Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3134342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          bJXOmB2oZfbeeqH17YU/uLhtxjjitiq4kMg6tM9YhaM=
Subject key identifier:   4B:30:AB:7B:B2:4A:D9:65:82:7E:F9:19:0C:4D:B7:97:CE:E1:2D:FD
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       28D8DDBEC435AF6C2E5FC88C2ADD9DA569CB35DF
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:03 +0000
ROA not before:           Wed 29 Sep 2021 23:55:03 +0000
ROA not after:            Fri 30 Sep 2022 00:00:03 +0000
asID:                     17451
IP address blocks:        182.253.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:d8:dd:be:c4:35:af:6c:2e:5f:c8:8c:2a:dd:9d:a5:69:cb:35:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:03 2021 GMT
            Not After : Sep 30 00:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:40:85:f8:0e:4a:e7:f5:8b:c3:31:5a:09:be:
                    63:2c:84:06:26:91:d7:7f:de:e9:6a:ca:48:fe:a7:
                    54:d6:b6:69:19:94:9d:39:de:d7:7b:cb:de:a6:76:
                    ea:eb:3c:d6:43:08:a7:db:02:7c:33:20:6c:96:11:
                    27:5a:d9:67:61:a8:46:20:00:75:5d:29:95:97:e5:
                    40:87:28:5c:ad:2d:18:e9:05:b6:1d:c3:03:54:cf:
                    ea:28:83:1c:23:8f:2c:c8:dd:6b:ab:70:97:b7:8f:
                    07:27:c2:a9:3b:5a:0d:74:c1:ae:06:b6:90:3f:01:
                    ac:20:17:0e:4b:14:8e:40:d5:bd:c8:6b:99:93:c3:
                    05:3a:d5:0d:fe:c0:cb:e5:9f:7b:c3:35:49:24:15:
                    73:42:7e:7e:54:85:07:a3:c9:6d:98:e0:35:bb:b6:
                    27:b5:22:ea:6b:cb:fc:6b:ec:c5:b5:f3:20:9f:92:
                    85:31:3f:c8:5d:94:b1:b1:34:49:d3:62:c4:3d:b6:
                    d5:08:6a:df:12:0a:5c:ab:12:4b:7b:a5:c3:bc:63:
                    0c:6f:22:cc:29:87:7d:5f:20:dd:06:6c:59:59:9a:
                    4d:a3:30:9c:dc:fd:b9:83:99:bd:a3:88:5a:5f:49:
                    47:ec:78:ec:ba:40:fd:ee:07:dc:17:24:09:6b:a7:
                    dd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:30:AB:7B:B2:4A:D9:65:82:7E:F9:19:0C:4D:B7:97:CE:E1:2D:FD
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:5e:29:e8:43:0f:3d:dd:35:11:8a:3f:34:7b:06:66:c0:8d:
         72:64:87:01:b1:f7:82:3d:f8:6f:cc:f6:9e:c4:07:26:9b:33:
         38:97:26:9b:89:a3:a1:5b:45:dc:ed:6f:57:13:2c:33:24:be:
         8f:f7:2e:30:10:f1:f4:52:e1:e4:06:d2:4a:d6:dc:81:6a:9b:
         f9:60:88:e2:9e:4b:0b:3a:5c:f0:b5:bf:8f:1d:ae:9f:f1:85:
         5a:28:91:90:ff:05:d4:98:c8:dc:01:1a:01:9d:8b:bd:db:70:
         39:fa:6c:e1:ea:f4:a0:7d:1a:24:15:99:96:0c:bf:b5:ab:98:
         fa:c1:ca:28:2f:0c:63:81:56:2e:8f:73:b9:1c:e1:88:49:f4:
         6a:97:22:92:b3:17:cc:ae:fa:e3:45:dd:2c:0a:56:09:d9:84:
         e4:3a:51:a2:f5:ea:f8:9d:99:9b:55:7b:55:c8:b1:6a:d0:9d:
         5e:23:a2:37:59:94:31:51:f6:c1:02:b2:b3:dc:0a:4b:5e:d5:
         87:8a:76:73:32:80:c5:1f:c6:53:51:c3:d7:b0:c2:3a:81:1f:
         2c:6a:a9:3c:ee:19:2a:ab:19:d4:19:ac:ae:60:74:89:2f:14:
         43:86:11:45:56:96:ca:56:ea:00:62:13:97:79:67:86:a8:c0:
         82:64:ab:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----