Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e36322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ENByC8Hpot8ipFz1OcZFy2p2mIJOV9MKQsPz0f588z8=
Subject key identifier:   27:AF:C3:50:4F:8B:25:B7:18:95:2B:49:2F:AF:88:08:7E:B0:4B:D7
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       156498432408E84E8D9E92851EC60652AFD23FD7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:21 +0000
ROA not before:           Wed 29 Sep 2021 23:55:21 +0000
ROA not after:            Fri 30 Sep 2022 00:00:21 +0000
asID:                     17451
IP address blocks:        182.253.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:64:98:43:24:08:e8:4e:8d:9e:92:85:1e:c6:06:52:af:d2:3f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:21 2021 GMT
            Not After : Sep 30 00:00:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3c:0e:a8:40:f0:ff:2a:2e:11:6f:a0:6c:bd:
                    82:f0:2a:2f:9e:9a:6a:dd:91:27:db:7a:be:67:60:
                    8f:4c:93:b0:b6:1a:12:13:07:51:f7:86:b6:a9:93:
                    91:2d:6d:f8:1b:47:b4:d1:55:de:dd:31:6c:3f:fe:
                    fb:f2:72:1c:e2:8a:39:90:3b:b8:13:16:72:7e:07:
                    c8:dc:e6:82:bd:ec:ac:7d:c3:0c:aa:c5:15:ce:d8:
                    16:1a:8c:39:46:54:94:31:e4:20:04:30:e3:a7:35:
                    80:91:3c:f5:92:10:c1:84:27:34:c1:44:db:5b:73:
                    0d:34:e6:64:89:e9:ff:05:7d:1b:8c:d3:3b:eb:0f:
                    7f:b0:56:7d:ee:a1:75:b0:b6:7f:ff:e6:b4:c8:b7:
                    38:39:11:1b:b3:32:57:0f:31:bf:3e:57:07:40:5c:
                    a7:17:74:2f:d4:72:74:3b:34:cf:12:b8:2f:d3:42:
                    9e:aa:ce:13:1c:78:5d:3c:3f:95:ca:c3:a3:9b:25:
                    e9:41:ab:38:0f:c5:87:93:b9:c9:02:73:f1:40:2e:
                    ac:53:4f:4f:33:0a:2d:f1:03:35:3c:f7:c0:8a:e1:
                    5c:21:55:01:7c:4f:9d:09:5a:f7:e1:63:9b:dd:0d:
                    7f:44:ec:1d:69:90:18:4d:04:7e:27:1e:41:0b:41:
                    64:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AF:C3:50:4F:8B:25:B7:18:95:2B:49:2F:AF:88:08:7E:B0:4B:D7
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:3d:38:da:ab:32:d9:bf:0e:e9:d1:1b:28:84:73:c2:8f:
         a7:c0:0f:b9:f2:51:91:ef:5a:5a:85:f8:dc:09:ad:91:60:01:
         7c:e3:03:ed:ce:de:bd:6f:2a:19:26:50:37:c0:bc:72:2a:9a:
         63:46:15:06:56:3c:1e:00:22:f3:29:23:52:dd:9f:ed:f4:b5:
         70:fb:cc:61:e6:f5:f0:e4:ac:3b:d9:1a:da:ab:e2:d1:a4:f5:
