Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37302e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e37302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          tvReRJ27LyMzNcURtp6W+eQjG0c6ujO44qAgQ8X7878=
Subject key identifier:   7C:57:39:B9:55:53:42:01:78:AC:78:BF:D7:EF:89:46:29:24:9E:DC
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       18F7BF9AF82C19579600FC196998583D92B56CCA
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:55 +0000
ROA not before:           Wed 29 Sep 2021 23:55:55 +0000
ROA not after:            Fri 30 Sep 2022 00:00:55 +0000
asID:                     17451
IP address blocks:        182.253.70.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f7:bf:9a:f8:2c:19:57:96:00:fc:19:69:98:58:3d:92:b5:6c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:55 2021 GMT
            Not After : Sep 30 00:00:55 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:69:c1:a2:6c:ad:be:99:2e:57:24:c6:b6:
                    08:0d:86:9c:da:b4:58:4a:06:d3:93:69:58:a3:3a:
                    96:8c:aa:28:a6:f9:ff:64:66:0c:15:67:88:e1:3d:
                    02:3f:30:b6:b4:d1:d2:e7:5a:83:ec:7c:ef:1d:bd:
                    60:26:23:f8:9c:5c:2a:97:87:54:70:9c:81:45:73:
                    6a:2d:9b:5b:6c:e9:64:87:5e:78:20:d6:06:b5:7b:
                    bc:53:1c:ff:51:91:b9:14:c1:c8:88:1b:b1:26:78:
                    ee:41:45:7a:fb:2c:95:42:c2:ba:33:ce:a7:8b:df:
                    6a:9e:9d:19:56:52:70:b4:db:cb:22:3b:33:39:20:
                    58:ae:26:4c:b9:57:0b:9a:2a:4b:f9:f1:c3:f4:4d:
                    ae:31:70:07:37:c1:21:cf:94:56:5e:52:98:18:28:
                    b9:54:09:1b:e6:1b:7f:9b:a8:93:0d:93:ad:aa:c2:
                    dc:92:fb:28:78:2c:bb:10:79:fb:17:b0:13:6a:8e:
                    0c:be:1c:e3:b5:35:8f:d5:78:58:57:78:6e:49:55:
                    7a:f7:a0:d0:6b:d7:99:1d:e5:89:54:9f:95:d0:2b:
                    39:5f:ae:d5:9c:bb:77:63:b6:f1:60:e7:88:c4:1e:
                    bd:a4:b2:17:b2:67:43:a1:2c:fe:aa:da:0f:6c:50:
                    27:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:57:39:B9:55:53:42:01:78:AC:78:BF:D7:EF:89:46:29:24:9E:DC
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:cb:a9:2a:fa:78:10:76:ec:05:17:a8:50:ce:10:e9:5e:6e:
         66:21:1e:62:d5:57:15:a3:64:72:b2:95:6f:62:e7:7a:1b:9d:
         be:08:0b:0a:a9:52:4d:db:ab:3d:43:f1:56:09:5d:db:b2:71:
         9d:3e:42:b7:34:7e:16:40:47:2d:ab:11:dd:43:78:4c:f3:ec:
         76:d2:ce:53:ea:dc:92:4b:ec:e1:c9:fc:d5:38:ce:df:9b:3a:
         fb:d5:85:fc:08:27:81:3d:5a:e2:db:8b:8a:fb:63:70:5f:46:
         14:d2:36:75:6a:09:61:40:b5:41:1d:6b:dc:07:fe:52:cd:29:
         f5:56:85:1b:0b:6c:52:64:4d:33:01:5b:05:46:75:08:ac:af:
         5d:18:b2:f6:80:4e:94:3c:2c:c7:e4:f4:15:45:5b:71:15:18:
         3c:46:65:08:9d:ff:59:6e:5d:4e:80:18:6b:68:99:26:31:43:
         44:f1:69:f5:45:d5:9b:65:bc:01:81:f0:76:1d:a3:01:c6:f8:
         ba:f8:e0:f7:40:3c:29:e4:f2:1f:b9:b7:ed:3c:a9:b0:d7:3a:
         b5:2d:7c:a9:30:16:43:dd:e8:52:30:be:93:28:fa:c8:86:eb:
         d9:63:60:a8:52:ce:7f:8d:a0:32:f5:76:76:06:c5:d4:e9:66:
         62:da:e1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----