Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/fVtdMXiq2YOKJ2cCC7JBQ8xLqjk.roa
File:                     fVtdMXiq2YOKJ2cCC7JBQ8xLqjk.roa (raw, json)
Hash identifier:          OasjcuBi4IRnCWa23rBwFLnzVTX6CI0aFO2b3X8ftl0=
Subject key identifier:   7D:5B:5D:31:78:AA:D9:83:8A:27:67:02:0B:B2:41:43:CC:4B:AA:39
Certificate issuer:       /CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
Certificate serial:       06608839
Authority key identifier: 1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/fVtdMXiq2YOKJ2cCC7JBQ8xLqjk.roa
Signing time:             Tue 22 Mar 2022 15:55:14 +0000
ROA not before:           Tue 22 Mar 2022 15:55:14 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     207365
IP address blocks:        185.73.225.0/24 maxlen: 24
                          2a10:1080::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106989625 (0x6608839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dda2f7e26cb7d7a56ac6405e90c6a61a92ad2d1
        Validity
            Not Before: Mar 22 15:55:14 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d5b5d3178aad9838a2767020bb24143cc4baa39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:07:b8:67:84:88:7d:36:99:c1:ac:70:37:
                    f7:f4:7f:4a:77:fc:e4:0e:bf:50:e5:1f:b0:b8:d7:
                    00:c1:2b:09:a8:98:53:f2:a5:b9:2a:45:cf:d4:72:
                    9f:a4:a0:3d:e8:26:f3:50:ce:6e:14:db:1e:d5:fe:
                    cf:bb:0a:8b:0d:48:22:aa:8f:b8:86:55:7d:15:0d:
                    b4:da:f5:b8:16:06:d7:6e:a5:0d:34:3f:e3:41:c6:
                    96:3e:78:29:30:36:82:b8:e6:1d:73:fb:0e:52:32:
                    7c:62:36:d4:ce:45:cd:4b:fa:01:cf:14:85:58:4d:
                    6f:55:97:bd:24:e5:da:d3:63:c1:b2:bf:21:e1:75:
                    9f:76:57:41:fa:e8:36:9a:49:fe:68:10:fc:94:ce:
                    3e:8a:34:cd:7f:dc:5e:08:65:4d:ec:62:d1:4a:94:
                    77:1e:b7:6d:1f:94:f3:e6:4c:38:d2:38:71:97:6c:
                    33:b2:a5:4e:7c:2b:76:24:5b:19:ea:c4:e5:73:5a:
                    b2:73:3f:e1:b1:d5:bc:b2:20:d8:96:39:27:3c:d4:
                    cd:5a:fc:48:b9:79:d0:c8:bf:31:69:10:50:d0:ec:
                    21:37:44:7e:dd:50:6b:ce:2a:70:45:33:18:61:47:
                    13:cc:d1:05:4c:b4:90:3f:2c:81:a7:d0:07:67:f0:
                    55:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5B:5D:31:78:AA:D9:83:8A:27:67:02:0B:B2:41:43:CC:4B:AA:39
            X509v3 Authority Key Identifier:
                keyid:1D:DA:2F:7E:26:CB:7D:7A:56:AC:64:05:E9:0C:6A:61:A9:2A:D2:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdovfibLfXpWrGQF6QxqYakq0tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/fVtdMXiq2YOKJ2cCC7JBQ8xLqjk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/28b15f-e7e8-4da4-bfc7-7480b5a0d973/1/HdovfibLfXpWrGQF6QxqYakq0tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.73.225.0/24
