Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/KogLxix1-gMxIBKuZbaebmV5sRM.roa
File:                     KogLxix1-gMxIBKuZbaebmV5sRM.roa (raw, json)
Hash identifier:          S3cYBjV3UerpwS+kP5RrLTUku/jXDopPlWvICyizDgM=
Subject key identifier:   2A:88:0B:C6:2C:75:FA:03:31:20:12:AE:65:B6:9E:6E:65:79:B1:13
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       0257A2E7
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/KogLxix1-gMxIBKuZbaebmV5sRM.roa
Signing time:             Sat 01 Jan 2022 11:01:40 +0000
ROA not before:           Sat 01 Jan 2022 11:01:40 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     208753
IP address blocks:        2a05:4140:104::/48 maxlen: 48
                          2a05:4140:102::/48 maxlen: 48
                          2a05:4140:101::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39297767 (0x257a2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Jan  1 11:01:40 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2a880bc62c75fa03312012ae65b69e6e6579b113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:a6:83:01:f0:8a:57:df:3b:cc:24:72:9f:
                    73:f0:6f:b5:7d:28:df:05:97:ca:8d:a1:5a:00:ed:
                    72:a5:f5:5f:52:d0:c5:1f:e5:e8:79:e4:a5:5c:d8:
                    45:58:df:df:fa:b1:e5:10:fc:4c:18:5e:bc:7e:23:
                    1e:14:b5:19:69:32:1a:4c:04:25:bf:8e:8d:47:ba:
                    b6:76:eb:cf:7a:b1:f3:00:3f:c6:28:b3:40:86:2d:
                    04:5b:08:b0:3e:16:b8:d2:99:25:30:a4:c0:cb:66:
                    9f:70:7d:e9:64:0f:74:be:f3:73:bc:f9:13:54:cc:
                    b6:8a:54:30:0c:ee:c6:28:2e:7e:ed:81:7c:69:19:
                    49:42:fe:ca:86:a9:a6:88:f3:f2:e1:8a:a5:05:e6:
                    c6:c1:6f:c3:c6:96:38:cb:5d:0d:a3:f6:01:6e:c0:
                    51:6f:ac:a5:68:2d:89:df:4a:00:2a:a7:93:8e:4f:
                    46:b2:5a:03:d6:f3:53:fe:b9:68:59:e7:fe:f1:79:
                    76:50:b6:2d:25:2a:24:df:83:63:af:fc:82:25:df:
                    c4:ad:5d:97:6a:a0:0d:22:64:33:bf:8c:3d:2f:49:
                    c9:b7:61:f4:73:7e:f2:20:ab:dd:8d:c3:4b:b6:a7:
                    84:e9:5c:b5:4b:5c:0a:24:33:ad:2d:ab:c7:3e:8a:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:88:0B:C6:2C:75:FA:03:31:20:12:AE:65:B6:9E:6E:65:79:B1:13
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/KogLxix1-gMxIBKuZbaebmV5sRM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:4140:101::-2a05:4140:102:ffff:ffff:ffff:ffff:ffff
                  2a05:4140:104::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:39:ca:e9:55:d8:f8:56:41:95:62:7c:80:a6:9c:d1:3a:5e:
