Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3130312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          BTfjszFI7XgmMcR0dgr1ROEowj2SzizdXRHKANt8GJQ=
Subject key identifier:   32:7C:3F:56:73:41:CB:09:3C:5E:76:FA:5A:58:FC:49:E9:E7:73:6A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       211AA554840559831A492D4B855027869A7DDFB1
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:57 +0000
ROA not before:           Wed 29 Sep 2021 23:55:57 +0000
ROA not after:            Fri 30 Sep 2022 00:00:57 +0000
asID:                     17451
IP address blocks:        182.253.101.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1a:a5:54:84:05:59:83:1a:49:2d:4b:85:50:27:86:9a:7d:df:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:57 2021 GMT
            Not After : Sep 30 00:00:57 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1b:37:6f:d3:99:ca:3f:08:0a:68:0a:60:b0:
                    a0:70:24:96:cc:a4:58:7d:14:c6:9f:15:37:44:51:
                    49:8d:ad:9a:b2:63:79:5b:30:eb:c0:96:77:36:fc:
                    30:6a:28:86:9d:8a:77:bc:66:6d:47:d2:cf:f5:1d:
                    4a:86:b7:89:17:9c:4e:aa:05:ef:4c:09:f6:43:60:
                    d4:9b:fc:0a:bb:ed:64:65:95:03:c8:d2:74:12:fe:
                    c4:c7:2c:f1:c5:7c:92:55:e0:f5:35:70:fd:27:b8:
                    e4:04:06:df:1e:2f:f4:d2:18:bc:47:7b:aa:50:5f:
                    f0:16:33:59:8b:eb:76:ac:f0:ef:b7:7a:bb:16:68:
                    12:4e:10:91:63:a3:c9:62:4d:aa:9b:a8:39:7b:e7:
                    cd:52:2c:2b:ad:5d:f6:1a:04:25:d4:fb:df:3a:bd:
                    41:d1:ad:3d:ae:b0:6b:72:d7:b6:8b:ec:70:1c:16:
                    47:62:fe:97:07:9d:ca:84:f1:9a:30:15:46:5e:fa:
                    f4:2a:88:2a:04:94:97:17:4c:4b:85:8f:7f:3f:da:
                    eb:88:6b:ca:97:54:9d:f3:2b:ec:de:3f:cd:9f:2b:
                    80:28:76:d0:ba:1f:81:ce:9a:e6:88:99:aa:1b:96:
                    3f:34:f0:76:60:e7:bf:4f:31:ad:ad:d4:70:f3:02:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7C:3F:56:73:41:CB:09:3C:5E:76:FA:5A:58:FC:49:E9:E7:73:6A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:65:bb:19:64:29:1a:09:32:e7:83:32:be:36:ba:e3:f5:13:
         da:37:dd:7b:ef:6a:ad:4a:ea:8b:c8:a5:f0:70:9b:1e:9c:7d:
         d0:dc:1e:31:93:69:dc:a7:3f:fe:2b:53:bb:6e:d1:39:81:a2:
         a0:93:b0:76:2d:06:f8:fc:48:b7:9f:34:99:a9:43:4f:e3:85:
         84:88:e3:7a:96:42:95:8b:77:87:8c:6f:06:59:d1:f1:84:aa:
         71:b8:22:dd:f3:32:0f:94:d7:08:1b:25:dd:31:94:a8:9e:97:
         e4:2b:8b:95:ff:6b:14:9b:af:d7:a0:36:34:70:bc:cc:08:c2:
         75:84:55:d1:d3:0b:fc:b1:5c:d7:85:6c:76:4f:fa:c4:ee:ab:
         c8:0e:46:20:e4:ef:81:22:24:f1:60:0a:97:1b:56:32:5f:21:
         4e:d6:ef:56:70:91:b0:f1:86:07:36:6d:ce:e1:c5:60:a1:34:
         2d:f3:2f:ea:01:e3:e6:4e:0b:74:9d:a3:32:6f:d8:48:68:46:
         10:e8:06:0c:53:eb:86:ae:eb:76:2b:52:33:03:9d:0b:76:07:
         f3:4b:ee:76:c9:85:52:4a:fe:a7:cb:63:73:b3:24:a0:2f:c2:
         6a:8a:62:9e:90:fe:ad:cf:bf:6b:f3:72:42:9a:29:8f:41:5a:
         87:c6:80:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----