Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3138352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          T2lsCKD71nqGeHi7JnRdbQ64qtvxZ26ASM8JteCsk7Q=
Subject key identifier:   57:BC:1D:31:9E:6C:83:51:6E:A0:DE:D9:35:00:DA:94:42:CA:4B:92
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2AF61C4C93830EE10DE1250DD315A6288E379F2B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:12 +0000
ROA not before:           Wed 29 Sep 2021 23:56:12 +0000
ROA not after:            Fri 30 Sep 2022 00:01:12 +0000
asID:                     17451
IP address blocks:        182.253.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f6:1c:4c:93:83:0e:e1:0d:e1:25:0d:d3:15:a6:28:8e:37:9f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:12 2021 GMT
            Not After : Sep 30 00:01:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:38:09:99:30:e5:9c:01:d7:e5:bf:06:e3:
                    44:eb:57:ce:db:40:66:26:03:10:b6:1d:1e:c8:ec:
                    5d:ca:7b:db:03:22:0e:c6:af:5a:02:d0:db:c1:cd:
                    f1:66:16:b9:6d:10:b7:c8:b0:03:c0:eb:fe:21:95:
                    d8:41:10:5a:dd:90:96:20:22:7c:3c:45:d1:94:1b:
                    3b:83:ad:fa:87:03:e7:b1:0a:81:1c:d4:68:22:88:
                    5f:5c:62:96:d5:05:e2:3b:b2:c0:73:42:21:8b:dd:
                    b6:c9:68:6d:d0:5a:f4:d2:7d:63:40:c3:14:40:6e:
                    a0:22:69:18:42:16:4e:81:92:2b:89:5e:5c:02:17:
                    25:c8:76:dd:d3:32:24:cf:a2:f6:18:76:c4:b9:4d:
                    65:17:42:2d:a5:09:b8:de:ea:18:93:8a:09:2b:b8:
                    b4:13:aa:5c:78:29:60:48:49:27:96:7e:7e:00:ff:
                    63:e6:07:9b:29:a6:8e:8b:bd:68:00:ae:f4:4e:7e:
                    2b:ed:03:92:1a:ce:67:53:28:39:95:6e:1e:ce:c4:
                    3c:2e:25:20:92:44:89:0b:26:5e:8a:39:8d:e5:e5:
                    bc:62:26:32:66:ce:b9:fe:35:6f:0a:b0:a9:74:ce:
                    72:09:d3:01:b0:46:36:67:bf:50:8a:a0:b4:bc:4d:
                    27:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BC:1D:31:9E:6C:83:51:6E:A0:DE:D9:35:00:DA:94:42:CA:4B:92
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:39:c9:60:1d:82:6b:e2:4d:39:c8:86:41:af:1e:d1:47:9f:
         55:cb:c6:e2:73:ce:1e:cd:4f:1f:76:56:1e:a4:5f:98:5a:45:
         8b:5e:5f:08:58:8a:47:2e:b6:5c:59:2e:45:16:cf:28:71:ea:
         62:e3:7f:a3:24:19:27:fb:d6:58:ac:c9:f9:f6:ac:67:c7:1c:
         0e:1c:d2:dc:7b:d3:0f:a8:c7:df:24:3d:ef:31:c9:68:00:23:
         87:4b:7d:3e:cc:1c:9f:1b:61:a0:a3:f3:07:54:e9:57:c2:25:
         f8:4d:07:0c:18:8b:85:41:35:6a:91:87:5f:85:2d:61:b4:7f:
         8d:ea:da:6c:22:44:01:80:4e:86:c2:69:43:fd:11:f9:f7:7e:
         2c:29:52:9d:7d:97:58:6e:7d:fe:37:c2:50:38:c5:70:28:6a:
         ae:6f:0f:23:18:04:c2:26:5d:04:0b:94:9d:c8:ff:d8:76:18:
         97:46:b8:75:37:be:8c:ad:cc:8d:1b:79:37:de:3f:71:58:80:
         70:43:58:6b:18:79:1a:f7:e1:47:25:f5:6a:34:2e:f9:e4:58:
         e5:e9:06:1f:13:59:11:5b:c7:e2:5c:30:40:08:88:93:05:6e:
         b8:29:e7:56:46:37:27:bd:91:26:46:4b:5e:da:ff:91:96:3b:
         1f:18:e2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----