Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3133342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          uBZKSrG3D8jV3h67ufhUyMvUQg8BxGlAuycoZxRb8DI=
Subject key identifier:   97:F4:4B:3A:1C:69:80:E1:95:0A:CC:A7:51:7E:E9:42:53:B6:4A:F1
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       179BC287EAFEFB592D34850C8F9F6F8E9ED3DC1D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:14 +0000
ROA not before:           Wed 29 Sep 2021 23:56:14 +0000
ROA not after:            Fri 30 Sep 2022 00:01:14 +0000
asID:                     17451
IP address blocks:        182.253.134.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9b:c2:87:ea:fe:fb:59:2d:34:85:0c:8f:9f:6f:8e:9e:d3:dc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:14 2021 GMT
            Not After : Sep 30 00:01:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:dc:f9:f9:fd:8d:d5:3a:d7:d3:6f:1f:66:
                    a3:4b:37:08:fe:05:59:08:2b:3a:ab:fd:e6:1c:2c:
                    97:03:6e:32:c6:d4:6f:42:f4:61:85:e2:09:77:5d:
                    76:a8:dd:3f:d1:c6:a1:2b:fa:c4:7d:89:0f:ab:f4:
                    89:d7:62:94:b3:49:47:4a:ea:ca:14:5d:5c:8c:ae:
                    fe:85:cf:fe:99:51:c1:58:1c:3e:c9:a0:65:31:0c:
                    3c:31:06:dc:23:55:a3:9a:c1:cd:b5:93:a4:a1:2e:
                    39:26:7f:8b:79:c6:b7:db:a3:f0:bf:28:07:ff:f8:
                    94:7d:74:c5:03:9b:8d:34:56:ff:43:5c:1f:c2:9b:
                    5a:76:ac:3a:5d:e7:57:d1:2d:df:e8:ab:eb:d2:24:
                    74:c3:71:a6:f2:d4:31:dc:8b:33:3b:38:ee:d9:d6:
                    e7:fb:2d:7d:fa:06:21:55:01:37:ca:6c:e9:8b:20:
                    46:3b:c0:4f:1b:7b:db:de:bb:ab:1b:23:c2:be:c0:
                    ed:a6:2b:d8:bb:2f:86:2a:fa:a9:bf:12:3a:de:b8:
                    90:f3:65:7b:bf:e6:44:a6:d3:d7:51:2e:de:5b:09:
                    7d:ff:5a:42:b4:02:18:a8:d4:ef:e5:ba:55:06:3a:
                    9b:23:99:6c:e3:08:7c:44:49:e5:bf:21:21:d7:b4:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F4:4B:3A:1C:69:80:E1:95:0A:CC:A7:51:7E:E9:42:53:B6:4A:F1
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:f7:d5:e3:ad:b4:e4:4b:dc:0b:b3:42:9a:88:df:1e:28:
         a3:8d:64:06:c3:e8:74:c2:8e:67:39:f0:c7:5b:5b:c0:92:fc:
         32:22:49:a2:f9:c2:c3:92:7b:3a:c2:17:d5:75:51:1b:df:b4:
         0d:c9:60:6a:70:2b:1f:f4:a8:d2:d8:f8:a4:e3:59:56:4a:7a:
         b9:b8:bb:12:03:90:f2:5d:89:e8:ea:7e:05:30:48:58:71:6c:
