Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3231382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          AgZrN2+vGbVfAYQ4N/iIMwmkiSl5FBieyvL49faaFK0=
Subject key identifier:   95:E9:3B:B3:D8:92:A4:80:2C:52:4F:27:40:08:54:DD:DF:9D:E0:8F
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       19E39147E05C4F5E14281783D6797399C32A3916
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:12 +0000
ROA not before:           Wed 29 Sep 2021 23:55:12 +0000
ROA not after:            Fri 30 Sep 2022 00:00:12 +0000
asID:                     17451
IP address blocks:        182.253.218.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e3:91:47:e0:5c:4f:5e:14:28:17:83:d6:79:73:99:c3:2a:39:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:12 2021 GMT
            Not After : Sep 30 00:00:12 2022 GMT
        Subject: CN=3082010A0282010100A704257E1450A41ECBD844FF71C8796C68423473F77DFEC71FB32870B3A58E3CF06C6AACEC98AADCAB261A3E7F238B9A7134160C502561437989112BAA8CECA46DF39C9020089A32B97B002CBB28B9F086608F9A2DEB091A19E6F62B825DA1CCED2EB5C50A85A398D44F1989071084150BF7F831D202DC448B90227E48483D8E1AE7EA132F27D26675A3B484FC192C7C20C8941F6373848C7C4A6080B52F1AE6FB032A0DA0EF86FBA2CAE4D6C474382452907F6FCF95ED5EDEBA0892011A87894AAC47803B13B6F6939BFBC0D3DC91D760273D59A086F590D4FFED6608FAF665764A28088A631B9CCFD1F93B350AE391981A6789E35BD95EDF996D34330D0B1D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:25:7e:14:50:a4:1e:cb:d8:44:ff:71:c8:
                    79:6c:68:42:34:73:f7:7d:fe:c7:1f:b3:28:70:b3:
                    a5:8e:3c:f0:6c:6a:ac:ec:98:aa:dc:ab:26:1a:3e:
                    7f:23:8b:9a:71:34:16:0c:50:25:61:43:79:89:11:
                    2b:aa:8c:ec:a4:6d:f3:9c:90:20:08:9a:32:b9:7b:
                    00:2c:bb:28:b9:f0:86:60:8f:9a:2d:eb:09:1a:19:
                    e6:f6:2b:82:5d:a1:cc:ed:2e:b5:c5:0a:85:a3:98:
                    d4:4f:19:89:07:10:84:15:0b:f7:f8:31:d2:02:dc:
                    44:8b:90:22:7e:48:48:3d:8e:1a:e7:ea:13:2f:27:
                    d2:66:75:a3:b4:84:fc:19:2c:7c:20:c8:94:1f:63:
                    73:84:8c:7c:4a:60:80:b5:2f:1a:e6:fb:03:2a:0d:
                    a0:ef:86:fb:a2:ca:e4:d6:c4:74:38:24:52:90:7f:
                    6f:cf:95:ed:5e:de:ba:08:92:01:1a:87:89:4a:ac:
                    47:80:3b:13:b6:f6:93:9b:fb:c0:d3:dc:91:d7:60:
                    27:3d:59:a0:86:f5:90:d4:ff:ed:66:08:fa:f6:65:
                    76:4a:28:08:8a:63:1b:9c:cf:d1:f9:3b:35:0a:e3:
                    91:98:1a:67:89:e3:5b:d9:5e:df:99:6d:34:33:0d:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E9:3B:B3:D8:92:A4:80:2C:52:4F:27:40:08:54:DD:DF:9D:E0:8F
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:5e:f0:fc:05:61:9d:6d:e3:ca:c8:0f:46:3e:a6:2b:96:fa:
