Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3130342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          TrDneqOE0AECkeKjgxud69h6PxAWOXbyXfN2ea9WRec=
Subject key identifier:   2F:72:BB:4E:83:83:6A:01:C1:95:7D:9D:5C:5C:97:1F:8D:96:C4:0A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4C81D60ABCFBC9D1C3014D0FAB5F295CAABA6E5C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:26 +0000
ROA not before:           Wed 29 Sep 2021 23:55:26 +0000
ROA not after:            Fri 30 Sep 2022 00:00:26 +0000
asID:                     17451
IP address blocks:        182.253.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:81:d6:0a:bc:fb:c9:d1:c3:01:4d:0f:ab:5f:29:5c:aa:ba:6e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:26 2021 GMT
            Not After : Sep 30 00:00:26 2022 GMT
        Subject: CN=3082010A0282010100E5851E347CDED5D09D18BBF2E804AEA247B84B3C676286D301B5E6E185CB8406FFD4488A661685223464D9FBD99391304454F3DF109545F703476B5771B9CFD9A0F447F6117088721AF6698C43AE61F2CCE14D72A7F0C9F594EDCD3D5D4606A8893403BD03FFADA9E2C7F98A504233D51D4C99A25B245C161A6C029B465571227796F024C0E3E0CCD7DB25FFE75561A0A6CDCE597B833D6169D7F52F92002D6EA19FCED6E703E5EC686BC94A87372DE65C58856B025895723C47C884988AACDB0920451D73AC07F0265EB10CAEE16E12B69D0B4DEF8FC1FF04C93349CA94B0D51F6B005B32523719B23094FE9785CEE5150301F5C251F08E100499C2767B7B150203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:85:1e:34:7c:de:d5:d0:9d:18:bb:f2:e8:04:
                    ae:a2:47:b8:4b:3c:67:62:86:d3:01:b5:e6:e1:85:
                    cb:84:06:ff:d4:48:8a:66:16:85:22:34:64:d9:fb:
                    d9:93:91:30:44:54:f3:df:10:95:45:f7:03:47:6b:
                    57:71:b9:cf:d9:a0:f4:47:f6:11:70:88:72:1a:f6:
                    69:8c:43:ae:61:f2:cc:e1:4d:72:a7:f0:c9:f5:94:
                    ed:cd:3d:5d:46:06:a8:89:34:03:bd:03:ff:ad:a9:
                    e2:c7:f9:8a:50:42:33:d5:1d:4c:99:a2:5b:24:5c:
                    16:1a:6c:02:9b:46:55:71:22:77:96:f0:24:c0:e3:
                    e0:cc:d7:db:25:ff:e7:55:61:a0:a6:cd:ce:59:7b:
                    83:3d:61:69:d7:f5:2f:92:00:2d:6e:a1:9f:ce:d6:
                    e7:03:e5:ec:68:6b:c9:4a:87:37:2d:e6:5c:58:85:
                    6b:02:58:95:72:3c:47:c8:84:98:8a:ac:db:09:20:
                    45:1d:73:ac:07:f0:26:5e:b1:0c:ae:e1:6e:12:b6:
                    9d:0b:4d:ef:8f:c1:ff:04:c9:33:49:ca:94:b0:d5:
                    1f:6b:00:5b:32:52:37:19:b2:30:94:fe:97:85:ce:
                    e5:15:03:01:f5:c2:51:f0:8e:10:04:99:c2:76:7b:
                    7b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:72:BB:4E:83:83:6A:01:C1:95:7D:9D:5C:5C:97:1F:8D:96:C4:0A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:af:e5:80:a7:d8:3a:4c:15:28:3a:3f:43:8f:1a:2f:4d:11:
