Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3138342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          a1cDILa+rLAtMbx+qM9R2MCPB/paBabE7mLqgf8TqY0=
Subject key identifier:   14:D0:13:F0:42:81:D2:2A:5A:40:B8:B6:52:52:FB:69:E7:24:C9:96
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       011061DE4FBAE1B462DF6529A8D0000E092A67D2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:20 +0000
ROA not before:           Wed 29 Sep 2021 23:56:20 +0000
ROA not after:            Fri 30 Sep 2022 00:01:20 +0000
asID:                     17451
IP address blocks:        182.253.184.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:10:61:de:4f:ba:e1:b4:62:df:65:29:a8:d0:00:0e:09:2a:67:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:20 2021 GMT
            Not After : Sep 30 00:01:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:e4:10:ef:3d:8f:3b:61:70:80:8e:fb:e5:
                    2a:72:8b:6c:f8:27:57:77:dd:7a:e1:5d:3d:eb:45:
                    3a:04:91:21:de:7c:e0:a7:04:12:c7:2f:cc:89:41:
                    34:58:01:3f:76:d6:52:4e:b5:73:d3:ac:67:1f:bd:
                    46:39:61:b5:1b:83:50:74:28:60:ac:77:b0:bd:0d:
                    d1:97:b6:36:a6:be:26:b7:72:62:f3:d3:58:22:af:
                    fd:ea:e0:a3:ff:73:5a:9f:fe:4c:2d:6a:b9:54:31:
                    bf:c4:00:88:82:fd:b7:d1:c6:7f:96:c8:e3:ae:d0:
                    4f:d9:5a:f1:3a:20:b7:61:51:2f:a5:3a:09:d8:c7:
                    7a:4c:3a:db:cc:48:48:f8:8e:f1:34:9b:03:88:60:
                    81:bc:90:b4:80:e1:b6:db:27:48:d7:b1:16:50:ac:
                    9b:88:18:76:92:e3:53:cb:01:33:b5:ac:e3:37:63:
                    be:d9:bc:7b:4d:af:2a:ba:84:75:07:d5:ea:e5:9f:
                    8f:1d:5f:23:96:39:6c:34:52:52:dc:d6:40:ac:7d:
                    35:c6:c6:f5:0b:86:0c:4f:76:fd:4d:8d:52:18:56:
                    16:6b:a2:be:85:34:ae:ee:a1:6b:3a:24:f8:ab:53:
                    7e:0f:7f:8d:90:43:f9:4f:d9:cd:e3:54:9e:d3:37:
                    fe:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D0:13:F0:42:81:D2:2A:5A:40:B8:B6:52:52:FB:69:E7:24:C9:96
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:6a:9b:e3:33:06:da:3a:f4:02:72:34:a6:f9:3c:b8:cc:57:
         b3:3d:6b:79:ea:cb:2b:e9:f5:ae:59:6f:68:17:88:0b:98:1b:
         80:e0:03:63:b7:db:be:05:a1:24:d3:d7:61:a1:79:99:8b:8b:
         56:01:82:f5:02:78:8b:8d:13:5f:b3:88:3f:9b:41:59:78:84:
         0a:64:bc:1e:b4:58:54:38:4a:4f:bc:af:e5:bb:9d:a8:23:08:
         cc:61:e0:fc:76:29:ab:36:81:a1:43:af:09:e6:65:4f:68:3f:
         66:6c:f1:5c:04:64:44:a6:6b:9b:d7:3e:95:3d:a1:1f:1f:fa:
         5c:2c:b1:5c:f5:9e:49:e3:b2:9a:eb:b3:c7:92:88:99:ed:07:
         de:8f:4f:45:63:d1:0b:b6:b3:94:a0:76:6e:41:c3:e5:d5:7e:
         43:78:3b:22:c2:ba:f9:a2:8c:55:e9:f6:b8:62:3c:8c:5f:b7:
         51:b1:5c:cb:14:a7:00:8b:80:5b:4e:47:89:ca:04:de:94:f0:
         c8:20:65:2d:0d:f6:09:86:f9:f9:ab:cc:5e:f8:24:d6:df:f4:
         5e:56:f7:65:b1:fb:e7:9a:74:d0:72:fa:99:49:c2:6b:88:ee:
         78:6e:47:21:d6:5e:51:13:6b:c3:e4:e2:26:f1:80:18:23:16:
         97:28:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----