Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/3jVje4VjRj_0H35i1Hj2KO1wZw4.roa
File:                     3jVje4VjRj_0H35i1Hj2KO1wZw4.roa (raw, json)
Hash identifier:          0gKH42zFjWBGVueuX2KajLu98iWEFWYxxyj/HddP9aQ=
Subject key identifier:   DE:35:63:7B:85:63:46:3F:F4:1F:7E:62:D4:78:F6:28:ED:70:67:0E
Certificate issuer:       /CN=07ac64191435789995bc5a67f5b51d9685002815
Certificate serial:       11CB1494
Authority key identifier: 07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/3jVje4VjRj_0H35i1Hj2KO1wZw4.roa
Signing time:             Sat 01 Jan 2022 15:55:57 +0000
ROA not before:           Sat 01 Jan 2022 15:55:57 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     34049
IP address blocks:        185.137.124.0/22 maxlen: 22
                          2a07:3c0::/29 maxlen: 29

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298521748 (0x11cb1494)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ac64191435789995bc5a67f5b51d9685002815
        Validity
            Not Before: Jan  1 15:55:57 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=de35637b8563463ff41f7e62d478f628ed70670e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:7f:6e:b1:65:ec:02:dc:98:8b:d8:67:e9:
                    60:8b:d6:6b:dc:18:e5:05:92:0c:7b:f6:22:88:dc:
                    9f:78:ea:73:e9:2d:c1:78:51:fe:b8:36:c6:01:08:
                    fa:c1:b3:3c:4a:85:a6:03:53:85:ed:c5:f5:90:d3:
                    d7:7d:e3:6d:87:32:6f:c9:46:35:fd:ec:95:9b:e1:
                    3f:e2:da:cb:89:b4:38:b2:98:c8:a3:10:a5:ed:21:
                    c1:2b:8b:a8:72:d9:de:a9:58:d6:08:e8:7b:e8:e9:
                    94:72:c4:b3:b8:b1:18:98:7b:28:df:7d:70:7a:0e:
                    b2:82:89:ba:68:c1:dd:3b:68:10:14:b2:f9:a7:2e:
                    fc:5b:c7:9b:93:04:f3:5f:e0:69:13:96:f4:4b:6e:
                    9d:1e:ec:5f:28:74:66:e9:15:50:79:3a:f2:22:77:
                    db:58:64:bf:69:e4:95:ff:1e:c0:f4:f0:40:6e:63:
                    a1:40:a3:f5:d5:a6:fe:fa:c4:de:b9:ee:2a:94:9a:
                    64:13:fb:4b:8d:1c:23:df:4e:82:c6:3a:3f:7c:5c:
                    9a:17:32:17:c7:6c:22:a6:0f:55:3a:e0:15:c8:12:
                    f1:76:c5:40:e7:bd:32:b3:02:8c:ed:3a:ab:24:5f:
                    56:e6:d3:e2:1e:bb:61:67:2c:13:d1:bc:f3:f2:c3:
                    91:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:35:63:7B:85:63:46:3F:F4:1F:7E:62:D4:78:F6:28:ED:70:67:0E
            X509v3 Authority Key Identifier:
                keyid:07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/3jVje4VjRj_0H35i1Hj2KO1wZw4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.137.124.0/22
                IPv6:
