Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3131392e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e3131392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          beqBIScFp3Rkm0b6WTv6QWp96TKvZaz6+eYedMMlEVw=
Subject key identifier:   CA:65:39:24:39:46:D2:66:2D:30:0E:33:11:41:6A:C9:53:1B:4D:10
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6B8F8892AA3AFCF4ABBBA356C9EF2801E82F86DD
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3131392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:15 +0000
ROA not before:           Wed 29 Sep 2021 23:55:15 +0000
ROA not after:            Fri 30 Sep 2022 00:00:15 +0000
asID:                     17451
IP address blocks:        118.99.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8f:88:92:aa:3a:fc:f4:ab:bb:a3:56:c9:ef:28:01:e8:2f:86:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:15 2021 GMT
            Not After : Sep 30 00:00:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:61:41:87:56:68:08:86:ad:bc:47:55:f1:76:
                    35:a8:62:c6:c7:96:0c:ed:dc:db:4f:99:cb:7f:6b:
                    06:29:d6:9d:bf:06:93:57:b4:b4:ea:ae:63:b9:95:
                    00:d6:ef:d4:70:33:b0:cc:78:72:7f:a9:52:da:1e:
                    a8:a3:e5:c5:12:e3:e2:df:e5:72:a8:e8:3b:56:db:
                    1a:c2:5b:66:fb:75:1b:01:05:6c:bd:86:15:7a:3e:
                    3f:93:44:91:b7:dd:56:0b:fb:fd:a5:e5:c7:fa:f3:
                    cd:85:6f:80:56:8b:19:d0:50:68:63:9b:b4:8b:1c:
                    a9:b4:ff:95:6f:67:79:fd:fd:14:25:4e:70:9a:d4:
                    2a:88:b5:6b:60:e7:01:23:c1:c1:2c:2e:7d:48:82:
                    10:b3:2d:97:44:a3:ae:08:55:b0:3d:5b:4f:d5:3f:
                    59:ac:3a:ab:0f:32:ed:1a:9a:76:6a:4a:8a:2c:ea:
                    88:a5:05:5f:53:c9:42:27:78:65:7d:76:32:13:dd:
                    12:3c:12:d1:7e:f8:ca:6f:3b:d5:cb:8c:13:c1:c9:
                    e9:32:fc:7d:d1:c7:f8:28:77:43:36:d8:2f:3a:7d:
                    c7:ca:23:80:2f:1b:ca:43:40:c1:fe:00:1a:c9:da:
                    36:eb:5d:ee:66:da:8d:65:4b:b8:1c:66:63:de:f4:
                    6e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:65:39:24:39:46:D2:66:2D:30:0E:33:11:41:6A:C9:53:1B:4D:10
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3131392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:0e:98:f7:9b:13:3e:d9:c5:4c:ab:3a:b6:7f:b0:cb:df:a8:
         34:ed:d3:42:3d:66:af:2d:57:ae:8e:08:cd:a3:c4:51:59:38:
         8c:68:c6:03:39:19:8a:63:91:12:c8:91:40:42:d8:75:44:50:
         21:c5:10:20:fe:d9:9a:c3:4d:f2:04:55:88:cd:7f:b4:43:e2:
