Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3130332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          w8iyXSaLK8750UlE/jREdAEetwo9zNOkEkYnDYgkFkU=
Subject key identifier:   D1:CF:41:80:68:F3:92:50:73:18:93:9B:2C:2F:7C:F7:03:F1:CA:1D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3DE0D1A12CA71E0DB2FCFD1EA9D90EA80F04D614
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:43 +0000
ROA not before:           Wed 29 Sep 2021 23:55:43 +0000
ROA not after:            Fri 30 Sep 2022 00:00:43 +0000
asID:                     17451
IP address blocks:        182.253.103.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e0:d1:a1:2c:a7:1e:0d:b2:fc:fd:1e:a9:d9:0e:a8:0f:04:d6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:43 2021 GMT
            Not After : Sep 30 00:00:43 2022 GMT
        Subject: CN=3082010A0282010100A9626A12D6DDE8D3B3C37EE9F97475D81C0F5C1A844CC05CC9D47C5BA5FC0842EDD9851DB93ADDBDEA056FC27F1D253D9719DB7A3D4CAA9D9ED4014A704CC717277DB253A9F1B986865090B333D6C13CA7E97FBDE0CA5E47ED7920B58ED2776516C7FD1EE5CBD9AE32A4D257E7378F6D8B51F12BBB6CB05222A23D38B97A09C73B1AD2E25AE6E1BE3CA34E298D71CC7F7CABDD842102AF3DCB735FD5CE10ED73D27135651ACE282732BAFD161097CAACE930AA8F0FBEE1A1EB322DD8E54DCD27A8704F80A3D96B3F8D9313510026BD0DB54F1EBA835B4BF444959F36C853C47B1209A20AF7C69C6472E59F32231318FFEF0780DE3214E00FF08DB7D9EB810F3D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:62:6a:12:d6:dd:e8:d3:b3:c3:7e:e9:f9:74:
                    75:d8:1c:0f:5c:1a:84:4c:c0:5c:c9:d4:7c:5b:a5:
                    fc:08:42:ed:d9:85:1d:b9:3a:dd:bd:ea:05:6f:c2:
                    7f:1d:25:3d:97:19:db:7a:3d:4c:aa:9d:9e:d4:01:
                    4a:70:4c:c7:17:27:7d:b2:53:a9:f1:b9:86:86:50:
                    90:b3:33:d6:c1:3c:a7:e9:7f:bd:e0:ca:5e:47:ed:
                    79:20:b5:8e:d2:77:65:16:c7:fd:1e:e5:cb:d9:ae:
                    32:a4:d2:57:e7:37:8f:6d:8b:51:f1:2b:bb:6c:b0:
                    52:22:a2:3d:38:b9:7a:09:c7:3b:1a:d2:e2:5a:e6:
                    e1:be:3c:a3:4e:29:8d:71:cc:7f:7c:ab:dd:84:21:
                    02:af:3d:cb:73:5f:d5:ce:10:ed:73:d2:71:35:65:
                    1a:ce:28:27:32:ba:fd:16:10:97:ca:ac:e9:30:aa:
                    8f:0f:be:e1:a1:eb:32:2d:d8:e5:4d:cd:27:a8:70:
                    4f:80:a3:d9:6b:3f:8d:93:13:51:00:26:bd:0d:b5:
                    4f:1e:ba:83:5b:4b:f4:44:95:9f:36:c8:53:c4:7b:
                    12:09:a2:0a:f7:c6:9c:64:72:e5:9f:32:23:13:18:
                    ff:ef:07:80:de:32:14:e0:0f:f0:8d:b7:d9:eb:81:
                    0f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CF:41:80:68:F3:92:50:73:18:93:9B:2C:2F:7C:F7:03:F1:CA:1D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:09:a1:06:7d:9f:dd:b4:c9:51:7a:2a:e0:06:15:c0:be:86:
