Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3135312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3135312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Uu7p+H5bDLUqiKpA7SM1bwFmdrX/jZpMy7vhBR7a1S4=
Subject key identifier:   2F:F3:6E:DD:2B:07:FA:E0:DB:A6:2B:2B:81:D9:69:CC:10:12:54:F5
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       675E06D1AB5E66F3480785865E0CD1E932A56018
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3135312e302f32342d3234203d3e203137343531.roa
Signing time:             Fri 14 Jan 2022 02:00:07 +0000
ROA not before:           Fri 14 Jan 2022 01:55:07 +0000
ROA not after:            Sat 14 Jan 2023 02:00:07 +0000
asID:                     17451
IP address blocks:        182.253.151.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5e:06:d1:ab:5e:66:f3:48:07:85:86:5e:0c:d1:e9:32:a5:60:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jan 14 01:55:07 2022 GMT
            Not After : Jan 14 02:00:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:06:bf:f5:0a:fa:a1:d5:0c:a4:ac:de:47:
                    63:d8:e5:70:b3:50:7c:80:89:a5:5d:10:51:d8:ca:
                    f5:3a:af:2c:2a:2e:64:03:65:2c:7c:7a:74:f7:4f:
                    de:6b:68:76:39:b0:fc:ae:20:85:16:66:19:46:fd:
                    fe:ad:0e:45:9b:50:e0:72:f0:77:44:2d:6a:7f:d0:
                    50:0a:8c:b7:c4:8f:29:18:74:82:83:0b:d9:82:41:
                    6c:40:fc:0e:5b:31:44:3c:7d:57:67:9c:86:e2:94:
                    c6:8e:59:3f:a6:43:a3:be:c7:96:4f:dd:bb:98:2f:
                    2e:05:fd:d2:f5:72:20:e9:6f:e5:c4:6d:71:47:80:
                    e7:0d:05:a6:60:3b:30:c3:1c:12:f5:a8:fd:03:58:
                    5e:dd:c7:38:2e:d9:15:67:fd:9e:53:c2:de:18:69:
                    6d:e2:ff:dc:f6:e6:b8:40:c1:dd:75:c0:72:b2:95:
                    31:78:ad:08:dc:ed:1c:c8:d0:da:4e:1b:bf:93:27:
                    f6:96:c6:7a:40:1a:78:e4:e1:a6:4e:98:f4:33:a3:
                    58:03:1b:e4:c9:1a:e8:e2:ae:7b:d3:5d:d2:93:57:
                    81:cf:6b:00:46:e5:0f:7b:5c:ab:16:21:c6:27:70:
                    74:14:14:6f:4f:63:81:4b:e0:a3:7f:77:71:3d:fa:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F3:6E:DD:2B:07:FA:E0:DB:A6:2B:2B:81:D9:69:CC:10:12:54:F5
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3135312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:23:50:ad:ff:8e:e1:1c:f3:aa:6d:68:86:bd:7c:89:47:f9:
         21:b0:f6:69:9c:40:21:1b:1f:3c:d4:8e:a8:57:2a:09:ec:5d:
         34:c2:db:9c:10:14:65:dd:eb:79:3b:6a:2c:3b:2c:f6:29:f1:
