Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3138382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Y5nNTqrFqoEK4DZMc5wHxNED9OQUglN0er0SZI4fYx0=
Subject key identifier:   C9:EC:C4:65:8B:73:D5:79:55:7E:E9:F6:44:36:7A:59:A6:27:62:D8
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       629E49C4B362A1283C471754C4693DF662C69238
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:11 +0000
ROA not before:           Wed 29 Sep 2021 23:56:11 +0000
ROA not after:            Fri 30 Sep 2022 00:01:11 +0000
asID:                     17451
IP address blocks:        182.253.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9e:49:c4:b3:62:a1:28:3c:47:17:54:c4:69:3d:f6:62:c6:92:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:11 2021 GMT
            Not After : Sep 30 00:01:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:1c:cd:59:a6:38:d0:df:47:89:4f:b8:1d:
                    df:67:23:3c:18:d7:0b:90:a2:4f:e2:45:0d:0e:5e:
                    c8:dd:77:4c:ae:17:2f:b6:21:d4:27:32:91:f5:10:
                    9a:f5:e1:c0:2e:44:8a:9d:51:c7:b6:f5:c2:de:11:
                    f5:ad:a6:63:fc:c4:7f:da:90:dd:96:dc:b9:73:10:
                    8b:2a:7a:27:ae:31:c1:29:b6:52:7f:d0:16:aa:8c:
                    32:9d:12:27:42:70:fb:e4:04:72:0d:af:8a:1c:7f:
                    8c:f9:98:45:79:c0:64:68:5c:48:3f:89:2f:ca:46:
                    f0:cf:47:d0:a9:5f:40:a4:74:f1:6c:82:2c:57:f1:
                    68:38:b5:8a:de:78:7b:14:8d:b8:35:f2:7c:0c:4f:
                    31:ab:14:7a:46:5e:b1:96:99:ae:15:2c:84:4b:5b:
                    38:76:34:39:96:2a:75:b1:a4:e7:d5:b7:31:8c:33:
                    ca:e5:8a:a7:ad:a0:00:e7:cf:34:af:0a:5a:86:09:
                    e0:7e:cb:8b:26:71:5f:e9:9d:2a:1d:22:d7:62:0f:
                    c0:43:6b:d0:a7:6a:cf:0b:ac:19:b5:d5:c8:8e:6a:
                    30:0d:86:fb:25:5b:5d:c5:1a:fd:5d:0e:76:1c:38:
                    80:a5:ec:75:dc:72:5e:f5:eb:81:b0:07:5d:eb:99:
                    f6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EC:C4:65:8B:73:D5:79:55:7E:E9:F6:44:36:7A:59:A6:27:62:D8
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:0a:30:8a:89:5c:6f:04:e6:4f:a3:30:02:04:c4:ff:4a:f5:
         b1:0d:b1:bd:c8:78:db:b0:64:1e:7f:9d:61:72:2c:05:b9:8f:
         4a:50:13:1f:3a:ad:a6:ac:2c:9c:42:9f:0d:f5:2a:56:6f:6d:
         62:b8:4c:d0:8e:f7:bd:f2:04:cb:91:d9:14:b0:85:f6:2f:75:
         5f:55:45:11:63:06:e3:c4:83:da:92:80:dd:0d:3c:1f:31:2d:
         7b:1e:44:b7:65:bf:66:1f:84:64:ab:40:ae:c1:55:9f:d8:28:
         f6:c3:4e:26:6e:e2:32:8d:5d:5f:c2:6f:a7:25:02:4d:25:9c:
         9a:4c:0e:b1:8e:93:f6:02:a8:9a:64:52:ea:e1:6c:7d:ee:03:
         d0:bd:35:78:d7:03:b6:42:9a:64:49:65:0f:c5:fc:41:9a:a1:
         df:a6:ae:70:51:41:06:c7:e7:59:d5:ad:6b:af:c5:71:a8:eb:
         c8:5c:e6:eb:75:f8:96:96:27:dd:f2:6d:cc:85:85:8f:2e:cb:
         d0:7c:98:f7:a1:7f:13:85:ee:c6:44:df:cf:84:9f:a9:44:ec:
         e9:9e:e6:4d:52:c9:89:7d:f9:21:5d:0b:d0:b4:f7:e0:45:68:
         0e:cf:56:85:54:87:84:75:39:af:2b:59:4b:fe:9a:4a:b8:78:
         e9:47:83:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----