Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e38352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          YFfJkC6CoWGH8+2/1o2gXw14A4XEE0krmf2APp3cYM0=
Subject key identifier:   74:5A:1C:57:A2:12:34:09:22:B4:14:81:14:87:A7:28:71:1A:D3:AB
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       59472F0A07938D6C4759837FB9AD0EDD903D1852
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:18 +0000
ROA not before:           Wed 29 Sep 2021 23:56:18 +0000
ROA not after:            Fri 30 Sep 2022 00:01:18 +0000
asID:                     17451
IP address blocks:        182.253.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:47:2f:0a:07:93:8d:6c:47:59:83:7f:b9:ad:0e:dd:90:3d:18:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:18 2021 GMT
            Not After : Sep 30 00:01:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:c2:f2:cc:af:f2:4f:e9:d3:9f:f6:df:10:
                    e5:f6:40:79:25:5f:08:3d:4c:3a:af:68:2f:ed:00:
                    2a:e6:7b:24:87:4c:b1:68:be:89:f2:63:77:98:b0:
                    e0:56:f2:8a:07:17:17:5d:97:31:16:09:e5:71:4b:
                    30:e7:11:47:77:ed:bf:29:f1:2f:b3:ef:d7:b0:d5:
                    7d:81:09:de:86:92:27:bd:b0:e7:07:24:a9:d3:ed:
                    43:f8:01:8a:09:93:7a:cc:d2:33:03:5d:a6:c5:f5:
                    b2:8d:7d:88:f5:5a:1c:01:28:dc:47:a8:bd:d3:b5:
                    17:c3:36:52:62:1b:e6:54:c8:01:1c:6c:28:12:3c:
                    cd:48:11:65:53:8f:1b:d1:d8:b1:4c:89:25:3d:54:
                    18:6d:ff:7b:85:6d:fc:27:cc:6a:14:5c:29:bb:2d:
                    cd:17:3f:4d:3a:b3:07:3b:8f:67:15:77:41:41:78:
                    b9:6b:b6:04:e0:6b:98:10:cf:88:53:4d:24:48:4b:
                    b3:28:e3:89:b4:f2:25:b3:46:19:6b:ed:c2:b4:e6:
                    da:53:06:11:d8:16:ae:f2:1f:92:f4:f5:67:20:3f:
                    f5:f0:8d:f6:8e:57:c8:32:f1:ba:2e:ac:41:06:3d:
                    18:cd:b5:29:5a:25:a8:0b:f2:6d:5d:f1:33:a3:86:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5A:1C:57:A2:12:34:09:22:B4:14:81:14:87:A7:28:71:1A:D3:AB
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:97:ed:b1:61:ba:bb:3f:ae:b9:5a:5d:3a:1b:97:97:e8:1a:
         9e:1d:1a:a1:e7:cf:cc:bf:70:7d:ca:cf:1b:15:a3:69:64:b9:
         58:6c:a8:1a:68:cc:b8:36:0a:17:cd:ee:87:e4:76:cf:a9:e8:
         63:4b:1a:11:51:34:36:a1:54:e9:df:63:51:82:91:7a:d2:5b:
         d2:1b:26:54:6f:0e:49:68:76:a7:ec:66:a0:37:cd:7c:70:da:
         89:47:47:49:f9:c9:8b:1b:10:e0:b7:15:60:2d:f4:b0:5b:ac:
         4b:35:9b:5b:ba:41:a6:3a:e2:6b:f3:e5:f1:c0:3d:c6:af:87:
         3f:51:f6:b7:62:f5:37:a1:cb:0d:1b:71:89:78:7a:39:42:1b:
         a5:b7:bc:17:c5:7e:8f:62:20:9b:d1:e5:83:60:94:aa:55:9c:
         0a:04:ec:89:29:aa:2b:a6:1e:2c:24:6e:c2:ce:36:c6:fb:44:
         32:d2:b3:42:07:b0:e1:30:2d:ba:00:a1:15:e2:ce:1e:9e:40:
         63:4e:57:e1:b1:ff:3b:f7:e4:0e:53:a2:2e:d1:db:f5:49:05:
         e5:ce:3b:fd:9d:a9:69:35:d2:da:44:83:d2:8e:79:71:86:2a:
         53:7c:0b:d7:9e:1b:4e:5c:ee:1f:cc:25:2e:83:83:9b:d9:9c:
         d2:80:6d:1d
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUWUcvCgeTjWxHWYN/ua0O3ZA9GFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU2MThaFw0yMjA5MzAwMDAxMThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDVFOUMyRjJDQ0FGRjI0RkU5
RDM5RkY2REYxMEU1RjY0MDc5MjU1RjA4M0Q0QzNBQUY2ODJGRUQwMDJBRTY3QjI0
ODc0Q0IxNjhCRTg5RjI2Mzc3OThCMEUwNTZGMjhBMDcxNzE3NUQ5NzMxMTYwOUU1
NzE0QjMwRTcxMTQ3NzdFREJGMjlGMTJGQjNFRkQ3QjBENTdEODEwOURFODY5MjI3
QkRCMEU3MDcyNEE5RDNFRDQzRjgwMThBMDk5MzdBQ0NEMjMzMDM1REE2QzVGNUIy
OEQ3RDg4RjU1QTFDMDEyOERDNDdBOEJERDNCNTE3QzMzNjUyNjIxQkU2NTRDODAx
MUM2QzI4MTIzQ0NENDgxMTY1NTM4RjFCRDFEOEIxNEM4OTI1M0Q1NDE4NkRGRjdC
ODU2REZDMjdDQzZBMTQ1QzI5QkIyRENEMTczRjREM0FCMzA3M0I4RjY3MTU3NzQx
NDE3OEI5NkJCNjA0RTA2Qjk4MTBDRjg4NTM0RDI0NDg0QkIzMjhFMzg5QjRGMjI1
QjM0NjE5NkJFREMyQjRFNkRBNTMwNjExRDgxNkFFRjIxRjkyRjRGNTY3MjAzRkY1
RjA4REY2OEU1N0M4MzJGMUJBMkVBQzQxMDYzRDE4Q0RCNTI5NUEyNUE4MEJGMjZE
NURGMTMzQTM4NkRGMzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1enC8syv8k/p05/23xDl9kB5JV8IPUw6r2gv7QAq5nskh0yxaL6J
8mN3mLDgVvKKBxcXXZcxFgnlcUsw5xFHd+2/KfEvs+/XsNV9gQnehpInvbDnBySp
0+1D+AGKCZN6zNIzA12mxfWyjX2I9VocASjcR6i907UXwzZSYhvmVMgBHGwoEjzN
SBFlU48b0dixTIklPVQYbf97hW38J8xqFFwpuy3NFz9NOrMHO49nFXdBQXi5a7YE
4GuYEM+IU00kSEuzKOOJtPIls0YZa+3CtObaUwYR2Bau8h+S9PVnID/18I32jlfI
MvG6LqxBBj0YzbUpWiWoC/JtXfEzo4bfOQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FHRaHFeiEjQJIrQUgRSHpyhxGtOrMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzgzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC2/VUwDQYJKoZIhvcNAQELBQADggEBACKX7bFhurs/
rrlaXTobl5foGp4dGqHnz8y/cH3KzxsVo2lkuVhsqBpozLg2ChfN7ofkds+p6GNL
GhFRNDahVOnfY1GCkXrSW9IbJlRvDklodqfsZqA3zXxw2olHR0n5yYsbEOC3FWAt
9LBbrEs1m1u6QaY64mvz5fHAPcavhz9R9rdi9Tehyw0bcYl4ejlCG6W3vBfFfo9i
IJvR5YNglKpVnAoE7IkpqiumHiwkbsLONsb7RDLSs0IHsOEwLboAoRXizh6eQGNO
V+Gx/zv35A5Toi7R2/VJBeXOO/2dqWk10tpEg9KOeXGGKlN8C9eeG05c7h/MJS6D
g5vZnNKAbR0=
-----END CERTIFICATE-----