Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e37382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          2Ht/V0opOilUkn8RjUMbmuTo7ueW956bqcfKIWHkWsc=
Subject key identifier:   BE:10:B9:1D:8D:27:EF:43:0B:6F:04:6B:34:E1:11:2E:C5:2B:FD:B3
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7B8D1FCCF09333D59FB077BCB5F0E9C2CB512FF6
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:23 +0000
ROA not before:           Wed 29 Sep 2021 23:55:23 +0000
ROA not after:            Fri 30 Sep 2022 00:00:23 +0000
asID:                     17451
IP address blocks:        182.253.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:8d:1f:cc:f0:93:33:d5:9f:b0:77:bc:b5:f0:e9:c2:cb:51:2f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:23 2021 GMT
            Not After : Sep 30 00:00:23 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:25:53:ae:89:36:6a:c9:51:0d:73:21:cd:
                    e7:1c:ff:e9:c6:7a:6e:e3:e6:82:41:f6:06:96:61:
                    e8:61:ec:6a:da:b5:11:c6:a4:78:6f:e5:89:75:f1:
                    a8:64:24:91:94:92:91:21:e0:db:9e:5e:a1:1e:64:
                    2b:dd:be:15:cc:a2:43:55:94:f9:a7:97:74:fc:e8:
                    af:82:24:4d:ed:61:63:73:83:dd:16:29:59:d3:06:
                    92:19:f6:50:86:78:b1:c7:cc:d4:95:c6:bf:bd:51:
                    8b:05:27:12:06:e8:81:c4:c2:ca:53:95:ee:6a:9c:
                    75:49:13:9d:cd:68:b0:11:ec:bf:02:81:28:db:9e:
                    01:1e:28:6f:c3:28:ff:b6:3d:d5:cf:37:4e:8a:e0:
                    2c:6e:9b:31:de:ed:84:c4:6c:bd:49:ab:65:07:80:
                    6c:a5:08:4e:c0:78:2e:bd:64:b2:b7:84:c4:3a:ed:
                    fa:96:ad:8b:b7:b6:4f:72:66:9d:15:d0:e2:b6:b5:
                    d0:e4:f3:6b:d4:45:4e:da:fa:4d:8a:f4:47:0e:68:
                    8f:60:02:06:d2:03:08:2d:39:db:27:8f:3e:b2:99:
                    16:c0:20:c5:79:33:2e:89:20:c1:92:03:85:34:40:
                    38:27:82:81:e7:b4:c7:07:d5:90:72:bb:d9:df:b8:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:10:B9:1D:8D:27:EF:43:0B:6F:04:6B:34:E1:11:2E:C5:2B:FD:B3
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:61:c7:29:67:0f:d7:e3:c6:b6:e1:88:a6:08:1e:cd:af:6d:
         ae:46:25:a8:c6:11:f0:95:48:a6:fa:6c:d4:b7:10:6b:1d:7a:
         a6:31:6d:fc:1d:05:f2:d9:91:7b:27:74:81:f8:db:c4:58:21:
         44:b3:62:cf:c0:1f:ba:74:d0:d3:30:d6:af:d7:9d:94:55:6d:
         a5:54:15:b5:5e:0d:1c:02:28:fd:bd:b9:7a:a9:2c:6c:c8:10:
         3c:6a:2e:5b:ed:40:9d:1f:40:ea:ad:93:04:33:78:bd:82:0c:
         56:21:ab:00:1d:0c:74:f2:5c:48:b6:19:72:1b:57:6c:1f:c9:
         e9:53:38:d7:25:2b:8e:97:e3:3c:08:d5:2f:f9:7c:a9:ac:83:
         d8:92:9e:0a:d0:54:1b:e3:c4:7f:3a:f0:a0:3b:dc:85:06:f6:
         71:b7:ff:39:a8:15:e7:78:ce:b3:1a:ac:94:2e:ec:10:b6:c6:
         82:4c:42:6b:b4:1c:01:0a:e5:28:01:cf:c3:a1:11:2b:7e:7f:
         80:c6:af:d9:03:9c:dd:11:96:da:cb:27:30:dc:40:d5:46:bc:
         8a:28:2d:04:8f:5a:b6:91:17:fa:8d:63:63:ac:b7:af:52:be:
         c7:9a:fe:23:c5:51:d0:0a:f7:9d:da:94:f4:8b:78:ed:57:4d:
         2f:e3:6a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----