         63:99:0c:ed:5b:d3:c2:a0:17:ea:6f:54:fc:8d:a5:73:5b:91:
         6a:76:56:c3:1f:cd:00:ed:8a:81:76:53:3d:0d:9e:28:c9:46:
         07:97:9d:eb:5e:61:1a:6e:c1:d1:22:d5:97:d6:e4:44:81:71:
         c5:ae:49:6a:91:96:5b:63:e2:d1:4f:43:c5:39:2d:eb:6f:42:
         66:40:31:fd:00:0f:a9:4d:68:33:c4:67:62:3d:43:95:cb:02:
         e7:b1:12:ba:a2:d8:d9:b7:fd:74:7c:9b:44:ab:28:9e:28:f8:
         65:75:d5:80:46:d5:cd:aa:9d:27:bf:56:8d:fc:a7:c3:dd:78:
         9f:7a:ca:6c:12:66:e1:7a:d6:6a:6b:06:d1:5a:27:25:9a:02:
         fb:74:7e:17:72:c2:24:5b:ea:4e:74:1e:6d:21:84:ba:f5:4c:
         a0:32:4c:ba:36:3c:24:9d:f7:75:64:0a:c7:29:db:01:b2:66:
         07:c4:c8:4f:80:cc:25:f7:f3:c0:0c:cf:b9:5f:b6:8d:bb:4b:
         35:3f:b8:6d:bd:97:6d:1f:82:7d:1b:68:97:e9:14:ee:af:b3:
         2c:b5:29:db:a7:c4:86:03:f9:5b:78:a7:a7:bf:6f:6f:89:57:
         87:9d:53:bf
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUTIHWCrz7ydHDAU0Pq18pXKq6blwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MjZaFw0yMjA5MzAwMDAwMjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTU4NTFFMzQ3Q0RFRDVEMDlE
MThCQkYyRTgwNEFFQTI0N0I4NEIzQzY3NjI4NkQzMDFCNUU2RTE4NUNCODQwNkZG
RDQ0ODhBNjYxNjg1MjIzNDY0RDlGQkQ5OTM5MTMwNDQ1NEYzREYxMDk1NDVGNzAz
NDc2QjU3NzFCOUNGRDlBMEY0NDdGNjExNzA4ODcyMUFGNjY5OEM0M0FFNjFGMkND
RTE0RDcyQTdGMEM5RjU5NEVEQ0QzRDVENDYwNkE4ODkzNDAzQkQwM0ZGQURBOUUy
QzdGOThBNTA0MjMzRDUxRDRDOTlBMjVCMjQ1QzE2MUE2QzAyOUI0NjU1NzEyMjc3
OTZGMDI0QzBFM0UwQ0NEN0RCMjVGRkU3NTU2MUEwQTZDRENFNTk3QjgzM0Q2MTY5
RDdGNTJGOTIwMDJENkVBMTlGQ0VENkU3MDNFNUVDNjg2QkM5NEE4NzM3MkRFNjVD
NTg4NTZCMDI1ODk1NzIzQzQ3Qzg4NDk4OEFBQ0RCMDkyMDQ1MUQ3M0FDMDdGMDI2
NUVCMTBDQUVFMTZFMTJCNjlEMEI0REVGOEZDMUZGMDRDOTMzNDlDQTk0QjBENTFG
NkIwMDVCMzI1MjM3MTlCMjMwOTRGRTk3ODVDRUU1MTUwMzAxRjVDMjUxRjA4RTEw
MDQ5OUMyNzY3QjdCMTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5YUeNHze1dCdGLvy6ASuoke4SzxnYobTAbXm4YXLhAb/1EiKZhaF
IjRk2fvZk5EwRFTz3xCVRfcDR2tXcbnP2aD0R/YRcIhyGvZpjEOuYfLM4U1yp/DJ
9ZTtzT1dRgaoiTQDvQP/ranix/mKUEIz1R1MmaJbJFwWGmwCm0ZVcSJ3lvAkwOPg
zNfbJf/nVWGgps3OWXuDPWFp1/UvkgAtbqGfztbnA+XsaGvJSoc3LeZcWIVrAliV
cjxHyISYiqzbCSBFHXOsB/AmXrEMruFuEradC03vj8H/BMkzScqUsNUfawBbMlI3
GbIwlP6Xhc7lFQMB9cJR8I4QBJnCdnt7FQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FC9yu06Dg2oBwZV9nVxclx+NlsQKMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzMDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9aDANBgkqhkiG9w0BAQsFAAOCAQEAAK/lgKfY
OkwVKDo/Q48aL00RY5kM7VvTwqAX6m9U/I2lc1uRanZWwx/NAO2KgXZTPQ2eKMlG
B5ed615hGm7B0SLVl9bkRIFxxa5JapGWW2Pi0U9DxTkt629CZkAx/QAPqU1oM8Rn
Yj1DlcsC57ESuqLY2bf9dHybRKsonij4ZXXVgEbVzaqdJ79Wjfynw914n3rKbBJm
4XrWamsG0VonJZoC+3R+F3LCJFvqTnQebSGEuvVMoDJMujY8JJ33dWQKxynbAbJm
B8TIT4DMJffzwAzPuV+2jbtLNT+4bb2XbR+CfRtol+kU7q+zLLUp26fEhgP5W3in
p79vb4lXh51Tvw==
-----END CERTIFICATE-----