Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/fQHyooqGUzVAacsvvbm9j_bNrcE.roa
File:                     fQHyooqGUzVAacsvvbm9j_bNrcE.roa (raw, json)
Hash identifier:          +qIGR/KxuKpPJMVqq2rhvCwcRmT7C71mEW3TDIG2n9U=
Subject key identifier:   7D:01:F2:A2:8A:86:53:35:40:69:CB:2F:BD:B9:BD:8F:F6:CD:AD:C1
Certificate issuer:       /CN=965473d68572ea2238bdd875afa725a0405de483
Certificate serial:       081E296F
Authority key identifier: 96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/fQHyooqGUzVAacsvvbm9j_bNrcE.roa
Signing time:             Sat 01 Jan 2022 08:59:52 +0000
ROA not before:           Sat 01 Jan 2022 08:59:52 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     55222
IP address blocks:        185.80.124.0/22 maxlen: 24
                          2a05:7c40::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136194415 (0x81e296f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965473d68572ea2238bdd875afa725a0405de483
        Validity
            Not Before: Jan  1 08:59:52 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7d01f2a28a8653354069cb2fbdb9bd8ff6cdadc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:06:56:98:01:00:fa:82:4d:50:74:46:7a:d5:
                    a6:be:f0:f3:9e:7d:36:fa:ec:6c:ce:33:4e:7a:0c:
                    de:00:15:ac:e9:89:9f:e9:4c:d4:7f:9c:d4:a3:ad:
                    89:67:d3:61:03:1b:fc:af:f6:02:cf:87:8f:a1:0c:
                    f1:f8:93:9f:db:a9:84:37:91:1d:92:ab:b7:a6:ed:
                    33:bc:fd:ff:c2:91:c5:46:e5:45:46:49:8d:50:d2:
                    d4:fd:40:47:ba:34:76:40:bb:88:20:9d:55:60:73:
                    47:50:86:2d:e4:ec:f6:e2:07:5b:e2:32:9c:03:b2:
                    df:f2:cf:58:aa:fb:86:d6:04:66:65:89:9e:5c:f2:
                    db:55:0f:c9:4e:7d:ec:6d:0e:06:80:df:eb:16:22:
                    82:e8:99:61:7e:dc:97:d1:07:a8:50:de:da:fc:54:
                    21:68:ad:7d:df:20:ad:60:8e:1c:51:28:dc:94:03:
                    b9:19:e3:31:61:94:c4:0a:a5:8e:e1:b1:fa:e9:8b:
                    38:7d:95:7c:9f:d5:36:49:dc:cd:3b:3c:c6:8e:ed:
                    14:4f:3a:2a:c1:e3:5e:d1:1e:c3:09:75:14:57:bc:
                    18:23:ff:8e:41:b6:15:85:ff:3a:f1:a9:43:9f:b0:
                    67:c7:bb:50:2b:73:13:b8:fe:6f:9d:ec:c0:ae:b7:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:01:F2:A2:8A:86:53:35:40:69:CB:2F:BD:B9:BD:8F:F6:CD:AD:C1
            X509v3 Authority Key Identifier:
                keyid:96:54:73:D6:85:72:EA:22:38:BD:D8:75:AF:A7:25:A0:40:5D:E4:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/llRz1oVy6iI4vdh1r6cloEBd5IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/fQHyooqGUzVAacsvvbm9j_bNrcE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3f9b22-c1e3-4de9-b69c-45f829c6dd11/1/llRz1oVy6iI4vdh1r6cloEBd5IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.124.0/22
