f2:c2:ba:b5:1a:4d:a2:da:96:38:c7:
                    1f:1d:ea:59:24:f2:9a:ed:fb:a1:d8:fa:85:89:b3:
                    4d:d5:53:39:d3:66:dd:87:8c:7c:21:c1:cb:65:ae:
                    39:2a:5e:33:b7:ba:73:8e:15:88:52:5f:cf:e8:18:
                    69:18:7a:8c:ba:e7:76:27:d5:9e:af:2e:79:67:b2:
                    f4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:88:5D:60:38:22:E0:FC:2F:1F:18:67:16:B5:1A:3D:2C:9A:4F:F1
            X509v3 Authority Key Identifier:
                keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/kYhdYDgi4PwvHxhnFrUaPSyaT_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:15:12:d2:21:d3:5a:3f:8a:7b:b4:69:0d:b8:71:4c:9e:
         3d:57:c6:4c:a8:38:13:8d:07:4f:90:07:fc:dd:50:12:22:40:
         44:de:48:dd:d6:26:a6:a2:c2:a8:4c:6e:20:7a:56:12:88:e1:
         01:41:82:7d:52:59:d9:a3:4d:78:2b:7a:89:aa:5f:ec:8f:c9:
         bb:52:5c:b4:38:59:30:4c:5f:a4:2e:76:ce:b2:05:6c:a3:2e:
         17:bb:3b:65:12:0f:5d:97:d3:23:72:9d:86:d0:54:80:9f:15:
         f0:4c:d3:99:9a:1c:6d:f5:19:f5:f8:2e:37:42:5e:a0:e4:12:
         39:fc:42:17:2d:5b:c4:10:29:9b:19:f0:89:bd:a8:fc:97:36:
         fc:2e:41:dc:6d:14:e6:7e:78:39:36:ac:f6:1b:70:ac:17:9b:
         58:68:b3:46:4e:28:43:a6:fe:be:ca:9b:51:39:6f:f4:13:1a:
         e9:1b:1b:9f:b4:e6:63:5c:73:17:d1:70:dc:db:bf:2a:1b:06:
         4a:1a:e9:31:9f:f2:98:9e:36:c6:14:8d:e9:aa:cd:4c:2d:61:
         09:94:7f:10:60:6a:65:9a:b7:85:09:2d:5e:22:ed:47:1a:1f:
         dc:20:bc:61:4e:42:d8:1e:8d:f5:92:ce:2b:04:16:ca:38:98:
         23:91:ac:98
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECQmAcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
YzY1ZDMxNDQwYmY3NWQyNWM2MDZmNzkxNWMyMzZjYTYxNDQ2NGEyMB4XDTIyMDEw
MTE2MDUxNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTE4ODVkNjAzODIy
ZTBmYzJmMWYxODY3MTZiNTFhM2QyYzlhNGZmMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJsLGpmE4h+khFOLL4I+lUaZwEpKDY/mAsdnOFtI9gSMNpni
Gq9gwyhlzAivp25+PTi7ZOClt0lAbow6FWReRzpfYhoxg95lSPnr0Ec6nYa6dHyg
G5I1BbB+FNyJy3BhtgZtWlQLXhdiCwszF9CYNmot9le+o6qhZY0ltHYFFGkB2c4P
B2NOWWISpaIdV4YAVbOJfoz7swNQYviM99kYzN6LwDWTHM0ov3uTBPKHGyIihQGh
5XPB8fLCurUaTaLaljjHHx3qWSTymu37odj6hYmzTdVTOdNm3YeMfCHBy2WuOSpe
M7e6c44ViFJfz+gYaRh6jLrndifVnq8ueWey9LMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSRiF1gOCLg/C8fGGcWtRo9LJpP8TAfBgNVHSMEGDAWgBTsZdMUQL910lxg
b3kVwjbKYURkojAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzdHWFRGRUNfZGRKY1lHOTVGY0kyeW1GRVpLSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODMvMmE2ZGY1LTgyMzYtNDEyZC1hZDc5LWUyOTU4OWU4OTY0YS8x
L2tZaGRZRGdpNFB3dkh4aG5GclVhUFN5YVRfRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMv
MmE2ZGY1LTgyMzYtNDEyZC1hZDc5LWUyOTU4OWU4OTY0YS8xLzdHWFRGRUNfZGRK
Y1lHOTVGY0kyeW1GRVpLSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlQIDANBgkqhkiG9w0BAQsFAAOC
AQEAVBoVEtIh01o/inu0aQ24cUyePVfGTKg4E40HT5AH/N1QEiJARN5I3dYmpqLC
qExuIHpWEojhAUGCfVJZ2aNNeCt6iapf7I/Ju1JctDhZMExfpC52zrIFbKMuF7s7
ZRIPXZfTI3KdhtBUgJ8V8EzTmZocbfUZ9fguN0JeoOQSOfxCFy1bxBApmxnwib2o
/Jc2/C5B3G0U5n54OTas9htwrBebWGizRk4oQ6b+vsqbUTlv9BMa6Rsbn7TmY1xz
F9Fw3Nu/KhsGShrpMZ/ymJ42xhSN6arNTC1hCZR/EGBqZZq3hQktXiLtRxof3CC8
YU5C2B6N9ZLOKwQWyjiYI5GsmA==
-----END CERTIFICATE-----