Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/V6NKUMvcns83cpfpk00EvhTldpg.roa
File:                     V6NKUMvcns83cpfpk00EvhTldpg.roa (raw, json)
Hash identifier:          wQd1X6oJshzqfBM+RJkWLfZNGFtRZOnwVnSyrJtufgI=
Subject key identifier:   57:A3:4A:50:CB:DC:9E:CF:37:72:97:E9:93:4D:04:BE:14:E5:76:98
Certificate issuer:       /CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
Certificate serial:       05331158
Authority key identifier: 62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/V6NKUMvcns83cpfpk00EvhTldpg.roa
Signing time:             Sat 01 Jan 2022 11:00:16 +0000
ROA not before:           Sat 01 Jan 2022 11:00:16 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     202516
IP address blocks:        193.58.164.0/22 maxlen: 22
                          2a0c:9540::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87232856 (0x5331158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=625a9f69fe0797e083b516281cab3f0ba65e2ea8
        Validity
            Not Before: Jan  1 11:00:16 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=57a34a50cbdc9ecf377297e9934d04be14e57698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:a9:1c:4a:21:01:64:20:e0:00:1e:2e:46:
                    61:fe:76:da:e1:ca:2c:c5:11:af:f8:72:16:98:fc:
                    4b:52:0a:23:4c:3f:a5:f4:46:9f:56:76:99:47:17:
                    64:5d:46:9f:7c:ba:8b:c3:6f:85:e2:7e:c9:01:03:
                    2a:62:6d:5b:dc:35:dd:e6:ae:49:fa:42:92:be:41:
                    24:65:29:dd:7c:14:d5:cf:6a:79:07:dd:1f:9e:30:
                    3d:bf:bc:db:83:83:8f:78:61:84:8f:db:e5:67:10:
                    d7:bb:d6:53:6c:51:e8:59:bb:92:f8:5b:fc:3c:10:
                    37:ad:5f:dc:f5:49:53:35:f0:45:e0:ed:d9:07:4a:
                    97:ff:a3:39:bf:34:0c:f9:5c:66:0d:25:42:ce:d7:
                    9d:da:02:41:0f:fb:44:09:45:91:cc:cb:94:e6:b5:
                    4b:98:d3:eb:2c:e6:bf:7c:43:33:2f:84:36:70:47:
                    db:b8:9e:c2:b9:00:1f:83:1d:c2:cd:f7:42:5b:f4:
                    c2:2d:d9:6d:fb:db:6a:ea:0c:e8:33:0b:e5:39:42:
                    9d:6f:56:7e:92:ea:e3:f4:42:da:12:91:c1:87:4e:
                    ea:e1:dc:e0:ed:d8:a8:63:60:68:a0:f4:38:1e:3a:
                    9a:d0:66:2e:bb:04:ca:0b:8c:a3:6e:7b:6b:4e:08:
                    4d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A3:4A:50:CB:DC:9E:CF:37:72:97:E9:93:4D:04:BE:14:E5:76:98
            X509v3 Authority Key Identifier:
                keyid:62:5A:9F:69:FE:07:97:E0:83:B5:16:28:1C:AB:3F:0B:A6:5E:2E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/V6NKUMvcns83cpfpk00EvhTldpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/63b6ae-d4f5-4946-bbf5-b133e6e6fa85/1/Ylqfaf4Hl-CDtRYoHKs_C6ZeLqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.58.164.0/22
