Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3235312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          M78aVM1MoZZ73F5FKgFhiHggd+5AxYJsfBJ25Pl5EtU=
Subject key identifier:   9F:82:58:BC:32:9F:C1:D3:81:15:87:0B:B0:D2:DC:30:58:5C:9C:04
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4CC212F0F97B9E774916FF233FCF9E781230B64B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:45 +0000
ROA not before:           Wed 29 Sep 2021 23:55:45 +0000
ROA not after:            Fri 30 Sep 2022 00:00:45 +0000
asID:                     17451
IP address blocks:        182.253.251.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c2:12:f0:f9:7b:9e:77:49:16:ff:23:3f:cf:9e:78:12:30:b6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:45 2021 GMT
            Not After : Sep 30 00:00:45 2022 GMT
        Subject: CN=3082010A0282010100CC35C0F7F203BB9487942454F1A833001DF96D76857387911B339654201F1EFB52802103AC882C6A13192B916CFAB91E905816E8C5953DFA863573231EE0A20A0F67158067AB90462E90297415A104D530AC774B00FAFBB4A4C945111F4856A867438F003F61CF4E5E71026351C42700689FBB8489A21A339634F73C1350923C8075B87A91922317F866C6EF3605063492BDB4B5A07BBE60527CD610FF4FA6F3F2D98C592424E72930ED4D9811CB2589F211EC46DC0A11DC79A551755DBE9479261498B9A2867001AE884BA8E97885BA895B5FD2E630D5D61890CA3F483E79241EEA3A842EBB80F9A4202B8784690937390F2D687CFA169EE6E2C64EDA7346D90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:c0:f7:f2:03:bb:94:87:94:24:54:f1:a8:
                    33:00:1d:f9:6d:76:85:73:87:91:1b:33:96:54:20:
                    1f:1e:fb:52:80:21:03:ac:88:2c:6a:13:19:2b:91:
                    6c:fa:b9:1e:90:58:16:e8:c5:95:3d:fa:86:35:73:
                    23:1e:e0:a2:0a:0f:67:15:80:67:ab:90:46:2e:90:
                    29:74:15:a1:04:d5:30:ac:77:4b:00:fa:fb:b4:a4:
                    c9:45:11:1f:48:56:a8:67:43:8f:00:3f:61:cf:4e:
                    5e:71:02:63:51:c4:27:00:68:9f:bb:84:89:a2:1a:
                    33:96:34:f7:3c:13:50:92:3c:80:75:b8:7a:91:92:
                    23:17:f8:66:c6:ef:36:05:06:34:92:bd:b4:b5:a0:
                    7b:be:60:52:7c:d6:10:ff:4f:a6:f3:f2:d9:8c:59:
                    24:24:e7:29:30:ed:4d:98:11:cb:25:89:f2:11:ec:
                    46:dc:0a:11:dc:79:a5:51:75:5d:be:94:79:26:14:
                    98:b9:a2:86:70:01:ae:88:4b:a8:e9:78:85:ba:89:
                    5b:5f:d2:e6:30:d5:d6:18:90:ca:3f:48:3e:79:24:
                    1e:ea:3a:84:2e:bb:80:f9:a4:20:2b:87:84:69:09:
                    37:39:0f:2d:68:7c:fa:16:9e:e6:e2:c6:4e:da:73:
                    46:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:82:58:BC:32:9F:C1:D3:81:15:87:0B:B0:D2:DC:30:58:5C:9C:04
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f6:73:a9:19:d1:5a:17:32:dc:e7:6e:3b:48:b4:5f:4a:5b:
         42:c8:29:e1:eb:87:9c:7d:5b:83:5f:94:11:4e:78:c6:c3:32:
         7e:8c:14:6e:87:66:41:e1:73:3d:24:2c:7e:88:7e:3a:ce:17:
         0e:80:1c:07:d4:49:97:0c:d4:bc:96:bb:66:06:78:41:ee:b3:
         8e:83:8f:71:4b:21:ef:72:e2:b4:c5:20:06:21:30:6d:cc:55:
         38:46:8b:39:c1:01:96:d6:00:1f:35:4d:6f:91:1e:66:6b:86:
         33:ea:b6:10:30:55:d2:f0:36:ef:4d:fa:ac:61:fe:05:9d:c6:
         fc:6f:6c:ce:8c:3f:01:18:e9:2d:4b:e8:97:54:e2:bd:e0:2d:
         3a:67:1e:52:0a:44:63:75:90:16:5c:51:1f:af:ce:d0:42:99:
         4c:ad:48:77:8d:69:04:54:43:8d:1c:ee:f5:62:e1:75:89:73:
         d7:3b:b1:ac:8f:30:69:e7:22:c9:de:89:b1:01:af:46:92:94:
         b9:13:26:a6:92:99:71:79:f4:77:47:9b:8c:67:7e:f3:0c:89:
         75:92:f5:e7:d5:c0:00:09:de:a4:71:88:b2:ba:dc:d8:e6:29:
         1c:bf:05:11:f9:7d:eb:1c:9b:c3:34:b6:ef:be:65:cc:ba:34:
         09:dc:e6:ae
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUTMIS8Pl7nndJFv8jP8+eeBIwtkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDVaFw0yMjA5MzAwMDAwNDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0MzNUMwRjdGMjAzQkI5NDg3
OTQyNDU0RjFBODMzMDAxREY5NkQ3Njg1NzM4NzkxMUIzMzk2NTQyMDFGMUVGQjUy
ODAyMTAzQUM4ODJDNkExMzE5MkI5MTZDRkFCOTFFOTA1ODE2RThDNTk1M0RGQTg2
MzU3MzIzMUVFMEEyMEEwRjY3MTU4MDY3QUI5MDQ2MkU5MDI5NzQxNUExMDRENTMw
QUM3NzRCMDBGQUZCQjRBNEM5NDUxMTFGNDg1NkE4Njc0MzhGMDAzRjYxQ0Y0RTVF
NzEwMjYzNTFDNDI3MDA2ODlGQkI4NDg5QTIxQTMzOTYzNEY3M0MxMzUwOTIzQzgw
NzVCODdBOTE5MjIzMTdGODY2QzZFRjM2MDUwNjM0OTJCREI0QjVBMDdCQkU2MDUy
N0NENjEwRkY0RkE2RjNGMkQ5OEM1OTI0MjRFNzI5MzBFRDREOTgxMUNCMjU4OUYy
MTFFQzQ2REMwQTExREM3OUE1NTE3NTVEQkU5NDc5MjYxNDk4QjlBMjg2NzAwMUFF
ODg0QkE4RTk3ODg1QkE4OTVCNUZEMkU2MzBENUQ2MTg5MENBM0Y0ODNFNzkyNDFF
RUEzQTg0MkVCQjgwRjlBNDIwMkI4Nzg0NjkwOTM3MzkwRjJENjg3Q0ZBMTY5RUU2
RTJDNjRFREE3MzQ2RDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzDXA9/IDu5SHlCRU8agzAB35bXaFc4eRGzOWVCAfHvtSgCEDrIgs
ahMZK5Fs+rkekFgW6MWVPfqGNXMjHuCiCg9nFYBnq5BGLpApdBWhBNUwrHdLAPr7
tKTJRREfSFaoZ0OPAD9hz05ecQJjUcQnAGifu4SJohozljT3PBNQkjyAdbh6kZIj
F/hmxu82BQY0kr20taB7vmBSfNYQ/0+m8/LZjFkkJOcpMO1NmBHLJYnyEexG3AoR
3HmlUXVdvpR5JhSYuaKGcAGuiEuo6XiFuolbX9LmMNXWGJDKP0g+eSQe6jqELruA
+aQgK4eEaQk3OQ8taHz6Fp7m4sZO2nNG2QIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FJ+CWLwyn8HTgRWHC7DS3DBYXJwEMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzIzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9+zANBgkqhkiG9w0BAQsFAAOCAQEATvZzqRnR
Whcy3OduO0i0X0pbQsgp4euHnH1bg1+UEU54xsMyfowUbodmQeFzPSQsfoh+Os4X
DoAcB9RJlwzUvJa7ZgZ4Qe6zjoOPcUsh73LitMUgBiEwbcxVOEaLOcEBltYAHzVN
b5EeZmuGM+q2EDBV0vA27036rGH+BZ3G/G9szow/ARjpLUvol1TiveAtOmceUgpE
Y3WQFlxRH6/O0EKZTK1Id41pBFRDjRzu9WLhdYlz1zuxrI8waeciyd6JsQGvRpKU
uRMmppKZcXn0d0ebjGd+8wyJdZL159XAAAnepHGIsrrc2OYpHL8FEfl96xybwzS2
775lzLo0Cdzmrg==
-----END CERTIFICATE-----