Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3136332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          frsX6FlK/eNUpX1SChHFWLd1kcrPC174qxrqIMBGkmU=
Subject key identifier:   15:C0:EC:E3:3A:87:72:A7:B4:E2:6D:8A:19:A5:48:ED:B0:9D:60:AF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       727651AFC06C1F933AEB66AAB49787F46E83CDB4
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:12 +0000
ROA not before:           Wed 29 Sep 2021 23:55:12 +0000
ROA not after:            Fri 30 Sep 2022 00:00:12 +0000
asID:                     17451
IP address blocks:        182.253.163.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:76:51:af:c0:6c:1f:93:3a:eb:66:aa:b4:97:87:f4:6e:83:cd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:12 2021 GMT
            Not After : Sep 30 00:00:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:06:28:08:92:11:e0:2d:cb:82:df:06:bd:32:
                    2a:4c:fc:36:2a:d9:41:92:9c:1c:cc:24:89:75:f2:
                    dd:20:93:9c:6d:92:5b:f2:4b:ad:ee:68:1b:a6:51:
                    88:25:35:a9:43:e0:e9:d6:4f:41:58:83:54:ec:69:
                    4e:f6:42:da:de:2c:55:cf:ff:39:84:e8:55:7b:6b:
                    d3:10:19:91:1d:b3:ec:a8:10:38:6b:fc:03:b9:ea:
                    40:27:34:92:cb:ba:8c:74:05:83:7c:c6:af:64:49:
                    19:18:9e:ce:ee:05:db:83:b9:27:c3:4f:74:7c:89:
                    0e:a7:ab:60:44:16:94:00:ac:02:61:e3:dd:aa:db:
                    96:ce:bc:80:16:db:d7:56:2d:1f:bb:80:61:41:22:
                    0d:f5:48:d0:c8:ae:3b:07:03:e0:c0:8a:e8:02:76:
                    e2:f0:2b:25:d3:01:af:e9:94:c7:cb:84:b5:8f:8d:
                    34:24:ed:1e:16:81:17:dc:34:6a:e5:11:df:d3:e6:
                    6c:c1:16:17:de:91:c1:bc:f6:d3:68:f6:86:87:63:
                    56:87:a6:ea:c9:52:ff:97:16:fd:d5:19:b8:3f:a3:
                    f7:20:25:13:03:83:6a:44:00:cb:c9:2e:00:fc:c2:
                    1d:49:c9:64:85:a2:08:fc:c7:ce:b6:d8:89:f1:35:
                    90:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C0:EC:E3:3A:87:72:A7:B4:E2:6D:8A:19:A5:48:ED:B0:9D:60:AF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:65:4a:0b:48:6f:1d:24:42:e5:c7:23:29:ae:4c:14:2e:b5:
         d8:0f:ce:ce:6a:7c:3b:b8:f9:6f:ef:f4:de:09:79:c7:5b:65:
         28:fe:fd:c3:3b:53:71:03:6e:90:5e:a5:5b:7e:ce:bb:e4:c5:
         32:4c:90:dd:6c:8b:26:3a:7e:28:ac:ee:ed:a1:b3:5d:da:55:
         a4:eb:61:ea:ec:e8:80:f0:fc:3e:4e:c4:d7:03:7d:21:37:97:
