Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3132322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ZH1V5tajvoZpqFq7gwYpxNuVrlVdf0P+I0uV9xi83Sw=
Subject key identifier:   4D:49:31:9E:A7:F3:BF:2C:A3:29:0D:50:3B:92:E6:80:5F:53:3E:B8
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       11677738392599A96D5607429AD34E400FEBDBA9
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:55 +0000
ROA not before:           Wed 29 Sep 2021 23:55:55 +0000
ROA not after:            Fri 30 Sep 2022 00:00:55 +0000
asID:                     17451
IP address blocks:        182.253.122.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:67:77:38:39:25:99:a9:6d:56:07:42:9a:d3:4e:40:0f:eb:db:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:55 2021 GMT
            Not After : Sep 30 00:00:55 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:8a:60:72:8e:df:34:0e:26:59:2b:fe:20:
                    1d:cf:a3:75:06:5a:2d:a9:fb:fe:fd:d1:18:53:2e:
                    8c:73:90:b2:83:4a:10:43:b6:ec:78:af:34:67:2c:
                    8e:c6:c4:4e:00:02:3c:f9:fd:5d:7d:69:01:28:c3:
                    d2:57:fd:c7:ab:b2:47:94:50:5d:97:02:98:d9:17:
                    0b:9a:b3:dc:88:cb:64:66:e5:a5:30:78:f9:63:ea:
                    01:db:a6:70:b1:24:70:29:49:f6:06:2f:76:5b:47:
                    f5:25:5c:fe:9c:ef:cb:74:26:a9:f5:1f:02:f4:4e:
                    84:5a:33:43:98:6d:ca:7c:a2:81:fb:f2:69:09:93:
                    f2:7a:a2:fc:13:1c:e9:66:2b:a1:1e:0d:95:5a:4a:
                    a9:6c:c9:6b:3b:2c:e5:71:28:a9:7f:fd:e3:3c:6f:
                    73:c2:f7:30:cf:3c:80:6a:c0:a8:b5:c4:86:49:cf:
                    dc:db:98:7f:30:b0:cb:35:2a:5c:b3:8c:f5:ef:60:
                    af:6a:6b:f8:74:e3:9d:23:ee:f7:0f:2d:5f:b3:04:
                    4b:0a:a0:52:ec:f3:53:cc:29:3f:3e:35:69:6b:a8:
                    00:8a:03:80:b5:a2:6a:06:a9:6a:58:4d:8e:12:05:
                    6d:ac:c1:9a:ab:6f:d3:ba:21:f9:a3:92:30:40:17:
                    f9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:49:31:9E:A7:F3:BF:2C:A3:29:0D:50:3B:92:E6:80:5F:53:3E:B8
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f8:05:02:2b:30:18:21:d4:93:f2:72:02:f7:b3:d4:b2:fb:
         90:22:79:92:0b:91:4a:93:3f:1d:50:a0:7c:1f:ca:53:77:7b:
         32:74:08:71:3f:90:49:45:62:1f:f1:e6:6c:20:de:4b:80:86:
         69:5c:d2:d0:33:09:33:30:52:cb:c4:f5:6d:c5:44:68:49:f0:
         df:85:1f:e1:25:75:84:86:3f:d9:2d:d2:47:2c:c3:f1:8c:ab:
         37:dc:49:ad:0a:f3:17:3f:bb:e6:36:2e:a4:f9:91:55:60:fc:
         62:6a:28:93:b2:db:42:95:26:b5:91:1a:29:71:07:04:dc:14:
         8c:83:9b:e3:73:48:02:9d:6b:49:56:8a:4a:85:ae:d6:ec:6f:
         e8:d5:f0:01:61:76:13:ae:59:11:f0:a8:57:07:e9:a0:6f:c9:
         ea:95:44:71:5e:6a:98:67:ff:91:a1:31:36:d2:1f:3d:50:65:
         cb:56:f7:b8:61:41:73:e1:3e:5d:b0:23:cc:b4:34:e7:55:b5:
         b9:e1:2a:1d:f7:3f:2b:d2:74:d5:e3:f0:83:95:5d:dd:ec:6f:
         f5:91:5a:6f:bc:84:69:82:13:c3:5b:0a:68:66:f5:ba:70:6a:
         98:ae:76:8e:93:fd:65:14:37:2d:b6:18:6d:6e:12:e0:50:bb:
         f3:42:ca:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----