Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/e6LoZq1FSfZFhXzso-JSqp6EFE8.roa
File:                     e6LoZq1FSfZFhXzso-JSqp6EFE8.roa (raw, json)
Hash identifier:          GQDCKaMFW3IowuUMaC9zchkoLBphEWH755fOoxYDz1Y=
Subject key identifier:   7B:A2:E8:66:AD:45:49:F6:45:85:7C:EC:A3:E2:52:AA:9E:84:14:4F
Certificate issuer:       /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial:       37F5235A
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/e6LoZq1FSfZFhXzso-JSqp6EFE8.roa
Signing time:             Sat 01 Jan 2022 09:01:15 +0000
ROA not before:           Sat 01 Jan 2022 09:01:15 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     51760
IP address blocks:        93.191.88.0/21 maxlen: 21
                          93.191.88.0/24 maxlen: 24
                          93.191.89.0/24 maxlen: 24
                          2a02:2820::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 938812250 (0x37f5235a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
        Validity
            Not Before: Jan  1 09:01:15 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7ba2e866ad4549f645857ceca3e252aa9e84144f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:f0:2b:2a:e5:3d:6c:29:a6:53:f0:6e:8f:
                    06:a5:6b:00:15:e7:82:9f:d2:90:2c:ff:87:76:1c:
                    23:b1:b4:b3:69:82:13:74:39:40:59:54:04:78:2e:
                    e3:ae:12:a5:62:50:ce:7a:6d:fb:e9:6f:31:cb:b5:
                    c2:b1:6e:f6:8c:f5:d3:56:2c:1f:10:09:ef:00:98:
                    f6:3c:71:0a:08:74:63:81:33:5c:d5:46:46:ee:a9:
                    42:42:b7:bf:41:a9:bb:8f:31:d3:87:2f:ea:34:20:
                    59:ee:02:61:af:d6:39:4b:f1:6e:57:14:0f:82:14:
                    43:af:90:10:28:b4:e1:de:fd:35:12:85:57:9e:e6:
                    d2:cb:e5:05:93:78:2d:d9:0a:49:83:6f:e3:33:8b:
                    74:1e:d6:4c:1d:2d:b0:ab:48:b3:5a:1c:68:34:69:
                    f6:9a:db:0f:d7:ff:44:68:03:e3:cf:13:74:b8:26:
                    09:9d:ed:05:41:0a:62:0f:bb:7f:84:5d:ad:c0:0f:
                    44:ee:37:84:a4:57:09:0e:8d:1c:a1:6b:0e:3f:b7:
                    13:4f:89:74:68:35:52:27:8e:c1:df:8f:20:41:3f:
                    1e:7c:70:aa:a0:35:fa:1d:0a:31:8b:bf:d1:45:5f:
                    92:13:1e:2a:be:95:85:8f:e1:1a:a8:2b:24:3c:88:
                    92:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A2:E8:66:AD:45:49:F6:45:85:7C:EC:A3:E2:52:AA:9E:84:14:4F
            X509v3 Authority Key Identifier:
                keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/e6LoZq1FSfZFhXzso-JSqp6EFE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.191.88.0/21
                IPv6:
                  2a02:2820::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:75:f6:c1:5b:dd:85:61:bd:e4:d9:7e:6e:72:da:7b:d7:51:
         ea:26:bc:10:a3:04:91:34:b3:b1:02:35:df:d7:ed:61:68:70:
         89:c6:4c:ca:4c:f7:f4:0a:58:ba:4c:69:ba:32:11:af:ee:46:
         cf:52:18:bd:6d:b7:2f:ea:7d:eb:a8:3f:76:1a:a0:9c:9f:10:
         ce:88:55:ba:ca:e0:16:73:21:14:96:83:d2:e3:e4:60:39:cd:
         c2:62:31:c5:92:bd:35:09:c5:43:49:70:11:15:14:ae:3a:ad:
         55:42:27:32:0a:3a:40:1c:01:90:88:ed:05:35:22:ea:86:7d:
         b5:25:49:87:8a:ea:df:a8:37:33:73:0a:73:42:1a:db:3a:b6:
         3f:d9:bb:95:2d:33:cc:02:36:1b:81:77:8b:c5:34:79:0c:ce:
         24:26:82:0f:83:34:88:7f:fe:68:77:e4:9d:aa:ac:2a:56:bf:
         17:be:5b:2b:00:67:36:a9:98:a7:56:14:3a:28:86:91:f1:ee:
         3d:40:39:9f:5c:ee:31:e0:31:9d:4a:d5:c9:19:1a:61:01:9c:
         f6:87:5d:4b:2c:69:4a:c0:6c:a8:5f:8d:9a:c9:d2:20:81:2b:
         3f:c5:ed:06:45:b7:44:49:30:f6:6a:60:61:36:21:9f:d2:d4:
         ae:2d:39:65
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEN/UjWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
MGY2Y2QzMGI0Y2ZhMTkzZTIyNmJiYTkyODJlMzY2YTIyYTMxMTBmMB4XDTIyMDEw
MTA5MDExNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2JhMmU4NjZhZDQ1
NDlmNjQ1ODU3Y2VjYTNlMjUyYWE5ZTg0MTQ0ZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM4n8Csq5T1sKaZT8G6PBqVrABXngp/SkCz/h3YcI7G0s2mC
E3Q5QFlUBHgu464SpWJQznpt++lvMcu1wrFu9oz101YsHxAJ7wCY9jxxCgh0Y4Ez
XNVGRu6pQkK3v0Gpu48x04cv6jQgWe4CYa/WOUvxblcUD4IUQ6+QECi04d79NRKF
V57m0svlBZN4LdkKSYNv4zOLdB7WTB0tsKtIs1ocaDRp9prbD9f/RGgD488TdLgm
CZ3tBUEKYg+7f4RdrcAPRO43hKRXCQ6NHKFrDj+3E0+JdGg1UieOwd+PIEE/Hnxw
qqA1+h0KMYu/0UVfkhMeKr6VhY/hGqgrJDyIkkcCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBR7ouhmrUVJ9kWFfOyj4lKqnoQUTzAfBgNVHSMEGDAWgBTQ9s0wtM+hk+Im
u6koLjZqIqMRDzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzBQYk5NTFRQb1pQaUpydXBLQzQyYWlLakVROC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDcvMmY2OWRmLTZmMjMtNGFhNy04OGY0LWUyOTllOTEwMDM5ZS8x
L2U2TG9acTFGU2ZaRmhYenNvLUpTcXA2RUZFOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDcv
MmY2OWRmLTZmMjMtNGFhNy04OGY0LWUyOTllOTEwMDM5ZS8xLzBQYk5NTFRQb1pQ
aUpydXBLQzQyYWlLakVROC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEA12/WDANBAIAAjAHAwUAKgIoIDAN
BgkqhkiG9w0BAQsFAAOCAQEAbHX2wVvdhWG95Nl+bnLae9dR6ia8EKMEkTSzsQI1
39ftYWhwicZMykz39ApYukxpujIRr+5Gz1IYvW23L+p966g/dhqgnJ8QzohVusrg
FnMhFJaD0uPkYDnNwmIxxZK9NQnFQ0lwERUUrjqtVUInMgo6QBwBkIjtBTUi6oZ9
tSVJh4rq36g3M3MKc0Ia2zq2P9m7lS0zzAI2G4F3i8U0eQzOJCaCD4M0iH/+aHfk
naqsKla/F75bKwBnNqmYp1YUOiiGkfHuPUA5n1zuMeAxnUrVyRkaYQGc9oddSyxp
SsBsqF+NmsnSIIErP8XtBkW3REkw9mpgYTYhn9LUri05ZQ==
-----END CERTIFICATE-----