Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233362e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3233362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          hn7+bXwNmas7yvLNI8rmoQM+RxIs21OgIyhW6/ygP1c=
Subject key identifier:   C5:C5:79:92:32:F1:50:D4:3D:49:E7:E0:1C:AE:7B:13:BD:D6:12:38
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0897C253933A61821DAAD3CDCABAE60C1011BBBD
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:52 +0000
ROA not before:           Wed 29 Sep 2021 23:55:52 +0000
ROA not after:            Fri 30 Sep 2022 00:00:52 +0000
asID:                     17451
IP address blocks:        182.253.236.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:97:c2:53:93:3a:61:82:1d:aa:d3:cd:ca:ba:e6:0c:10:11:bb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:52 2021 GMT
            Not After : Sep 30 00:00:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c6:2f:b9:9b:83:6b:a4:de:55:8e:ce:eb:9e:
                    ba:d1:31:03:dd:44:45:30:63:fd:0c:70:4d:19:32:
                    7f:1d:99:c8:66:03:a3:36:a1:fd:7c:bb:86:d5:80:
                    63:a4:25:2c:e3:49:aa:a1:68:4a:ae:a4:d5:3c:5e:
                    66:45:6d:f6:40:1e:d3:f0:de:60:a7:8c:e0:82:cb:
                    11:99:09:4d:fe:c3:d2:63:68:0e:97:f6:c8:ed:43:
                    d1:ff:86:49:3d:94:47:17:80:dd:ea:09:7a:4a:fa:
                    01:db:b4:f7:52:84:1e:af:2e:d3:11:f0:19:bb:60:
                    7d:06:a5:59:05:d7:65:ff:2e:41:d8:96:19:af:ed:
                    7a:8e:e0:89:1c:28:d9:7e:94:cf:5a:fa:85:b5:57:
                    f7:4b:df:a9:ac:27:d2:42:ad:b1:5a:35:13:c3:7f:
                    0e:82:21:26:e2:0a:19:f0:01:79:3e:0f:8b:d1:2f:
                    46:0c:5d:0e:b2:3e:68:f3:a2:3b:a0:74:29:61:87:
                    78:2d:2b:12:cc:14:a6:1e:5e:b6:a9:55:70:66:51:
                    29:f0:fc:5b:d8:d0:88:42:4d:f2:89:c6:0b:8f:df:
                    c8:6f:21:bb:c5:80:f8:bf:7c:b6:21:71:d5:f1:5d:
                    31:d5:ed:3d:6b:26:c8:82:67:fd:4a:67:0d:4b:36:
                    d1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C5:79:92:32:F1:50:D4:3D:49:E7:E0:1C:AE:7B:13:BD:D6:12:38
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:2b:75:04:bd:74:e5:c4:c3:ad:cc:b1:52:57:c9:d9:df:2f:
         f5:58:3b:dc:81:d8:11:74:b7:8f:e4:28:5c:e3:62:4d:b7:82:
         11:f6:e5:c4:9e:7c:91:dd:cb:e3:d9:21:21:21:84:9f:47:cc:
         e3:35:71:78:bd:8e:ad:ae:0f:96:1d:23:ed:a7:0b:ab:e0:93:
         c8:1d:d7:0d:61:ee:b4:16:6d:a4:f1:81:a7:03:fd:73:57:d7:
         95:98:54:b9:4b:ac:03:8c:29:8c:a9:b7:6d:f0:3a:df:b1:af:
         2d:ce:91:30:6f:18:2c:9b:d2:77:8c:77:4f:4d:c9:75:2f:ad:
         ae:34:6b:71:47:09:65:46:3d:9b:93:18:a1:e3:cd:19:87:11:
         4e:96:38:85:d9:95:72:39:05:0d:4d:31:be:9f:80:91:67:29:
         41:95:96:c0:fe:bd:97:fd:72:2e:86:1c:d0:ef:50:c4:7e:f7:
         6e:dd:00:68:bb:39:8b:eb:ce:a4:ff:13:19:91:d2:ab:28:e8:
         54:ad:ea:6c:f3:0d:a2:53:d8:d3:91:90:4a:62:fd:cf:ab:43:
         36:c0:cf:6a:a7:f5:3f:5d:c6:fa:36:65:fb:e3:50:17:1c:b9:
         2e:9e:b1:6a:56:fe:e3:04:f9:24:ac:ec:0a:23:b1:04:e4:e8:
         bb:0b:de:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----