         f8:4e:3d:3e:44:eb:04:20:11:49:bc:20:41:de:99:47:9e:83:
         c6:48:cd:4f:74:ae:7a:bf:85:79:9f:61:fd:04:0a:c7:6f:c7:
         0b:46:d2:b4:1f:92:39:25:1d:21:0b:9b:7d:fb:33:24:ba:64:
         38:9a:23:a3:7f:27:6d:8e:27:e5:93:19:e4:1d:16:cd:f1:a0:
         e6:54:e5:45:76:4b:b7:8b:7a:16:84:ac:22:4f:bb:4a:e2:09:
         e2:2b:9b:bc:78:26:6d:d4:27:53:41:c5:75:db:28:2d:02:68:
         a1:7d:b1:6d:1f:a0:c9:cb:3d:a9:dd:78:a2:9e:24:16:fc:b7:
         69:66:0f:1a:8c:3e:23:66:5a:82:53:db:80:d4:b4:71:91:d0:
         e4:88:f3:d9:a7:da:c6:0c:69:10:9a:dd:6f:b8:05:14:e7:80:
         22:2b:dd:99:37:10:eb:ba:32:bd:8d:11:95:95:d5:2c:6d:0c:
         26:47:1e:0c:59:a9:f5:f7:00:1b:4f:df:90:7e:fe:b8:19:12:
         82:01:e7:14:46:3b:1d:3c:4b:3b:4e:f5:4b:23:0a:a1:60:dd:
         9b:16:44:ea:b7:2c:20:cb:b3:ca:8e:91:b9:12:84:84:1f:4e:
         e9:e9:b3:07
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEAlei5zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
NzRjNjBhZGViMGNkNTc2OGNmNzU2ZjU2MmIxYjVjYzViOWMxODBhMB4XDTIyMDEw
MTExMDE0MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMmE4ODBiYzYyYzc1
ZmEwMzMxMjAxMmFlNjViNjllNmU2NTc5YjExMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALf+poMB8IpX3zvMJHKfc/BvtX0o3wWXyo2hWgDtcqX1X1LQ
xR/l6HnkpVzYRVjf3/qx5RD8TBhevH4jHhS1GWkyGkwEJb+OjUe6tnbrz3qx8wA/
xiizQIYtBFsIsD4WuNKZJTCkwMtmn3B96WQPdL7zc7z5E1TMtopUMAzuxigufu2B
fGkZSUL+yoappojz8uGKpQXmxsFvw8aWOMtdDaP2AW7AUW+spWgtid9KACqnk45P
RrJaA9bzU/65aFnn/vF5dlC2LSUqJN+DY6/8giXfxK1dl2qgDSJkM7+MPS9Jybdh
9HN+8iCr3Y3DS7anhOlctUtcCiQzrS2rxz6KgU8CAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBQqiAvGLHX6AzEgEq5ltp5uZXmxEzAfBgNVHSMEGDAWgBTHTGCt6wzVdoz3
VvVisbXMW5wYCjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3gweGdyZXNNMVhhTTkxYjFZckcxekZ1Y0dBby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWYvYWRiNjVjLWY2ZjctNDQ5NS1iYTIzLTg4NWU4NGU3NTEyZS8x
L0tvZ0x4aXgxLWdNeElCS3VaYmFlYm1WNXNSTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYv
YWRiNjVjLWY2ZjctNDQ5NS1iYTIzLTg4NWU4NGU3NTEyZS8xL3gweGdyZXNNMVhh
TTkxYjFZckcxekZ1Y0dBby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwIwQCAAIwHTASAwcAKgVBQAEBAwcAKgVBQAECAwcA
KgVBQAEEMA0GCSqGSIb3DQEBCwUAA4IBAQAUOcrpVdj4VkGVYnyAppzROl74Tj0+
ROsEIBFJvCBB3plHnoPGSM1PdK56v4V5n2H9BArHb8cLRtK0H5I5JR0hC5t9+zMk
umQ4miOjfydtjiflkxnkHRbN8aDmVOVFdku3i3oWhKwiT7tK4gniK5u8eCZt1CdT
QcV12ygtAmihfbFtH6DJyz2p3XiiniQW/LdpZg8ajD4jZlqCU9uA1LRxkdDkiPPZ
p9rGDGkQmt1vuAUU54AiK92ZNxDrujK9jRGVldUsbQwmRx4MWan19wAbT9+Qfv64
GRKCAecURjsdPEs7TvVLIwqhYN2bFkTqtywgy7PKjpG5EoSEH07p6bMH
-----END CERTIFICATE-----