Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e36372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          gevrNUZguyfTwy8i5RFVAVcTrDHp24nqm1oHKRDwbtc=
Subject key identifier:   52:B5:C4:79:38:7A:C8:51:94:3A:F0:0B:CE:B1:3E:E5:F2:5B:1B:64
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       55390E93A958A0FA4D810E360FF2620080E64728
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:05 +0000
ROA not before:           Wed 29 Sep 2021 23:55:05 +0000
ROA not after:            Fri 30 Sep 2022 00:00:05 +0000
asID:                     17451
IP address blocks:        182.253.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:39:0e:93:a9:58:a0:fa:4d:81:0e:36:0f:f2:62:00:80:e6:47:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:05 2021 GMT
            Not After : Sep 30 00:00:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7e:62:0e:01:f0:25:ca:b5:f3:81:d6:7a:2c:
                    92:63:f9:90:e3:1f:79:34:c8:a9:51:ac:54:7a:30:
                    e5:6d:43:7e:58:0a:a8:a6:36:b6:a6:00:70:ec:d1:
                    d4:70:b0:1b:71:ba:9c:14:72:bb:6d:1a:c9:1c:38:
                    26:5f:5e:44:ef:0a:51:c9:a3:30:4c:97:df:c2:c2:
                    f9:88:6a:f2:c2:18:53:42:2c:44:0a:fc:0f:65:9c:
                    6a:24:13:7e:31:b3:4d:44:5b:f2:90:cc:c9:84:92:
                    e6:b4:76:fe:94:22:ba:0d:4d:64:7e:8d:63:ec:3d:
                    8c:a2:99:30:e2:5c:43:2a:34:91:1e:8b:0b:db:27:
                    43:91:1d:86:2b:1c:46:a3:15:46:b4:e9:b7:59:68:
                    2b:46:ac:29:1a:53:97:71:3a:ce:b4:17:cc:9f:2f:
                    08:53:e0:a1:7e:34:3f:ed:c0:9b:67:fd:8d:22:56:
                    dc:90:b6:d3:e0:e8:ee:3a:24:27:1c:9c:aa:df:90:
                    dd:c5:13:47:be:7f:2c:f5:41:19:54:c2:4c:fa:e6:
                    37:aa:cf:05:00:1f:61:8b:66:9a:ac:85:01:40:49:
                    6a:55:6a:b7:9c:92:67:eb:bf:8e:8c:e9:0b:9e:28:
                    79:42:0f:db:db:8e:11:9f:cb:1b:6a:f6:a0:f6:e8:
                    56:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B5:C4:79:38:7A:C8:51:94:3A:F0:0B:CE:B1:3E:E5:F2:5B:1B:64
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:68:a4:58:81:8d:28:52:2a:20:85:04:f1:d3:18:ab:a1:5f:
         92:48:57:30:68:1b:44:6e:ab:9f:9e:e8:ae:00:c9:10:1a:63:
         59:63:9e:54:69:5a:ff:b5:6f:ee:30:cd:90:68:63:43:93:e4:
         e3:e3:66:85:ae:0d:ca:24:15:c2:80:b9:af:30:24:98:e1:17:
         da:24:70:7c:07:d7:76:cc:8c:61:61:9e:ba:2c:aa:8a:5c:f9:
         5b:e8:60:fb:01:28:fe:21:eb:2a:fd:c2:a4:cd:3f:9e:fd:99:
         99:ab:ac:0a:48:13:5e:38:09:b8:62:ca:7a:2d:9f:68:0f:48:
         eb:f6:73:13:92:28:34:6b:66:57:75:43:a7:92:4b:06:13:d0:
         c7:02:4b:5b:27:bf:13:6e:fe:80:13:b7:80:65:18:99:2a:47:
         92:c5:0f:f8:fa:a9:a4:c0:08:65:ff:a4:bb:6a:5b:4b:b6:2f:
         be:3b:59:f7:ab:04:c4:ba:c4:87:4d:78:63:ed:f4:9b:12:17:
         89:57:9f:0a:d9:22:c6:c1:37:39:50:c3:8c:2d:03:23:07:89:
         a1:fd:56:7c:8d:a3:ee:88:79:2b:08:e5:8f:0b:6e:c0:cd:6b:
         1c:9f:46:96:e0:14:0e:7b:b1:d5:27:f8:b9:b2:0d:4e:40:67:
         73:03:a3:89
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUVTkOk6lYoPpNgQ42D/JiAIDmRygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MDVaFw0yMjA5MzAwMDAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREE3RTYyMEUwMUYwMjVDQUI1
RjM4MUQ2N0EyQzkyNjNGOTkwRTMxRjc5MzRDOEE5NTFBQzU0N0EzMEU1NkQ0MzdF
NTgwQUE4QTYzNkI2QTYwMDcwRUNEMUQ0NzBCMDFCNzFCQTlDMTQ3MkJCNkQxQUM5
MUMzODI2NUY1RTQ0RUYwQTUxQzlBMzMwNEM5N0RGQzJDMkY5ODg2QUYyQzIxODUz
NDIyQzQ0MEFGQzBGNjU5QzZBMjQxMzdFMzFCMzRENDQ1QkYyOTBDQ0M5ODQ5MkU2
QjQ3NkZFOTQyMkJBMEQ0RDY0N0U4RDYzRUMzRDhDQTI5OTMwRTI1QzQzMkEzNDkx
MUU4QjBCREIyNzQzOTExRDg2MkIxQzQ2QTMxNTQ2QjRFOUI3NTk2ODJCNDZBQzI5
MUE1Mzk3NzEzQUNFQjQxN0NDOUYyRjA4NTNFMEExN0UzNDNGRURDMDlCNjdGRDhE
MjI1NkRDOTBCNkQzRTBFOEVFM0EyNDI3MUM5Q0FBREY5MEREQzUxMzQ3QkU3RjJD
RjU0MTE5NTRDMjRDRkFFNjM3QUFDRjA1MDAxRjYxOEI2NjlBQUM4NTAxNDA0OTZB
NTU2QUI3OUM5MjY3RUJCRjhFOENFOTBCOUUyODc5NDIwRkRCREI4RTExOUZDQjFC
NkFGNkEwRjZFODU2RkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2n5iDgHwJcq184HWeiySY/mQ4x95NMipUaxUejDlbUN+WAqopja2
pgBw7NHUcLAbcbqcFHK7bRrJHDgmX15E7wpRyaMwTJffwsL5iGrywhhTQixECvwP
ZZxqJBN+MbNNRFvykMzJhJLmtHb+lCK6DU1kfo1j7D2Mopkw4lxDKjSRHosL2ydD
kR2GKxxGoxVGtOm3WWgrRqwpGlOXcTrOtBfMny8IU+ChfjQ/7cCbZ/2NIlbckLbT
4OjuOiQnHJyq35DdxRNHvn8s9UEZVMJM+uY3qs8FAB9hi2aarIUBQElqVWq3nJJn
67+OjOkLnih5Qg/b244Rn8sbavag9uhW/QIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FFK1xHk4eshRlDrwC86xPuXyWxtkMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzYzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC2/UMwDQYJKoZIhvcNAQELBQADggEBAAxopFiBjShS
KiCFBPHTGKuhX5JIVzBoG0Ruq5+e6K4AyRAaY1ljnlRpWv+1b+4wzZBoY0OT5OPj
ZoWuDcokFcKAua8wJJjhF9okcHwH13bMjGFhnrosqopc+VvoYPsBKP4h6yr9wqTN
P579mZmrrApIE144Cbhiynotn2gPSOv2cxOSKDRrZld1Q6eSSwYT0McCS1snvxNu
/oATt4BlGJkqR5LFD/j6qaTACGX/pLtqW0u2L747WferBMS6xIdNeGPt9JsSF4lX
nwrZIsbBNzlQw4wtAyMHiaH9VnyNo+6IeSsI5Y8LbsDNaxyfRpbgFA57sdUn+Lmy
DU5AZ3MDo4k=
-----END CERTIFICATE-----