Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3139322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          JiiM3Cp7V0JjOPZDlznEamzTyAq/O6JfkrlRzTSVBkg=
Subject key identifier:   1E:51:B8:C6:8D:27:41:D6:18:9F:7D:3E:BD:DA:95:84:82:16:BA:F1
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       32DB2DE22D038278141B0B83B2FC9743D31A6ADA
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:21 +0000
ROA not before:           Wed 29 Sep 2021 23:55:21 +0000
ROA not after:            Fri 30 Sep 2022 00:00:21 +0000
asID:                     17451
IP address blocks:        182.253.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:db:2d:e2:2d:03:82:78:14:1b:0b:83:b2:fc:97:43:d3:1a:6a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:21 2021 GMT
            Not After : Sep 30 00:00:21 2022 GMT
        Subject: CN=3082010A0282010100BC57BC938F3497443A5F68C6C19900BE0E2355F449F13AF364599A4A7C8093E74EBF7670CF1E5BAD412FDFE1C36A41A55749D86CCFB7C2E8189E3A770301300E47F7F51B7D415E0AC177B7ECFBD4B21CFC8CBC3DAE3BF789AD50EA06EC8D1DFC30DE7FA9A4400C33793111623AD1ABE4927C66034EFB138334FC078F8AD1D16CC05D3477E69551E0F1792137BF336F73906D2079E522151583B9F73011CB8165466E5076724733EFE4238A536444E9CE2E1A77045872F224D4FADEA60F260DE74F9C7B111423624515730DF8BCBE0BAC1D67C52DD07B9810E4ED0A082B1DE43836B566342E466F3CF010B330653F613E424C7342D81C60192DCDA01ED65DD27B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:bc:93:8f:34:97:44:3a:5f:68:c6:c1:99:
                    00:be:0e:23:55:f4:49:f1:3a:f3:64:59:9a:4a:7c:
                    80:93:e7:4e:bf:76:70:cf:1e:5b:ad:41:2f:df:e1:
                    c3:6a:41:a5:57:49:d8:6c:cf:b7:c2:e8:18:9e:3a:
                    77:03:01:30:0e:47:f7:f5:1b:7d:41:5e:0a:c1:77:
                    b7:ec:fb:d4:b2:1c:fc:8c:bc:3d:ae:3b:f7:89:ad:
                    50:ea:06:ec:8d:1d:fc:30:de:7f:a9:a4:40:0c:33:
                    79:31:11:62:3a:d1:ab:e4:92:7c:66:03:4e:fb:13:
                    83:34:fc:07:8f:8a:d1:d1:6c:c0:5d:34:77:e6:95:
                    51:e0:f1:79:21:37:bf:33:6f:73:90:6d:20:79:e5:
                    22:15:15:83:b9:f7:30:11:cb:81:65:46:6e:50:76:
                    72:47:33:ef:e4:23:8a:53:64:44:e9:ce:2e:1a:77:
                    04:58:72:f2:24:d4:fa:de:a6:0f:26:0d:e7:4f:9c:
                    7b:11:14:23:62:45:15:73:0d:f8:bc:be:0b:ac:1d:
                    67:c5:2d:d0:7b:98:10:e4:ed:0a:08:2b:1d:e4:38:
                    36:b5:66:34:2e:46:6f:3c:f0:10:b3:30:65:3f:61:
                    3e:42:4c:73:42:d8:1c:60:19:2d:cd:a0:1e:d6:5d:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:51:B8:C6:8D:27:41:D6:18:9F:7D:3E:BD:DA:95:84:82:16:BA:F1
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:2a:5e:2e:41:89:2e:e2:1e:d6:27:99:e6:6c:45:8e:21:2b:
         de:d5:3e:e4:77:5a:ae:07:14:45:e8:43:6a:6e:a7:17:b8:67:
         e4:5c:5f:6a:2e:50:36:17:3f:76:6a:c3:27:3f:34:51:af:1e:
         61:e6:15:5d:5a:21:96:ed:bc:ed:22:a0:7f:25:8e:ac:ab:d5:
         84:7f:6e:83:a5:c9:61:0a:dd:26:7d:3e:34:3e:e7:e4:7a:99:
         76:0b:43:21:b2:18:67:ff:bf:62:5b:c3:1f:ea:64:d9:37:c5:
         b5:46:ba:54:d6:31:aa:fb:84:4e:d9:e8:69:4d:92:94:0d:8d:
         dc:bf:7e:bd:4f:6b:a1:89:52:cd:2b:ea:d4:94:0f:89:cc:d2:
         33:fa:d6:3d:9d:fd:53:a4:04:1e:58:b4:f5:c8:85:37:02:cc:
         31:9f:54:49:1c:ea:f1:01:6c:7d:af:93:30:82:16:93:d2:0c:
         e3:b4:4d:32:72:a9:7c:e4:fa:32:ae:9c:5f:b3:be:50:72:dd:
         e4:82:9b:ad:02:06:fd:dd:03:62:81:f9:53:1a:9b:4e:48:38:
         83:5d:43:a2:58:ce:53:1c:87:16:bd:b7:dc:86:31:2a:59:c6:
         fe:4f:7e:2c:9f:44:90:4a:c9:cc:a1:0a:b7:7a:bd:c7:91:2a:
         4b:43:3d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----