Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e39342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          4vwZKRRekp72+d4cilOk7NxWIbPo1COY7geU2/IGwpc=
Subject key identifier:   2B:6C:8F:2C:7A:61:54:8D:52:42:3C:BB:42:D0:86:DF:AA:F9:64:0B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       18C34C2CF9F196048B8C0A9D467B6CA87FE555F5
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:15 +0000
ROA not before:           Wed 29 Sep 2021 23:55:15 +0000
ROA not after:            Fri 30 Sep 2022 00:00:15 +0000
asID:                     17451
IP address blocks:        182.253.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c3:4c:2c:f9:f1:96:04:8b:8c:0a:9d:46:7b:6c:a8:7f:e5:55:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:15 2021 GMT
            Not After : Sep 30 00:00:15 2022 GMT
        Subject: CN=3082010A0282010100A9058A384C0CF7256ACEC824F7EF83D769E29E532284D9885587ECFC41BCFB1211A0BA4AF4DA2FB905DF337628E44EA15644D777B886BA1AA169B2E1FB35F50AF40F4116F6365E619299347E8A871BF5A0AA30054A3C131EF22661292A894E8E18C0650AB09F89F4E323B3B90EB8236E855CE4705940EC02D331557428FBB1FEADCD33CF158432A42B19A74DBCAD6A6087C78463E278F28A966EAFE8D60E681298AAAE1DD0D4ADFA95B5AF859A6353C3B9E45FAF570A262316F9B7979DFB1A6AD614E271F5F67F6D19CE90E56E96CB414FBE9E9F8261C19EC58F02EA6B0DC30D335140413F78DEFC49E549E99ECD8A5C76560FA9FFF51CAC7F2C1D410226BC970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:05:8a:38:4c:0c:f7:25:6a:ce:c8:24:f7:ef:
                    83:d7:69:e2:9e:53:22:84:d9:88:55:87:ec:fc:41:
                    bc:fb:12:11:a0:ba:4a:f4:da:2f:b9:05:df:33:76:
                    28:e4:4e:a1:56:44:d7:77:b8:86:ba:1a:a1:69:b2:
                    e1:fb:35:f5:0a:f4:0f:41:16:f6:36:5e:61:92:99:
                    34:7e:8a:87:1b:f5:a0:aa:30:05:4a:3c:13:1e:f2:
                    26:61:29:2a:89:4e:8e:18:c0:65:0a:b0:9f:89:f4:
                    e3:23:b3:b9:0e:b8:23:6e:85:5c:e4:70:59:40:ec:
                    02:d3:31:55:74:28:fb:b1:fe:ad:cd:33:cf:15:84:
                    32:a4:2b:19:a7:4d:bc:ad:6a:60:87:c7:84:63:e2:
                    78:f2:8a:96:6e:af:e8:d6:0e:68:12:98:aa:ae:1d:
                    d0:d4:ad:fa:95:b5:af:85:9a:63:53:c3:b9:e4:5f:
                    af:57:0a:26:23:16:f9:b7:97:9d:fb:1a:6a:d6:14:
                    e2:71:f5:f6:7f:6d:19:ce:90:e5:6e:96:cb:41:4f:
                    be:9e:9f:82:61:c1:9e:c5:8f:02:ea:6b:0d:c3:0d:
                    33:51:40:41:3f:78:de:fc:49:e5:49:e9:9e:cd:8a:
                    5c:76:56:0f:a9:ff:f5:1c:ac:7f:2c:1d:41:02:26:
                    bc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6C:8F:2C:7A:61:54:8D:52:42:3C:BB:42:D0:86:DF:AA:F9:64:0B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:80:cc:3a:f2:5c:1c:bb:a7:a5:84:71:56:75:08:b5:ad:3d:
         dc:35:85:63:cc:a6:7d:ba:45:45:5c:08:ea:1b:6e:d0:92:4c:
         50:46:fd:1c:a5:97:7f:58:06:32:ec:e8:9a:bb:15:bb:6a:b6:
         a8:59:48:2a:47:f5:aa:15:70:cc:e7:4b:e0:4a:21:2e:f2:be:
         78:2c:d5:19:42:fc:d3:98:17:51:4e:5a:a8:cd:97:9b:40:8d:
         21:53:39:ac:24:7c:a9:22:cf:14:00:8d:29:5f:78:45:74:12:
         a0:d6:ce:5c:c6:78:6b:87:a1:26:98:ff:34:a9:40:55:55:e3:
         63:2d:90:f0:25:b8:cc:71:2b:00:fe:62:b8:d1:34:8d:63:46:
         c4:b4:d1:d9:96:ae:70:cc:0b:23:b9:23:52:cf:af:e5:73:04:
         4d:15:bb:9b:ba:a0:2a:af:76:c0:c8:65:7f:26:68:0a:d6:e0:
         67:f9:09:a7:5d:f3:e5:aa:b4:16:83:ae:e6:d1:26:5a:4f:88:
         51:b8:60:c5:98:f1:63:96:ce:00:79:ba:60:eb:5a:6e:11:ef:
         db:5e:ab:b4:38:da:ec:04:49:58:45:16:db:26:4f:d0:7f:13:
         49:f6:86:30:5c:85:a6:a0:ec:92:58:00:f9:5d:c3:5e:2e:35:
         37:76:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----