                IPv6:
                  2a0c:9540::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:a9:23:1b:a0:52:33:f7:0f:6c:38:78:e9:71:c0:c8:99:6d:
         d4:78:5f:42:57:12:1e:0d:ac:6f:9a:74:4b:33:dd:fd:d8:b4:
         74:03:f8:f1:1e:6e:c7:99:6c:6d:66:9e:df:e5:56:ae:04:dc:
         ad:a3:77:99:44:dd:f6:08:45:90:01:3c:4a:9f:22:83:90:48:
         2e:96:e3:5d:85:a7:79:24:91:d8:af:95:81:5d:47:9d:2a:23:
         fe:18:d6:f5:03:fa:ac:f5:66:ce:21:77:e1:71:72:70:0c:e8:
         d9:e2:55:76:b5:f3:a5:0f:77:5d:b7:e9:7c:2d:7c:79:5e:8b:
         73:ff:a6:25:8d:9f:ff:3c:78:fd:64:48:c3:34:64:88:8d:47:
         38:6a:76:10:ff:d4:95:a7:e5:96:7c:4f:b0:cd:3e:7c:02:e9:
         7a:91:f7:90:a0:59:18:df:06:a9:0a:00:a8:32:01:1b:e8:29:
         40:f9:0e:31:7d:20:aa:c6:55:22:fe:2a:67:a8:21:28:79:a3:
         4d:ca:1e:0a:2f:44:ee:2e:36:20:9c:cb:4f:a7:35:ae:df:ee:
         ce:cf:48:a6:62:15:7b:8a:62:13:48:66:e3:b5:fb:7c:ac:36:
         99:3f:4c:ee:db:50:49:6c:d9:cb:6a:c3:d7:fc:bf:49:5c:d7:
         93:04:a4:ac
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBTMRWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MjVhOWY2OWZlMDc5N2UwODNiNTE2MjgxY2FiM2YwYmE2NWUyZWE4MB4XDTIyMDEw
MTExMDAxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTdhMzRhNTBjYmRj
OWVjZjM3NzI5N2U5OTM0ZDA0YmUxNGU1NzY5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKc7qRxKIQFkIOAAHi5GYf522uHKLMURr/hyFpj8S1IKI0w/
pfRGn1Z2mUcXZF1Gn3y6i8NvheJ+yQEDKmJtW9w13eauSfpCkr5BJGUp3XwU1c9q
eQfdH54wPb+824ODj3hhhI/b5WcQ17vWU2xR6Fm7kvhb/DwQN61f3PVJUzXwReDt
2QdKl/+jOb80DPlcZg0lQs7XndoCQQ/7RAlFkczLlOa1S5jT6yzmv3xDMy+ENnBH
27iewrkAH4Mdws33Qlv0wi3ZbfvbauoM6DML5TlCnW9WfpLq4/RC2hKRwYdO6uHc
4O3YqGNgaKD0OB46mtBmLrsEyguMo257a04ITc0CAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRXo0pQy9yezzdyl+mTTQS+FOV2mDAfBgNVHSMEGDAWgBRiWp9p/geX4IO1
Figcqz8Lpl4uqDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lscWZhZjRIbC1DRHRSWW9IS3NfQzZaZUxxZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZTgvNjNiNmFlLWQ0ZjUtNDk0Ni1iYmY1LWIxMzNlNmU2ZmE4NS8x
L1Y2TktVTXZjbnM4M2NwZnBrMDBFdmhUbGRwZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTgv
NjNiNmFlLWQ0ZjUtNDk0Ni1iYmY1LWIxMzNlNmU2ZmE4NS8xL1lscWZhZjRIbC1D
RHRSWW9IS3NfQzZaZUxxZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsE6pDANBAIAAjAHAwUAKgyVQDAN
BgkqhkiG9w0BAQsFAAOCAQEAT6kjG6BSM/cPbDh46XHAyJlt1HhfQlcSHg2sb5p0
SzPd/di0dAP48R5ux5lsbWae3+VWrgTcraN3mUTd9ghFkAE8Sp8ig5BILpbjXYWn
eSSR2K+VgV1HnSoj/hjW9QP6rPVmziF34XFycAzo2eJVdrXzpQ93XbfpfC18eV6L
c/+mJY2f/zx4/WRIwzRkiI1HOGp2EP/UlafllnxPsM0+fALpepH3kKBZGN8GqQoA
qDIBG+gpQPkOMX0gqsZVIv4qZ6ghKHmjTcoeCi9E7i42IJzLT6c1rt/uzs9IpmIV
e4piE0hm47X7fKw2mT9M7ttQSWzZy2rD1/y/SVzXkwSkrA==
-----END CERTIFICATE-----