         3f:be:7b:c8:ce:83:92:23:9e:c0:1d:d7:1b:5a:2e:44:fa:db:
         12:22:77:47:c1:69:eb:77:2d:c9:8c:9e:b1:bd:9f:8a:d9:e2:
         f5:9b:1d:ce:43:53:03:59:19:77:ea:11:63:91:46:26:7b:f4:
         74:71:92:50:21:97:85:2b:be:4b:ce:c0:88:bb:53:68:6c:70:
         6e:d6:56:4c:19:31:90:10:67:cf:ae:92:3e:84:f6:f6:93:55:
         b3:35:dc:70:43:a3:9b:1a:7b:40:f1:4c:cc:2c:c6:00:b9:5c:
         34:7a:1f:a0:4d:6e:e3:b5:e3:c7:a1:49:67:12:9d:1a:79:c6:
         ad:22:d8:6e:b2:80:fa:73:ef:cc:30:71:81:a3:8c:de:c6:24:
         9b:46:cd:b4:6c:db:ef:1f:00:a4:62:80:48:73:e0:41:f4:3b:
         75:5f:68:cd:f9:0e:c2:58:dd:7d:ec:a2:b5:4c:4d:72:d3:02:
         07:0c:49:ea:86:ec:eb:cf:ed:b9:29:59:7d:75:92:cf:10:3d:
         61:35:a9:56
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUZ14G0ateZvNIB4WGXgzR6TKlYBgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMjAxMTQwMTU1MDdaFw0yMzAxMTQwMjAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzU0RjA2QkZGNTBBRkFBMUQ1
MENBNEFDREU0NzYzRDhFNTcwQjM1MDdDODA4OUE1NUQxMDUxRDhDQUY1M0FBRjJD
MkEyRTY0MDM2NTJDN0M3QTc0Rjc0RkRFNkI2ODc2MzlCMEZDQUUyMDg1MTY2NjE5
NDZGREZFQUQwRTQ1OUI1MEUwNzJGMDc3NDQyRDZBN0ZEMDUwMEE4Q0I3QzQ4RjI5
MTg3NDgyODMwQkQ5ODI0MTZDNDBGQzBFNUIzMTQ0M0M3RDU3Njc5Qzg2RTI5NEM2
OEU1OTNGQTY0M0EzQkVDNzk2NEZEREJCOTgyRjJFMDVGREQyRjU3MjIwRTk2RkU1
QzQ2RDcxNDc4MEU3MEQwNUE2NjAzQjMwQzMxQzEyRjVBOEZEMDM1ODVFRERDNzM4
MkVEOTE1NjdGRDlFNTNDMkRFMTg2OTZERTJGRkRDRjZFNkI4NDBDMURENzVDMDcy
QjI5NTMxNzhBRDA4RENFRDFDQzhEMERBNEUxQkJGOTMyN0Y2OTZDNjdBNDAxQTc4
RTRFMUE2NEU5OEY0MzNBMzU4MDMxQkU0QzkxQUU4RTJBRTdCRDM1REQyOTM1Nzgx
Q0Y2QjAwNDZFNTBGN0I1Q0FCMTYyMUM2Mjc3MDc0MTQxNDZGNEY2MzgxNEJFMEEz
N0Y3NzcxM0RGQTlDMEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxU8Gv/UK+qHVDKSs3kdj2OVws1B8gImlXRBR2Mr1Oq8sKi5kA2Us
fHp090/ea2h2ObD8riCFFmYZRv3+rQ5Fm1DgcvB3RC1qf9BQCoy3xI8pGHSCgwvZ
gkFsQPwOWzFEPH1XZ5yG4pTGjlk/pkOjvseWT927mC8uBf3S9XIg6W/lxG1xR4Dn
DQWmYDswwxwS9aj9A1he3cc4LtkVZ/2eU8LeGGlt4v/c9ua4QMHddcByspUxeK0I
3O0cyNDaThu/kyf2lsZ6QBp45OGmTpj0M6NYAxvkyRro4q57013Sk1eBz2sARuUP
e1yrFiHGJ3B0FBRvT2OBS+Cjf3dxPfqcDQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FC/zbt0rB/rg26YrK4HZacwQElT1MB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9lzANBgkqhkiG9w0BAQsFAAOCAQEAYiNQrf+O
4Rzzqm1ohr18iUf5IbD2aZxAIRsfPNSOqFcqCexdNMLbnBAUZd3reTtqLDss9inx
P757yM6DkiOewB3XG1ouRPrbEiJ3R8Fp63ctyYyesb2fitni9ZsdzkNTA1kZd+oR
Y5FGJnv0dHGSUCGXhSu+S87AiLtTaGxwbtZWTBkxkBBnz66SPoT29pNVszXccEOj
mxp7QPFMzCzGALlcNHofoE1u47Xjx6FJZxKdGnnGrSLYbrKA+nPvzDBxgaOM3sYk
m0bNtGzb7x8ApGKASHPgQfQ7dV9ozfkOwljdfeyitUxNctMCBwxJ6obs68/tuSlZ
fXWSzxA9YTWpVg==
-----END CERTIFICATE-----