Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3133392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          loCPLnGCnrYTOLBsjlBzYfwE005mhT3eXq+MBDWbIBI=
Subject key identifier:   EA:E7:92:E1:41:6A:AA:7B:0C:4F:9E:2C:72:D1:90:7E:46:31:DF:5D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       21B24B7AC4067E39D3A4058F27FCAA9823B159BD
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:08 +0000
ROA not before:           Wed 29 Sep 2021 23:55:08 +0000
ROA not after:            Fri 30 Sep 2022 00:00:08 +0000
asID:                     17451
IP address blocks:        182.253.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b2:4b:7a:c4:06:7e:39:d3:a4:05:8f:27:fc:aa:98:23:b1:59:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:08 2021 GMT
            Not After : Sep 30 00:00:08 2022 GMT
        Subject: CN=3082010A0282010100CEDBFFE12757A0E5FE4D31B51D54C318F912AC8FDA6E53CCBA7F2119C8BA64846ACFC89C6E67BBD02C52FF0B13AB9EFB129C51DA90AB38DC44A19F2AA7658BD8411566E76391635A30859F654E2D2DA359B490845D82651EB61E58EDE680BD5456A0DDF1CF5DF19B5E5EC98B2DA580E3FA231B433474591934AE46CDD451AD6405658EA9D604A3868B46C5129A95C2822EC27E5ACF1425A619B457FA9836A2E728B760495BF7734FAE2F6897540C9185166C465C0CC54F94CF14DD924F77A64C5B3B775DE1E60AC0F87ABCBA4F8662BC32C91F8E83004A465ED8876912104B26F740CD8D098D02F48C4A97CEB8160E73BECC8FB511F92E95C011438753EA54630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:ff:e1:27:57:a0:e5:fe:4d:31:b5:1d:54:
                    c3:18:f9:12:ac:8f:da:6e:53:cc:ba:7f:21:19:c8:
                    ba:64:84:6a:cf:c8:9c:6e:67:bb:d0:2c:52:ff:0b:
                    13:ab:9e:fb:12:9c:51:da:90:ab:38:dc:44:a1:9f:
                    2a:a7:65:8b:d8:41:15:66:e7:63:91:63:5a:30:85:
                    9f:65:4e:2d:2d:a3:59:b4:90:84:5d:82:65:1e:b6:
                    1e:58:ed:e6:80:bd:54:56:a0:dd:f1:cf:5d:f1:9b:
                    5e:5e:c9:8b:2d:a5:80:e3:fa:23:1b:43:34:74:59:
                    19:34:ae:46:cd:d4:51:ad:64:05:65:8e:a9:d6:04:
                    a3:86:8b:46:c5:12:9a:95:c2:82:2e:c2:7e:5a:cf:
                    14:25:a6:19:b4:57:fa:98:36:a2:e7:28:b7:60:49:
                    5b:f7:73:4f:ae:2f:68:97:54:0c:91:85:16:6c:46:
                    5c:0c:c5:4f:94:cf:14:dd:92:4f:77:a6:4c:5b:3b:
                    77:5d:e1:e6:0a:c0:f8:7a:bc:ba:4f:86:62:bc:32:
                    c9:1f:8e:83:00:4a:46:5e:d8:87:69:12:10:4b:26:
                    f7:40:cd:8d:09:8d:02:f4:8c:4a:97:ce:b8:16:0e:
                    73:be:cc:8f:b5:11:f9:2e:95:c0:11:43:87:53:ea:
                    54:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E7:92:E1:41:6A:AA:7B:0C:4F:9E:2C:72:D1:90:7E:46:31:DF:5D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e8:6b:1b:f5:39:c6:ab:51:c9:00:45:1b:4b:a0:1c:fa:89:
         af:30:7a:ff:cd:b8:79:c6:d4:e1:c7:bd:3c:67:fa:2b:ef:5c:
         97:d8:21:0c:4d:50:5e:66:78:f4:3e:32:5e:8b:a0:f5:69:17:
         e8:a3:38:60:c6:a1:55:2d:86:7c:ba:11:ad:37:d2:63:ac:23:
         22:db:14:83:de:5a:83:3b:6e:bc:d5:18:7a:50:0c:e0:c0:b3:
         9e:47:95:73:99:74:29:08:bd:65:a0:f7:43:18:21:99:73:ad:
         83:4f:4f:99:d5:5b:52:79:b8:f4:b4:3d:7e:b5:23:a6:30:c3:
         f3:fd:33:11:45:18:a4:11:7f:d3:8c:64:3a:71:de:f2:49:4d:
         9c:df:86:75:c8:3e:43:e6:64:c2:8a:0d:1d:8e:7f:83:28:70:
         b2:a7:db:fc:b1:73:a9:43:0d:31:a1:3f:6c:ec:d3:d7:72:4f:
         0b:95:9a:55:3e:d8:bd:f9:be:8e:5e:50:e2:66:23:f1:c7:8e:
         c6:53:ff:f3:04:8a:c6:20:26:69:b1:63:53:49:8c:87:47:ca:
         e0:65:7e:07:70:a6:15:f4:a2:a2:4f:c2:82:2a:f2:1b:2f:02:
         57:70:b9:1f:9e:f1:17:b2:4d:a4:88:86:fb:e9:21:b5:b2:53:
         0d:c7:98:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----