         05:ea:23:df:e1:8d:3f:8c:7e:ec:14:15:34:a0:34:50:04:34:
         bd:7a:2b:01:f7:a3:5b:0e:7f:d2:16:66:ae:02:66:50:50:cc:
         62:d1:4a:2d:4a:d4:23:52:8a:46:a3:a9:8e:55:9b:dc:52:19:
         99:1a:83:0e:df:d0:43:39:4c:50:8b:3d:dd:51:d6:93:74:73:
         43:1f:1a:0c:94:13:a9:f1:b0:6d:42:dd:12:7d:bb:d4:7d:af:
         7a:a6:98:e9:e2:90:2b:75:d0:4e:5d:2b:5f:b5:ef:7c:c5:9f:
         0e:f4:2e:39:32:fb:57:90:26:1c:22:2c:f7:2f:60:60:50:43:
         95:7b:fb:a8:54:68:0d:3d:80:5f:bb:fc:23:e8:41:36:72:8b:
         aa:ca:4d:6a:1b:83:85:61:21:e2:bd:b7:fd:74:b1:1b:f5:a9:
         e2:0b:29:01:f7:e8:da:35:9c:b3:d5:5d:18:4c:5d:a5:3c:88:
         31:f5:a2:a1:7e:60:1e:79:c5:89:a3:ff:a6:5d:87:e1:a7:5c:
         ae:f7:48:cc:c4:6a:71:07:f1:f3:69:84:f1:08:6e:e2:30:fd:
         bb:fd:80:6d:6f:0e:59:fb:94:9c:2c:e5:dd:07:66:bf:a3:2b:
         7d:02:8e:e6
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUGeORR+BcT14UKBeD1nlzmcMqORYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MTJaFw0yMjA5MzAwMDAwMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTcwNDI1N0UxNDUwQTQxRUNC
RDg0NEZGNzFDODc5NkM2ODQyMzQ3M0Y3N0RGRUM3MUZCMzI4NzBCM0E1OEUzQ0Yw
NkM2QUFDRUM5OEFBRENBQjI2MUEzRTdGMjM4QjlBNzEzNDE2MEM1MDI1NjE0Mzc5
ODkxMTJCQUE4Q0VDQTQ2REYzOUM5MDIwMDg5QTMyQjk3QjAwMkNCQjI4QjlGMDg2
NjA4RjlBMkRFQjA5MUExOUU2RjYyQjgyNURBMUNDRUQyRUI1QzUwQTg1QTM5OEQ0
NEYxOTg5MDcxMDg0MTUwQkY3RjgzMUQyMDJEQzQ0OEI5MDIyN0U0ODQ4M0Q4RTFB
RTdFQTEzMkYyN0QyNjY3NUEzQjQ4NEZDMTkyQzdDMjBDODk0MUY2MzczODQ4QzdD
NEE2MDgwQjUyRjFBRTZGQjAzMkEwREEwRUY4NkZCQTJDQUU0RDZDNDc0MzgyNDUy
OTA3RjZGQ0Y5NUVENUVERUJBMDg5MjAxMUE4Nzg5NEFBQzQ3ODAzQjEzQjZGNjkz
OUJGQkMwRDNEQzkxRDc2MDI3M0Q1OUEwODZGNTkwRDRGRkVENjYwOEZBRjY2NTc2
NEEyODA4OEE2MzFCOUNDRkQxRjkzQjM1MEFFMzkxOTgxQTY3ODlFMzVCRDk1RURG
OTk2RDM0MzMwRDBCMUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApwQlfhRQpB7L2ET/cch5bGhCNHP3ff7HH7MocLOljjzwbGqs7Jiq
3KsmGj5/I4uacTQWDFAlYUN5iRErqozspG3znJAgCJoyuXsALLsoufCGYI+aLesJ
Ghnm9iuCXaHM7S61xQqFo5jUTxmJBxCEFQv3+DHSAtxEi5AifkhIPY4a5+oTLyfS
ZnWjtIT8GSx8IMiUH2NzhIx8SmCAtS8a5vsDKg2g74b7osrk1sR0OCRSkH9vz5Xt
Xt66CJIBGoeJSqxHgDsTtvaTm/vA09yR12AnPVmghvWQ1P/tZgj69mV2SigIimMb
nM/R+Ts1CuORmBpnieNb2V7fmW00Mw0LHQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FJXpO7PYkqSALFJPJ0AIVN3fneCPMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzIzMTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb92jANBgkqhkiG9w0BAQsFAAOCAQEAkV7w/AVh
nW3jysgPRj6mK5b6Beoj3+GNP4x+7BQVNKA0UAQ0vXorAfejWw5/0hZmrgJmUFDM
YtFKLUrUI1KKRqOpjlWb3FIZmRqDDt/QQzlMUIs93VHWk3RzQx8aDJQTqfGwbULd
En271H2veqaY6eKQK3XQTl0rX7XvfMWfDvQuOTL7V5AmHCIs9y9gYFBDlXv7qFRo
DT2AX7v8I+hBNnKLqspNahuDhWEh4r23/XSxG/Wp4gspAffo2jWcs9VdGExdpTyI
MfWioX5gHnnFiaP/pl2H4adcrvdIzMRqcQfx82mE8Qhu4jD9u/2AbW8OWfuUnCzl
3Qdmv6MrfQKO5g==
-----END CERTIFICATE-----