         2c:fb:e0:60:db:dc:67:c7:f4:e2:b4:26:39:bb:de:78:cc:9b:
         22:a0:bb:48:c2:e8:18:b0:91:f0:5e:d4:10:9c:12:3d:ad:8d:
         bf:13:4d:35:49:75:a4:10:a1:9d:21:4f:29:78:b4:a4:e6:61:
         a1:76:d1:28:2e:40:af:66:46:ab:b8:79:67:13:80:c7:cb:32:
         47:e6:4a:fc:bf:c5:0d:1d:6b:4e:5c:bd:ec:89:90:e8:98:7c:
         2c:ab:2c:23:54:b9:d0:aa:0e:e3:45:c3:bc:04:e2:fa:e7:bb:
         1d:94:53:0e:76:b5:99:85:89:36:ad:64:41:a9:7b:5a:21:0c:
         11:24:35:eb:8f:5d:92:51:b7:65:af:cf:3f:86:4c:bc:f2:31:
         96:7d:92:35:5c:02:bb:fe:1a:34:66:be:a2:b1:83:97:12:d3:
         9b:e9:a3:00:89:39:ce:af:e5:ea:f0:8c:60:11:dd:68:6b:db:
         2b:ca:1f:c8
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUa4+Ikqo6/PSru6NWye8oAegvht0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MTVaFw0yMjA5MzAwMDAwMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0M2MTQxODc1NjY4MDg4NkFE
QkM0NzU1RjE3NjM1QTg2MkM2Qzc5NjBDRUREQ0RCNEY5OUNCN0Y2QjA2MjlENjlE
QkYwNjkzNTdCNEI0RUFBRTYzQjk5NTAwRDZFRkQ0NzAzM0IwQ0M3ODcyN0ZBOTUy
REExRUE4QTNFNUM1MTJFM0UyREZFNTcyQThFODNCNTZEQjFBQzI1QjY2RkI3NTFC
MDEwNTZDQkQ4NjE1N0EzRTNGOTM0NDkxQjdERDU2MEJGQkZEQTVFNUM3RkFGM0NE
ODU2RjgwNTY4QjE5RDA1MDY4NjM5QkI0OEIxQ0E5QjRGRjk1NkY2Nzc5RkRGRDE0
MjU0RTcwOUFENDJBODhCNTZCNjBFNzAxMjNDMUMxMkMyRTdENDg4MjEwQjMyRDk3
NDRBM0FFMDg1NUIwM0Q1QjRGRDUzRjU5QUMzQUFCMEYzMkVEMUE5QTc2NkE0QThB
MkNFQTg4QTUwNTVGNTNDOTQyMjc3ODY1N0Q3NjMyMTNERDEyM0MxMkQxN0VGOENB
NkYzQkQ1Q0I4QzEzQzFDOUU5MzJGQzdERDFDN0Y4Mjg3NzQzMzZEODJGM0E3REM3
Q0EyMzgwMkYxQkNBNDM0MEMxRkUwMDFBQzlEQTM2RUI1REVFNjZEQThENjU0QkI4
MUM2NjYzREVGNDZFMDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzGFBh1ZoCIatvEdV8XY1qGLGx5YM7dzbT5nLf2sGKdadvwaTV7S0
6q5juZUA1u/UcDOwzHhyf6lS2h6oo+XFEuPi3+VyqOg7Vtsawltm+3UbAQVsvYYV
ej4/k0SRt91WC/v9peXH+vPNhW+AVosZ0FBoY5u0ixyptP+Vb2d5/f0UJU5wmtQq
iLVrYOcBI8HBLC59SIIQsy2XRKOuCFWwPVtP1T9ZrDqrDzLtGpp2akqKLOqIpQVf
U8lCJ3hlfXYyE90SPBLRfvjKbzvVy4wTwcnpMvx90cf4KHdDNtgvOn3HyiOALxvK
Q0DB/gAaydo2613uZtqNZUu4HGZj3vRuBwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FMplOSQ5RtJmLTAOMxFBaslTG00QMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzgyZTM5MzkyZTMxMzEzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAB2Y3cwDQYJKoZIhvcNAQELBQADggEBACcOmPebEz7Z
xUyrOrZ/sMvfqDTt00I9Zq8tV66OCM2jxFFZOIxoxgM5GYpjkRLIkUBC2HVEUCHF
ECD+2ZrDTfIEVYjNf7RD4iz74GDb3GfH9OK0Jjm73njMmyKgu0jC6BiwkfBe1BCc
Ej2tjb8TTTVJdaQQoZ0hTyl4tKTmYaF20SguQK9mRqu4eWcTgMfLMkfmSvy/xQ0d
a05cveyJkOiYfCyrLCNUudCqDuNFw7wE4vrnux2UUw52tZmFiTatZEGpe1ohDBEk
NeuPXZJRt2Wvzz+GTLzyMZZ9kjVcArv+GjRmvqKxg5cS05vpowCJOc6v5erwjGAR
3Whr2yvKH8g=
-----END CERTIFICATE-----