                IPv6:
                  2a05:7c40::/29

    Signature Algorithm: sha256WithRSAEncryption
         33:cd:e9:ec:22:98:fc:1b:03:43:a4:89:6d:13:12:81:da:71:
         e7:89:6b:c6:ee:7e:93:d3:c0:96:91:19:35:ae:bf:17:67:84:
         38:84:3d:74:14:24:cf:e1:24:ce:5e:fe:89:78:83:0f:3e:d6:
         17:09:2e:00:49:81:f9:6e:af:41:7c:ad:41:3c:51:2b:90:01:
         ff:9a:df:0a:e7:31:e5:d6:e4:89:b1:0d:ac:1a:3f:db:69:9e:
         87:c5:f3:23:0c:a1:27:7e:15:50:14:fe:60:51:82:90:b9:e7:
         7b:89:4b:49:28:fc:bc:6e:ad:df:15:fd:e1:b2:df:b2:6a:e3:
         91:c6:de:88:2d:04:3c:04:2d:dc:00:0d:90:27:e6:f6:77:fb:
         19:69:1e:3b:55:51:77:ae:28:37:0d:76:7d:51:c0:90:5e:75:
         f5:7f:80:b6:81:89:a5:d6:4a:4e:a7:44:d6:48:1f:95:ae:c0:
         2d:4f:3d:fe:09:6f:64:7c:d0:20:42:bd:20:72:52:9b:ba:c5:
         c6:c6:bc:92:25:e9:29:aa:ec:ee:60:cf:29:a1:24:eb:12:58:
         12:d5:be:22:88:c4:95:2d:c4:5d:aa:55:fc:2b:34:e1:ee:36:
         9b:15:64:ff:be:b4:a7:b2:c6:89:0d:9c:ef:27:21:92:bc:d5:
         74:bf:e3:34
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECB4pbzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NjU0NzNkNjg1NzJlYTIyMzhiZGQ4NzVhZmE3MjVhMDQwNWRlNDgzMB4XDTIyMDEw
MTA4NTk1MloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2QwMWYyYTI4YTg2
NTMzNTQwNjljYjJmYmRiOWJkOGZmNmNkYWRjMTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI0GVpgBAPqCTVB0RnrVpr7w8559NvrsbM4zTnoM3gAVrOmJ
n+lM1H+c1KOtiWfTYQMb/K/2As+Hj6EM8fiTn9uphDeRHZKrt6btM7z9/8KRxUbl
RUZJjVDS1P1AR7o0dkC7iCCdVWBzR1CGLeTs9uIHW+IynAOy3/LPWKr7htYEZmWJ
nlzy21UPyU597G0OBoDf6xYiguiZYX7cl9EHqFDe2vxUIWitfd8grWCOHFEo3JQD
uRnjMWGUxAqljuGx+umLOH2VfJ/VNknczTs8xo7tFE86KsHjXtEewwl1FFe8GCP/
jkG2FYX/OvGpQ5+wZ8e7UCtzE7j+b53swK63SY8CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBR9AfKiioZTNUBpyy+9ub2P9s2twTAfBgNVHSMEGDAWgBSWVHPWhXLqIji9
2HWvpyWgQF3kgzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xsUnoxb1Z5NmlJNHZkaDFyNmNsb0VCZDVJTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzEvM2Y5YjIyLWMxZTMtNGRlOS1iNjljLTQ1ZjgyOWM2ZGQxMS8x
L2ZRSHlvb3FHVXpWQWFjc3Z2Ym05al9iTnJjRS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzEv
M2Y5YjIyLWMxZTMtNGRlOS1iNjljLTQ1ZjgyOWM2ZGQxMS8xL2xsUnoxb1Z5NmlJ
NHZkaDFyNmNsb0VCZDVJTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArlQfDANBAIAAjAHAwUDKgV8QDAN
BgkqhkiG9w0BAQsFAAOCAQEAM83p7CKY/BsDQ6SJbRMSgdpx54lrxu5+k9PAlpEZ
Na6/F2eEOIQ9dBQkz+Ekzl7+iXiDDz7WFwkuAEmB+W6vQXytQTxRK5AB/5rfCucx
5dbkibENrBo/22meh8XzIwyhJ34VUBT+YFGCkLnne4lLSSj8vG6t3xX94bLfsmrj
kcbeiC0EPAQt3AANkCfm9nf7GWkeO1VRd64oNw12fVHAkF519X+AtoGJpdZKTqdE
1kgfla7ALU89/glvZHzQIEK9IHJSm7rFxsa8kiXpKars7mDPKaEk6xJYEtW+IojE
lS3EXapV/Cs04e42mxVk/760p7LGiQ2c7ychkrzVdL/jNA==
-----END CERTIFICATE-----