         cf:4f:51:94:af:c8:c7:cb:1e:ca:86:e3:64:92:db:7d:fd:22:
         c7:2b:a4:72:44:8d:a4:fe:ce:7f:22:50:f1:a1:7c:b2:c7:cf:
         b5:87:7d:3b:67:56:b2:76:34:51:99:05:27:48:8a:c5:0c:50:
         ba:9d:74:6b:2c:2d:9b:b0:00:3a:f8:66:32:1c:1a:3f:30:b1:
         28:7f:52:10:8d:f5:de:af:6a:02:02:b1:fb:93:4e:d5:07:e2:
         be:c3:dd:98:d4:bb:45:ed:cd:fa:31:ca:49:1b:e4:8c:1f:65:
         f2:fd:3a:34:da:70:42:46:16:61:c8:bc:24:8e:e8:24:95:62:
         39:8b:32:b7:0e:22:17:e1:d6:d8:b9:4e:7c:dd:82:4b:50:66:
         3a:8d:be:bb:ac:3c:9d:d4:aa:bb:df:0d:86:cd:41:6c:ba:b1:
         f3:66:a6:6d
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUcnZRr8BsH5M662aqtJeH9G6DzbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MTJaFw0yMjA5MzAwMDAwMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREEwNjI4MDg5MjExRTAyRENC
ODJERjA2QkQzMjJBNENGQzM2MkFEOTQxOTI5QzFDQ0MyNDg5NzVGMkREMjA5MzlD
NkQ5MjVCRjI0QkFERUU2ODFCQTY1MTg4MjUzNUE5NDNFMEU5RDY0RjQxNTg4MzU0
RUM2OTRFRjY0MkRBREUyQzU1Q0ZGRjM5ODRFODU1N0I2QkQzMTAxOTkxMURCM0VD
QTgxMDM4NkJGQzAzQjlFQTQwMjczNDkyQ0JCQThDNzQwNTgzN0NDNkFGNjQ0OTE5
MTg5RUNFRUUwNURCODNCOTI3QzM0Rjc0N0M4OTBFQTdBQjYwNDQxNjk0MDBBQzAy
NjFFM0REQUFEQjk2Q0VCQzgwMTZEQkQ3NTYyRDFGQkI4MDYxNDEyMjBERjU0OEQw
QzhBRTNCMDcwM0UwQzA4QUU4MDI3NkUyRjAyQjI1RDMwMUFGRTk5NEM3Q0I4NEI1
OEY4RDM0MjRFRDFFMTY4MTE3REMzNDZBRTUxMURGRDNFNjZDQzExNjE3REU5MUMx
QkNGNkQzNjhGNjg2ODc2MzU2ODdBNkVBQzk1MkZGOTcxNkZERDUxOUI4M0ZBM0Y3
MjAyNTEzMDM4MzZBNDQwMENCQzkyRTAwRkNDMjFENDlDOTY0ODVBMjA4RkNDN0NF
QjZEODg5RjEzNTkwNjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2gYoCJIR4C3Lgt8GvTIqTPw2KtlBkpwczCSJdfLdIJOcbZJb8kut
7mgbplGIJTWpQ+Dp1k9BWINU7GlO9kLa3ixVz/85hOhVe2vTEBmRHbPsqBA4a/wD
uepAJzSSy7qMdAWDfMavZEkZGJ7O7gXbg7knw090fIkOp6tgRBaUAKwCYePdqtuW
zryAFtvXVi0fu4BhQSIN9UjQyK47BwPgwIroAnbi8Csl0wGv6ZTHy4S1j400JO0e
FoEX3DRq5RHf0+ZswRYX3pHBvPbTaPaGh2NWh6bqyVL/lxb91Rm4P6P3ICUTA4Nq
RADLyS4A/MIdSclkhaII/MfOttiJ8TWQYQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FBXA7OM6h3KntOJtihmlSO2wnWCvMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzNjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9ozANBgkqhkiG9w0BAQsFAAOCAQEAAWVKC0hv
HSRC5ccjKa5MFC612A/Ozmp8O7j5b+/03gl5x1tlKP79wztTcQNukF6lW37Ou+TF
MkyQ3WyLJjp+KKzu7aGzXdpVpOth6uzogPD8Pk7E1wN9ITeXz09RlK/Ix8seyobj
ZJLbff0ixyukckSNpP7OfyJQ8aF8ssfPtYd9O2dWsnY0UZkFJ0iKxQxQup10aywt
m7AAOvhmMhwaPzCxKH9SEI313q9qAgKx+5NO1QfivsPdmNS7Re3N+jHKSRvkjB9l
8v06NNpwQkYWYci8JI7oJJViOYsytw4iF+HW2LlOfN2CS1BmOo2+u6w8ndSqu98N
hs1BbLqx82ambQ==
-----END CERTIFICATE-----