Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3232342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Pvjef0+1kCxbWClSKFvpAOz0oouZW+ECQXnnYiFkmJo=
Subject key identifier:   24:4B:ED:BA:16:07:18:6B:49:6D:87:E8:03:DD:94:07:36:6F:98:2A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3DAE6D27824C6040A94201D297B140888DFC18E6
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:31 +0000
ROA not before:           Wed 29 Sep 2021 23:55:31 +0000
ROA not after:            Fri 30 Sep 2022 00:00:31 +0000
asID:                     17451
IP address blocks:        182.253.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ae:6d:27:82:4c:60:40:a9:42:01:d2:97:b1:40:88:8d:fc:18:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:31 2021 GMT
            Not After : Sep 30 00:00:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:d1:24:4b:9d:49:6b:de:f1:b6:62:8f:2f:
                    b8:34:99:34:31:a9:93:6f:1e:09:d7:ce:a3:bd:32:
                    19:47:f9:1b:c5:35:27:f8:49:c0:cc:05:21:c8:92:
                    c9:00:61:9a:7d:29:c7:93:d1:dc:54:ef:d0:8e:6d:
                    b5:b6:e9:80:4b:b8:38:c4:72:2d:a0:36:b4:91:92:
                    2c:f4:fd:30:1e:b8:b5:d4:91:8a:ff:f3:d5:ce:0f:
                    16:52:b5:26:ee:ba:62:c1:5b:72:85:9e:ee:d0:c1:
                    e3:d6:4a:0e:dd:ba:a3:f6:ec:13:73:b9:24:0e:b1:
                    1b:eb:ee:20:81:24:e1:12:e0:47:69:31:2a:75:20:
                    7e:c9:a0:45:cf:38:b9:89:c5:f4:13:3a:a4:aa:36:
                    dd:f2:31:6a:40:3a:c8:38:5c:59:29:95:8a:94:27:
                    7b:9e:04:e5:5d:da:28:d6:ff:59:69:0c:91:3b:56:
                    f1:05:f5:13:ca:e6:f3:04:36:92:ef:b5:d6:bd:51:
                    0e:9b:05:6d:0c:64:4f:ba:33:58:66:f8:34:d0:80:
                    c5:7a:19:b9:f9:58:ab:ab:69:ff:88:f2:32:aa:45:
                    b7:85:b0:92:eb:0a:d5:28:c5:fb:aa:ea:5e:b1:c6:
                    d9:c6:eb:c2:ce:4b:18:56:54:17:92:05:60:69:bd:
                    bb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4B:ED:BA:16:07:18:6B:49:6D:87:E8:03:DD:94:07:36:6F:98:2A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:80:2a:72:56:e9:a4:50:99:5f:65:de:ec:23:7e:0c:08:6d:
         ca:9c:84:37:14:5a:69:cf:d9:31:95:e3:40:e6:76:6a:24:34:
         ea:a9:90:9e:11:c8:8d:25:dc:93:3c:9b:8d:94:62:25:a3:9d:
         00:78:06:73:6d:0c:fd:e0:1d:55:35:4b:d3:31:06:53:7a:09:
         28:ba:c0:56:65:93:f8:ad:bf:0b:a1:3e:02:cd:e9:52:60:80:
         5d:4d:f6:5b:61:54:ce:e2:db:7e:ba:c6:9b:16:76:ba:80:16:
         03:8d:bc:b8:bd:d3:1e:d2:9a:74:51:a8:8c:42:ab:19:17:c5:
         c8:44:53:6c:eb:e9:f8:04:0b:fe:a9:44:42:43:0c:37:c4:e6:
         45:de:a4:c6:6e:22:42:58:52:85:18:71:e8:8d:c7:a8:44:1d:
         1f:0a:65:ce:e0:73:ea:b0:75:3f:28:d1:58:1a:2b:e3:5a:c7:
         e3:7f:aa:75:26:a5:fc:40:4b:37:4b:1b:79:92:ff:89:da:68:
         83:b4:23:70:2b:15:18:99:6b:c8:c3:78:01:09:52:4f:95:2d:
         1f:54:0e:20:e4:f5:d6:52:96:7f:de:a0:8f:85:50:e1:63:cb:
         ff:dc:32:27:a1:69:fd:21:df:54:47:a3:53:88:49:19:b5:e7:
         78:8a:48:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----