                  2a07:3c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         63:15:89:14:20:60:76:88:6a:19:be:58:b3:77:a8:4f:c3:18:
         8c:39:3c:e3:6b:ba:cb:b8:16:23:26:7f:32:25:8e:a7:3e:6e:
         c9:c0:fc:9b:da:75:74:3e:1a:2f:50:a8:ff:19:ab:07:d9:71:
         e8:6e:dd:6b:1f:46:7e:e9:55:22:cc:97:56:fa:e6:2f:b1:ce:
         40:69:01:5e:67:1b:31:db:d9:9f:15:ab:11:6d:3e:2a:ae:da:
         cc:ae:13:58:c2:f8:df:94:1a:bb:cb:c8:3c:3e:a4:96:55:00:
         21:91:27:d7:0c:6f:4e:e6:f2:4e:f2:49:02:e0:91:dc:7f:49:
         67:df:95:1b:84:8e:7d:40:b6:73:76:4a:72:66:ac:26:2a:e9:
         d3:b5:0b:15:4f:d5:fd:14:ab:2e:69:3e:cd:7e:de:63:77:31:
         bd:7b:96:d1:2f:e6:d4:fc:2b:6e:ef:28:b6:f9:10:4d:29:bf:
         5b:2c:da:98:cb:51:da:1c:42:2d:a2:2e:7e:3e:ed:31:a7:ff:
         3e:e0:7b:73:cf:d6:74:44:70:cb:5b:58:84:29:79:b5:a3:c8:
         fd:b8:2d:a9:c3:30:bd:1c:29:0e:bd:e4:a4:e1:e1:5f:ac:d9:
         d5:8b:e0:f2:7b:30:0f:e7:d4:cf:df:c7:74:07:98:a1:7e:49:
         ad:f6:7b:9e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEEcsUlDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
N2FjNjQxOTE0MzU3ODk5OTViYzVhNjdmNWI1MWQ5Njg1MDAyODE1MB4XDTIyMDEw
MTE1NTU1N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGUzNTYzN2I4NTYz
NDYzZmY0MWY3ZTYyZDQ3OGY2MjhlZDcwNjcwZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANnzf26xZewC3JiL2GfpYIvWa9wY5QWSDHv2Iojcn3jqc+kt
wXhR/rg2xgEI+sGzPEqFpgNThe3F9ZDT133jbYcyb8lGNf3slZvhP+Lay4m0OLKY
yKMQpe0hwSuLqHLZ3qlY1gjoe+jplHLEs7ixGJh7KN99cHoOsoKJumjB3TtoEBSy
+acu/FvHm5ME81/gaROW9EtunR7sXyh0ZukVUHk68iJ321hkv2nklf8ewPTwQG5j
oUCj9dWm/vrE3rnuKpSaZBP7S40cI99OgsY6P3xcmhcyF8dsIqYPVTrgFcgS8XbF
QOe9MrMCjO06qyRfVubT4h67YWcsE9G88/LDkeUCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBTeNWN7hWNGP/QffmLUePYo7XBnDjAfBgNVHSMEGDAWgBQHrGQZFDV4mZW8
Wmf1tR2WhQAoFTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0I2eGtHUlExZUptVnZGcG45YlVkbG9VQUtCVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWUvN2MyZTA3LTZjZjItNDEyMi05OWY0LTljNmJlYTRjZDViNS8x
LzNqVmplNFZqUmpfMEgzNWkxSGoyS08xd1p3NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUv
N2MyZTA3LTZjZjItNDEyMi05OWY0LTljNmJlYTRjZDViNS8xL0I2eGtHUlExZUpt
VnZGcG45YlVkbG9VQUtCVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmJfDANBAIAAjAHAwUDKgcDwDAN
BgkqhkiG9w0BAQsFAAOCAQEAYxWJFCBgdohqGb5Ys3eoT8MYjDk842u6y7gWIyZ/
MiWOpz5uycD8m9p1dD4aL1Co/xmrB9lx6G7dax9GfulVIsyXVvrmL7HOQGkBXmcb
MdvZnxWrEW0+Kq7azK4TWML435Qau8vIPD6kllUAIZEn1wxvTubyTvJJAuCR3H9J
Z9+VG4SOfUC2c3ZKcmasJirp07ULFU/V/RSrLmk+zX7eY3cxvXuW0S/m1Pwrbu8o
tvkQTSm/WyzamMtR2hxCLaIufj7tMaf/PuB7c8/WdERwy1tYhCl5taPI/bgtqcMw
vRwpDr3kpOHhX6zZ1Yvg8nswD+fUz9/HdAeYoX5JrfZ7ng==
-----END CERTIFICATE-----