Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e35382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          NZEcFWUBkQseVzYznsXiGbHYd0oDDkMjJU20rWG8WdY=
Subject key identifier:   62:A4:19:A3:0D:3F:1F:03:17:27:DF:C2:09:66:24:DD:20:9E:7E:F0
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4966D9443AF84C4F7C93D17FCE5A09B39C3BECEE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:01 +0000
ROA not before:           Wed 29 Sep 2021 23:56:01 +0000
ROA not after:            Fri 30 Sep 2022 00:01:01 +0000
asID:                     17451
IP address blocks:        182.253.58.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:66:d9:44:3a:f8:4c:4f:7c:93:d1:7f:ce:5a:09:b3:9c:3b:ec:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:01 2021 GMT
            Not After : Sep 30 00:01:01 2022 GMT
        Subject: CN=3082010A0282010100C042E456FCA34E52527F8E88199E51D45B255702BB1CE9244F3467BCA3691771B58E276ED1111131337765EB96AE658CE2969BF2AA1F22B39CFE779C701AF44D34D937283CE61C320A0C3436EB3F0120BFC49C617962142B3383476AB1CC9A3603526D5F8C4F3B2BF92F003F0E78B2118A102D9B6A1B613FFB380D005567840E513BDB1FF810B50D4969DBA42F1260D1B66E8766D107A864009E82398712894B956FD8EDF9D494AAFB2DC4954C78D82DA5794E66A3DE1B20EE7A259BCC38004A158C19F4F0A21D3110EA34936E71D30A0B37E6FF5009FD5A852A020EF5DF0150E9EBC97618A496AD5780B66763124B8C8F9232E97A42F5A3F615A77F3583429D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:42:e4:56:fc:a3:4e:52:52:7f:8e:88:19:9e:
                    51:d4:5b:25:57:02:bb:1c:e9:24:4f:34:67:bc:a3:
                    69:17:71:b5:8e:27:6e:d1:11:11:31:33:77:65:eb:
                    96:ae:65:8c:e2:96:9b:f2:aa:1f:22:b3:9c:fe:77:
                    9c:70:1a:f4:4d:34:d9:37:28:3c:e6:1c:32:0a:0c:
                    34:36:eb:3f:01:20:bf:c4:9c:61:79:62:14:2b:33:
                    83:47:6a:b1:cc:9a:36:03:52:6d:5f:8c:4f:3b:2b:
                    f9:2f:00:3f:0e:78:b2:11:8a:10:2d:9b:6a:1b:61:
                    3f:fb:38:0d:00:55:67:84:0e:51:3b:db:1f:f8:10:
                    b5:0d:49:69:db:a4:2f:12:60:d1:b6:6e:87:66:d1:
                    07:a8:64:00:9e:82:39:87:12:89:4b:95:6f:d8:ed:
                    f9:d4:94:aa:fb:2d:c4:95:4c:78:d8:2d:a5:79:4e:
                    66:a3:de:1b:20:ee:7a:25:9b:cc:38:00:4a:15:8c:
                    19:f4:f0:a2:1d:31:10:ea:34:93:6e:71:d3:0a:0b:
                    37:e6:ff:50:09:fd:5a:85:2a:02:0e:f5:df:01:50:
                    e9:eb:c9:76:18:a4:96:ad:57:80:b6:67:63:12:4b:
                    8c:8f:92:32:e9:7a:42:f5:a3:f6:15:a7:7f:35:83:
                    42:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A4:19:A3:0D:3F:1F:03:17:27:DF:C2:09:66:24:DD:20:9E:7E:F0
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:28:49:32:fd:79:aa:56:ac:ec:93:a9:f8:17:5a:8e:bf:50:
         32:1b:77:0d:a3:fc:28:fa:e8:7b:9f:cc:a0:8c:eb:1e:54:f0:
         54:f9:0e:23:e9:e6:1b:30:cb:2f:1d:85:e1:87:0c:7b:ad:bb:
         21:b5:6b:ff:2e:9d:02:5e:c7:57:0c:84:77:29:ba:6b:40:96:
         5d:53:b7:85:e3:7d:9c:44:1f:92:7d:07:76:a6:46:41:6b:e4:
         9c:bf:be:7b:0f:01:e8:fe:a7:14:f8:36:c9:7b:9a:be:64:6a:
         97:06:07:0e:d5:4e:2c:d1:91:ba:c1:0b:85:72:c6:90:42:7d:
         e9:4b:4a:3a:86:e7:30:f3:9a:b2:60:bb:6e:6d:c8:84:ba:3b:
         9f:28:f6:10:41:71:64:c6:6f:b3:d7:6e:02:ed:34:af:a7:61:
         2b:dc:6d:ef:af:22:84:da:e2:9a:30:96:d2:51:a7:72:4f:c7:
         0e:a6:47:96:b8:e8:35:67:f6:5e:e9:a0:71:df:10:8d:6b:31:
         18:4d:db:99:57:a9:76:ea:bf:56:25:92:94:6b:25:10:12:69:
         26:ca:b5:4b:ed:e3:e4:e6:d7:98:f4:f4:ab:a1:8c:75:85:8d:
         a1:05:0e:cf:23:68:a9:4f:0d:6d:21:47:19:38:c3:71:ed:ca:
         23:86:60:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----