Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e38332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          SHfIgwgk2IoSpb5/9kSxPLH0Qr/KbM6NdlZ0NGgBJWs=
Subject key identifier:   C3:8E:05:E6:AF:C1:39:6C:A6:09:E7:FC:FC:69:59:5D:3F:49:5C:E8
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3847C1F4B998C663D67DD325ABE9139B71E7E664
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:19 +0000
ROA not before:           Wed 29 Sep 2021 23:55:19 +0000
ROA not after:            Fri 30 Sep 2022 00:00:19 +0000
asID:                     17451
IP address blocks:        182.253.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:47:c1:f4:b9:98:c6:63:d6:7d:d3:25:ab:e9:13:9b:71:e7:e6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:19 2021 GMT
            Not After : Sep 30 00:00:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:e5:7b:03:2a:32:c7:9d:03:e7:91:8a:30:
                    db:1a:f9:ec:96:0d:46:61:8e:75:67:48:c2:76:48:
                    79:a1:53:c9:5c:dd:50:0b:be:4d:21:88:d5:9b:1b:
                    90:65:27:13:5e:93:af:20:ca:76:6e:8c:2a:96:68:
                    7e:f0:ae:fb:ce:65:5b:34:46:a5:d6:fa:5b:08:a2:
                    ef:2d:38:5c:6d:b6:16:ba:77:77:f4:72:da:d8:da:
                    bf:f3:72:6c:d8:9f:ec:44:9c:92:c8:90:41:f1:a0:
                    e0:45:3a:8a:6c:71:ff:1f:68:0a:0a:54:2d:10:54:
                    19:06:f7:48:d5:04:7d:f6:33:87:c6:50:40:8d:9d:
                    25:4c:a6:d3:14:5b:ea:ae:5e:1e:ca:c5:84:d4:65:
                    95:73:0e:9f:b0:7e:cf:69:0f:e7:0b:31:31:29:2c:
                    69:ef:ec:e0:3d:48:99:d7:bc:61:e5:35:ff:83:17:
                    b6:c4:e2:a3:34:fd:32:50:f7:b3:4b:cd:e0:f2:3c:
                    40:c7:dc:7a:66:37:41:42:14:3e:3b:b6:05:60:fa:
                    1a:7c:80:95:49:a4:98:7b:d3:ff:e0:53:fd:ea:dc:
                    8e:01:c7:a5:b5:8a:43:f8:02:f6:bf:bb:b4:20:f6:
                    a2:d8:49:a9:5f:1d:1e:dc:37:c7:5d:a1:f3:ec:c5:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8E:05:E6:AF:C1:39:6C:A6:09:E7:FC:FC:69:59:5D:3F:49:5C:E8
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:06:e2:02:fd:a6:1f:65:2d:ac:94:ad:47:91:42:bd:80:56:
         e7:48:ec:c6:48:de:54:39:05:f1:a0:fe:36:8a:12:d6:73:2b:
         97:f6:d7:c8:73:c8:87:f3:77:70:61:24:d8:52:7d:d6:6c:a7:
         35:85:d5:c8:7f:64:2a:c5:ae:29:92:69:c0:22:0e:6f:fa:a3:
         1e:44:29:f5:8a:2d:b6:bb:40:bf:cc:76:ba:4f:17:9a:13:4c:
         40:43:3f:0c:8b:2e:e2:cc:13:ea:e4:b3:cb:30:3b:f9:3d:3c:
         d6:9c:bb:f0:ba:22:43:c7:1d:a8:df:b4:ae:9f:6e:0f:d2:4f:
         e8:be:5b:cc:81:f2:07:c7:a7:25:b4:7d:17:57:a6:6d:79:d7:
         2c:db:05:be:af:95:08:62:0b:cb:07:fc:36:a8:33:db:a6:ad:
         3f:b0:e7:e9:53:ad:c9:8e:95:2f:41:46:b8:ba:1b:fe:a1:40:
         69:95:f2:57:ca:7b:5e:53:54:ce:c8:52:a8:5f:f0:02:d2:c1:
         61:c3:9b:61:20:85:e2:b7:ee:14:de:6c:e8:a7:ec:68:95:23:
         72:15:3d:25:62:e5:8d:b8:72:40:40:b8:c2:b0:99:bd:cf:39:
         ac:31:47:d3:b7:9a:c9:fe:34:06:bb:de:2a:e3:21:e8:0f:08:
         d6:77:cd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----