         68:5c:0e:e9:96:4e:40:3f:9b:86:ab:cb:2b:a0:5f:8d:d0:9d:
         d4:7c:5b:68:28:51:af:76:bf:1d:94:b4:28:5d:b7:ae:4b:3d:
         a2:5f:6e:0f:11:3b:01:5a:79:7f:78:c4:9a:8f:f4:2a:9d:2e:
         c9:e3:67:de:8b:c1:6a:7e:47:a2:f8:ff:5c:38:88:0c:4d:ea:
         aa:de:76:7c:72:ab:25:a9:3c:e2:d3:df:4d:01:af:98:8f:3d:
         7f:05:f6:5a:66:8b:b2:2b:54:83:f7:9b:bc:8a:8f:61:90:86:
         0c:58:19:d8:f4:8e:2c:df:22:2e:1e:d4:e0:de:70:01:f5:7e:
         03:d2:03:e0:2d:81:5a:8f:21:33:1d:36:b1:08:17:e6:2e:9f:
         37:ce:ec:f2:1f:0a:98:49:2f:84:20:d4:14:ee:74:31:e0:5f:
         97:58:c6:d2:fd:88:37:16:a5:a3:a3:fd:73:3b:96:d3:f8:1a:
         b2:86:7b:bd:81:fe:77:62:05:e0:4d:38:d0:29:cf:15:ee:a5:
         5b:d8:8f:42:df:fc:08:9f:e1:7a:81:67:0b:ac:22:57:52:9a:
         5a:c9:d6:ff:95:2d:c9:34:81:9f:82:e7:62:94:2b:ea:a6:2c:
         ca:d7:4b:5b
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUPeDRoSynHg2y/P0eqdkOqA8E1hQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDNaFw0yMjA5MzAwMDAwNDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTk2MjZBMTJENkRERThEM0Iz
QzM3RUU5Rjk3NDc1RDgxQzBGNUMxQTg0NENDMDVDQzlENDdDNUJBNUZDMDg0MkVE
RDk4NTFEQjkzQUREQkRFQTA1NkZDMjdGMUQyNTNEOTcxOURCN0EzRDRDQUE5RDlF
RDQwMTRBNzA0Q0M3MTcyNzdEQjI1M0E5RjFCOTg2ODY1MDkwQjMzM0Q2QzEzQ0E3
RTk3RkJERTBDQTVFNDdFRDc5MjBCNThFRDI3NzY1MTZDN0ZEMUVFNUNCRDlBRTMy
QTREMjU3RTczNzhGNkQ4QjUxRjEyQkJCNkNCMDUyMjJBMjNEMzhCOTdBMDlDNzNC
MUFEMkUyNUFFNkUxQkUzQ0EzNEUyOThENzFDQzdGN0NBQkREODQyMTAyQUYzRENC
NzM1RkQ1Q0UxMEVENzNEMjcxMzU2NTFBQ0UyODI3MzJCQUZEMTYxMDk3Q0FBQ0U5
MzBBQThGMEZCRUUxQTFFQjMyMkREOEU1NERDRDI3QTg3MDRGODBBM0Q5NkIzRjhE
OTMxMzUxMDAyNkJEMERCNTRGMUVCQTgzNUI0QkY0NDQ5NTlGMzZDODUzQzQ3QjEy
MDlBMjBBRjdDNjlDNjQ3MkU1OUYzMjIzMTMxOEZGRUYwNzgwREUzMjE0RTAwRkYw
OERCN0Q5RUI4MTBGM0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqWJqEtbd6NOzw37p+XR12BwPXBqETMBcydR8W6X8CELt2YUduTrd
veoFb8J/HSU9lxnbej1Mqp2e1AFKcEzHFyd9slOp8bmGhlCQszPWwTyn6X+94Mpe
R+15ILWO0ndlFsf9HuXL2a4ypNJX5zePbYtR8Su7bLBSIqI9OLl6Ccc7GtLiWubh
vjyjTimNccx/fKvdhCECrz3Lc1/VzhDtc9JxNWUazignMrr9FhCXyqzpMKqPD77h
oesyLdjlTc0nqHBPgKPZaz+NkxNRACa9DbVPHrqDW0v0RJWfNshTxHsSCaIK98ac
ZHLlnzIjExj/7weA3jIU4A/wjbfZ64EPPQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FNHPQYBo85JQcxiTmywvfPcD8codMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzMDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9ZzANBgkqhkiG9w0BAQsFAAOCAQEAIQmhBn2f
3bTJUXoq4AYVwL6GaFwO6ZZOQD+bhqvLK6BfjdCd1HxbaChRr3a/HZS0KF23rks9
ol9uDxE7AVp5f3jEmo/0Kp0uyeNn3ovBan5Hovj/XDiIDE3qqt52fHKrJak84tPf
TQGvmI89fwX2WmaLsitUg/ebvIqPYZCGDFgZ2PSOLN8iLh7U4N5wAfV+A9ID4C2B
Wo8hMx02sQgX5i6fN87s8h8KmEkvhCDUFO50MeBfl1jG0v2INxalo6P9czuW0/ga
soZ7vYH+d2IF4E040CnPFe6lW9iPQt/8CJ/heoFnC6wiV1KaWsnW/5UtyTSBn4Ln
YpQr6qYsytdLWw==
-----END CERTIFICATE-----