         1f:a8:93:66:17:87:dc:8e:2c:e7:7d:06:4d:5b:19:f6:43:50:
         6e:d5:34:e0:95:59:9f:fb:83:e4:95:42:ed:50:5b:e5:f7:50:
         0f:db:63:1d:76:c5:ba:e2:cc:40:17:3f:b8:68:36:f9:87:a9:
         7c:9a:4d:54:d3:7c:75:e6:fa:f4:71:7b:66:27:e4:72:49:66:
         7c:74:1d:a0:fe:d0:49:8d:53:e0:16:fc:0e:75:27:bc:db:e4:
         cb:cf:08:53:99:c0:3a:63:e7:23:17:e0:6f:fd:b1:94:23:ec:
         71:e1:0a:6d:8e:73:9e:19:36:aa:dd:c8:72:8d:06:22:cd:f0:
         f4:8d:96:8c:66:07:86:9a:6c:8c:80:7b:9b:f3:35:01:c9:5c:
         f5:89:22:1b:e7:30:c2:5b:e1:89:3f:e5:46:b4:2b:ea:07:d7:
         d0:0b:30:a1
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUFWSYQyQI6E6NnpKFHsYGUq/SP9cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MjFaFw0yMjA5MzAwMDAwMjFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUEzQzBFQTg0MEYwRkYyQTJF
MTE2RkEwNkNCRDgyRjAyQTJGOUU5QTZBREQ5MTI3REI3QUJFNjc2MDhGNEM5M0Iw
QjYxQTEyMTMwNzUxRjc4NkI2QTk5MzkxMkQ2REY4MUI0N0I0RDE1NURFREQzMTZD
M0ZGRUZCRjI3MjFDRTI4QTM5OTAzQkI4MTMxNjcyN0UwN0M4RENFNjgyQkRFQ0FD
N0RDMzBDQUFDNTE1Q0VEODE2MUE4QzM5NDY1NDk0MzFFNDIwMDQzMEUzQTczNTgw
OTEzQ0Y1OTIxMEMxODQyNzM0QzE0NERCNUI3MzBEMzRFNjY0ODlFOUZGMDU3RDFC
OENEMzNCRUIwRjdGQjA1NjdERUVBMTc1QjBCNjdGRkZFNkI0QzhCNzM4MzkxMTFC
QjMzMjU3MEYzMUJGM0U1NzA3NDA1Q0E3MTc3NDJGRDQ3Mjc0M0IzNENGMTJCODJG
RDM0MjlFQUFDRTEzMUM3ODVEM0MzRjk1Q0FDM0EzOUIyNUU5NDFBQjM4MEZDNTg3
OTNCOUM5MDI3M0YxNDAyRUFDNTM0RjRGMzMwQTJERjEwMzM1M0NGN0MwOEFFMTVD
MjE1NTAxN0M0RjlEMDk1QUY3RTE2MzlCREQwRDdGNDRFQzFENjk5MDE4NEQwNDdF
MjcxRTQxMEI0MTY0MEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6jwOqEDw/youEW+gbL2C8Covnppq3ZEn23q+Z2CPTJOwthoSEwdR
94a2qZORLW34G0e00VXe3TFsP/778nIc4oo5kDu4ExZyfgfI3OaCveysfcMMqsUV
ztgWGow5RlSUMeQgBDDjpzWAkTz1khDBhCc0wUTbW3MNNOZkien/BX0bjNM76w9/
sFZ97qF1sLZ//+a0yLc4OREbszJXDzG/PlcHQFynF3Qv1HJ0OzTPErgv00Keqs4T
HHhdPD+VysOjmyXpQas4D8WHk7nJAnPxQC6sU09PMwot8QM1PPfAiuFcIVUBfE+d
CVr34WOb3Q1/ROwdaZAYTQR+Jx5BC0FkDQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FCevw1BPiyW3GJUrSS+viAh+sEvXMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzYzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC2/T4wDQYJKoZIhvcNAQELBQADggEBAEk/PTjaqzLZ
vw7p0RsohHPCj6fAD7nyUZHvWlqF+NwJrZFgAXzjA+3O3r1vKhkmUDfAvHIqmmNG
FQZWPB4AIvMpI1Ldn+30tXD7zGHm9fDkrDvZGtqr4tGk9R+ok2YXh9yOLOd9Bk1b
GfZDUG7VNOCVWZ/7g+SVQu1QW+X3UA/bYx12xbrizEAXP7hoNvmHqXyaTVTTfHXm
+vRxe2Yn5HJJZnx0HaD+0EmNU+AW/A51J7zb5MvPCFOZwDpj5yMX4G/9sZQj7HHh
Cm2Oc54ZNqrdyHKNBiLN8PSNloxmB4aabIyAe5vzNQHJXPWJIhvnMMJb4Yk/5Ua0
K+oH19ALMKE=
-----END CERTIFICATE-----