         2d:72:fc:f1:7c:c4:fe:c8:6f:a6:8d:e2:fd:b3:6d:b7:8b:8f:
         91:60:72:0c:7d:1c:2c:30:f4:66:f1:d6:2e:7c:a2:95:ee:7e:
         87:e4:54:8a:7a:64:e7:38:14:99:ed:79:17:80:f7:57:b2:7e:
         fb:c6:7d:4b:b3:1c:66:7a:17:62:3e:19:f0:03:2b:e5:05:ed:
         a2:bd:a1:65:96:87:d4:46:5f:55:15:a4:b1:30:6d:c4:b7:09:
         3a:b9:80:b2:74:ec:04:fa:47:6a:45:00:01:b9:9f:cb:c6:d7:
         1f:ee:35:85:eb:42:28:66:49:ee:62:9d:e1:0d:bb:42:4d:7e:
         1b:b6:5f:e7:a3:8b:44:b7:7a:34:5f:ed:d5:0e:0f:b4:ca:09:
         93:80:03:bc:76:3d:e8:93:0e:84:a2:e6:26:c9:40:26:e0:ef:
         77:4e:a3:81
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUF5vCh+r++1ktNIUMj59vjp7T3B0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU2MTRaFw0yMjA5MzAwMDAxMTRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjQxNURDRjlGOUZEOERENTNB
RDdEMzZGMUY2NkEzNEIzNzA4RkUwNTU5MDgyQjNBQUJGREU2MUMyQzk3MDM2RTMy
QzZENDZGNDJGNDYxODVFMjA5Nzc1RDc2QThERDNGRDFDNkExMkJGQUM0N0Q4OTBG
QUJGNDg5RDc2Mjk0QjM0OTQ3NEFFQUNBMTQ1RDVDOENBRUZFODVDRkZFOTk1MUMx
NTgxQzNFQzlBMDY1MzEwQzNDMzEwNkRDMjM1NUEzOUFDMUNEQjU5M0E0QTEyRTM5
MjY3RjhCNzlDNkI3REJBM0YwQkYyODA3RkZGODk0N0Q3NEM1MDM5QjhEMzQ1NkZG
NDM1QzFGQzI5QjVBNzZBQzNBNURFNzU3RDEyRERGRThBQkVCRDIyNDc0QzM3MUE2
RjJENDMxREM4QjMzM0IzOEVFRDlENkU3RkIyRDdERkEwNjIxNTUwMTM3Q0E2Q0U5
OEIyMDQ2M0JDMDRGMUI3QkRCREVCQkFCMUIyM0MyQkVDMEVEQTYyQkQ4QkIyRjg2
MkFGQUE5QkYxMjNBREVCODkwRjM2NTdCQkZFNjQ0QTZEM0Q3NTEyRURFNUIwOTdE
RkY1QTQyQjQwMjE4QThENEVGRTVCQTU1MDYzQTlCMjM5OTZDRTMwODdDNDQ0OUU1
QkYyMTIxRDdCNDM1N0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtBXc+fn9jdU619NvH2ajSzcI/gVZCCs6q/3mHCyXA24yxtRvQvRh
heIJd112qN0/0cahK/rEfYkPq/SJ12KUs0lHSurKFF1cjK7+hc/+mVHBWBw+yaBl
MQw8MQbcI1WjmsHNtZOkoS45Jn+Leca326PwvygH//iUfXTFA5uNNFb/Q1wfwpta
dqw6XedX0S3f6Kvr0iR0w3Gm8tQx3IszOzju2dbn+y19+gYhVQE3ymzpiyBGO8BP
G3vb3rurGyPCvsDtpivYuy+GKvqpvxI63riQ82V7v+ZEptPXUS7eWwl9/1pCtAIY
qNTv5bpVBjqbI5ls4wh8REnlvyEh17Q1fQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FJf0SzocaYDhlQrMp1F+6UJTtkrxMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9hjANBgkqhkiG9w0BAQsFAAOCAQEAi0731eOt
tORL3AuzQpqI3x4oo41kBsPodMKOZznwx1tbwJL8MiJJovnCw5J7OsIX1XVRG9+0
DclganArH/So0tj4pONZVkp6ubi7EgOQ8l2J6Op+BTBIWHFsLXL88XzE/shvpo3i
/bNtt4uPkWByDH0cLDD0ZvHWLnyile5+h+RUinpk5zgUme15F4D3V7J++8Z9S7Mc
ZnoXYj4Z8AMr5QXtor2hZZaH1EZfVRWksTBtxLcJOrmAsnTsBPpHakUAAbmfy8bX
H+41hetCKGZJ7mKd4Q27Qk1+G7Zf56OLRLd6NF/t1Q4PtMoJk4ADvHY96JMOhKLm
JslAJuDvd06jgQ==
-----END CERTIFICATE-----