                IPv6:
                  2a10:1080::/29

    Signature Algorithm: sha256WithRSAEncryption
         50:3f:f3:9d:31:41:9b:b5:41:9a:89:79:b5:de:4f:8f:18:e6:
         34:c9:13:53:17:3f:e0:b4:3e:b7:9a:b3:45:d9:a4:a3:d1:54:
         a1:1e:05:52:7e:aa:1d:70:56:3d:25:58:4a:0f:cf:df:d6:de:
         c6:8f:2f:47:07:15:94:57:48:52:54:af:f1:c4:38:23:a5:f1:
         7d:50:d2:9f:6e:a8:34:50:fb:41:e2:86:ba:96:7b:6d:83:5f:
         c8:a8:96:72:c8:cf:16:fe:a5:b2:ce:78:f0:3d:e8:1e:ca:46:
         b0:03:c2:90:1e:0f:e5:c4:e6:6b:70:42:ed:af:96:ce:bc:86:
         8f:92:49:27:1e:d2:32:e7:92:6c:d8:f5:9e:7d:58:87:92:19:
         84:be:e1:96:a6:5c:6a:50:75:a9:b9:db:e8:ca:5d:45:14:fc:
         bb:9b:5f:66:8c:f1:43:da:b1:18:3f:8c:89:72:9b:53:2f:cf:
         c3:0d:ee:a8:6e:60:be:a8:32:f1:6a:46:23:23:30:3e:b5:1e:
         13:fa:08:d7:db:9f:dc:8e:76:b6:59:7e:9d:0a:3a:65:1d:a2:
         91:03:b1:8b:ad:c7:9e:3b:bc:eb:96:27:ed:87:5a:1c:ae:25:
         43:6d:f0:8c:2c:df:ad:96:37:8f:9f:62:5a:bc:bd:30:23:12:
         49:85:54:a0
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBmCIOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
ZGRhMmY3ZTI2Y2I3ZDdhNTZhYzY0MDVlOTBjNmE2MWE5MmFkMmQxMB4XDTIyMDMy
MjE1NTUxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2Q1YjVkMzE3OGFh
ZDk4MzhhMjc2NzAyMGJiMjQxNDNjYzRiYWEzOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMHFB7hnhIh9NpnBrHA39/R/Snf85A6/UOUfsLjXAMErCaiY
U/KluSpFz9Ryn6SgPegm81DObhTbHtX+z7sKiw1IIqqPuIZVfRUNtNr1uBYG126l
DTQ/40HGlj54KTA2grjmHXP7DlIyfGI21M5FzUv6Ac8UhVhNb1WXvSTl2tNjwbK/
IeF1n3ZXQfroNppJ/mgQ/JTOPoo0zX/cXghlTexi0UqUdx63bR+U8+ZMONI4cZds
M7KlTnwrdiRbGerE5XNasnM/4bHVvLIg2JY5JzzUzVr8SLl50Mi/MWkQUNDsITdE
ft1Qa84qcEUzGGFHE8zRBUy0kD8sgafQB2fwVaUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBR9W10xeKrZg4onZwILskFDzEuqOTAfBgNVHSMEGDAWgBQd2i9+Jst9elas
ZAXpDGphqSrS0TAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hkb3ZmaWJMZlhwV3JHUUY2UXhxWWFrcTB0RS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvMjhiMTVmLWU3ZTgtNGRhNC1iZmM3LTc0ODBiNWEwZDk3My8x
L2ZWdGRNWGlxMllPS0oyY0NDN0pCUTh4THFqay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
MjhiMTVmLWU3ZTgtNGRhNC1iZmM3LTc0ODBiNWEwZDk3My8xL0hkb3ZmaWJMZlhw
V3JHUUY2UXhxWWFrcTB0RS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEALlJ4TANBAIAAjAHAwUDKhAQgDAN
BgkqhkiG9w0BAQsFAAOCAQEAUD/znTFBm7VBmol5td5PjxjmNMkTUxc/4LQ+t5qz
Rdmko9FUoR4FUn6qHXBWPSVYSg/P39bexo8vRwcVlFdIUlSv8cQ4I6XxfVDSn26o
NFD7QeKGupZ7bYNfyKiWcsjPFv6lss548D3oHspGsAPCkB4P5cTma3BC7a+WzryG
j5JJJx7SMueSbNj1nn1Yh5IZhL7hlqZcalB1qbnb6MpdRRT8u5tfZozxQ9qxGD+M
iXKbUy/Pww3uqG5gvqgy8WpGIyMwPrUeE/oI19uf3I52tll+nQo6ZR2ikQOxi63H
nju865Yn7YdaHK4lQ23wjCzfrZY3j59iWry9MCMSSYVUoA==
-----END CERTIFICATE-----