Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36382e302f32342d3234203d3e203137343531.roa
File:                     3230332e3134322e36382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          cMpp0dd0PlLCI2MNjGYOl2n0NPSUzdeWpKxoR2QaZKY=
Subject key identifier:   C9:5B:35:A3:C1:46:25:1C:6D:54:00:53:E1:65:72:3F:D8:7E:00:AA
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2F81C094D012F11D1864D98FB3CB09FF5DA4985A
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:17 +0000
ROA not before:           Wed 29 Sep 2021 23:55:17 +0000
ROA not after:            Fri 30 Sep 2022 00:00:17 +0000
asID:                     17451
IP address blocks:        203.142.68.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:81:c0:94:d0:12:f1:1d:18:64:d9:8f:b3:cb:09:ff:5d:a4:98:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:17 2021 GMT
            Not After : Sep 30 00:00:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:f7:ff:6b:49:fe:65:8d:91:19:dd:f0:f0:
                    bf:f5:ed:36:96:c8:c3:21:14:1e:c5:09:2d:b1:c1:
                    21:b4:23:83:43:31:b6:3b:94:e1:16:64:72:97:76:
                    9b:0c:2b:36:60:ff:6f:b9:a7:8b:b4:ab:2b:10:b5:
                    37:b0:33:4d:3e:de:80:91:d5:4a:d3:6f:43:67:14:
                    f5:d3:d4:a1:c0:ea:b1:b8:50:90:bc:5a:cc:02:9d:
                    fc:99:a1:9e:98:4e:be:48:01:14:dc:44:35:75:ed:
                    f6:3f:11:c0:ab:e9:9e:90:d7:bf:d8:b1:ee:f0:7e:
                    fc:0f:cc:3b:bf:21:69:98:35:65:3d:0e:ad:f8:3a:
                    33:ae:4f:2e:08:f9:98:cd:f4:f0:92:25:b8:51:ee:
                    7c:f2:2e:85:93:8c:f2:82:6c:ca:d6:1f:11:e2:e3:
                    21:d7:a0:81:90:39:5c:48:26:e9:c6:40:36:57:3c:
                    ee:c7:c8:16:16:24:1f:56:4c:7f:86:b7:ac:01:b7:
                    d7:82:3f:45:cf:ec:cd:41:52:04:34:d6:f1:e1:86:
                    7b:a0:5c:87:24:3d:cf:89:b4:20:23:ae:a3:be:cf:
                    9a:a6:3c:ea:5a:7b:1c:61:00:42:76:9e:26:a8:6c:
                    d0:ed:1c:11:5c:9d:20:00:5a:5a:8c:f7:c8:d8:26:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5B:35:A3:C1:46:25:1C:6D:54:00:53:E1:65:72:3F:D8:7E:00:AA
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:7c:56:4d:f4:91:53:94:47:d2:51:7c:2c:e5:b6:b2:df:f6:
         4d:cf:98:6e:dc:d2:f6:88:4f:46:ec:4b:62:d9:bc:a5:16:88:
         54:cc:48:90:00:a1:38:6d:cd:4f:ad:1d:f9:06:6d:cc:0a:ec:
         44:b5:6f:f2:d6:63:e4:fb:85:3d:d9:95:59:ff:ab:de:3a:42:
         42:c2:fc:33:d8:b9:1b:f5:d6:b9:56:5d:d6:5e:06:53:03:77:
         9a:5b:aa:58:f5:45:6f:cb:c0:72:77:fe:bc:c0:d2:ff:ae:06:
         9e:1e:51:65:2c:b4:19:93:90:7a:9c:00:f4:b9:85:4a:a9:9e:
         23:76:24:5c:bf:6f:ef:33:2d:58:f4:ef:9e:e3:f3:4d:3b:d5:
         2f:ca:87:9c:46:52:3e:c0:8c:7f:04:d7:28:7c:8c:2d:03:6e:
         27:72:e6:d2:87:81:d7:05:ee:69:37:cd:09:cf:5d:32:3f:ab:
         43:ff:8f:66:3d:d0:a3:2f:20:e9:d3:a6:82:f5:c1:44:ce:9c:
         64:9d:a1:ce:81:66:3a:77:27:8f:a2:0c:0a:82:f6:bd:ee:0a:
         9e:1e:92:ed:98:0b:14:d5:bd:7f:a5:62:de:36:d6:56:de:69:
         52:37:53:b6:f1:db:ef:c2:74:a8:0c:d2:fe:a7:12:9e:71:e5:
         fb:8e:c6:e9
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUL4HAlNAS8R0YZNmPs8sJ/12kmFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MTdaFw0yMjA5MzAwMDAwMTdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDkwM0Y3RkY2QjQ5RkU2NThE
OTExOURERjBGMEJGRjVFRDM2OTZDOEMzMjExNDFFQzUwOTJEQjFDMTIxQjQyMzgz
NDMzMUI2M0I5NEUxMTY2NDcyOTc3NjlCMEMyQjM2NjBGRjZGQjlBNzhCQjRBQjJC
MTBCNTM3QjAzMzREM0VERTgwOTFENTRBRDM2RjQzNjcxNEY1RDNENEExQzBFQUIx
Qjg1MDkwQkM1QUNDMDI5REZDOTlBMTlFOTg0RUJFNDgwMTE0REM0NDM1NzVFREY2
M0YxMUMwQUJFOTlFOTBEN0JGRDhCMUVFRjA3RUZDMEZDQzNCQkYyMTY5OTgzNTY1
M0QwRUFERjgzQTMzQUU0RjJFMDhGOTk4Q0RGNEYwOTIyNUI4NTFFRTdDRjIyRTg1
OTM4Q0YyODI2Q0NBRDYxRjExRTJFMzIxRDdBMDgxOTAzOTVDNDgyNkU5QzY0MDM2
NTczQ0VFQzdDODE2MTYyNDFGNTY0QzdGODZCN0FDMDFCN0Q3ODIzRjQ1Q0ZFQ0NE
NDE1MjA0MzRENkYxRTE4NjdCQTA1Qzg3MjQzRENGODlCNDIwMjNBRUEzQkVDRjlB
QTYzQ0VBNUE3QjFDNjEwMDQyNzY5RTI2QTg2Q0QwRUQxQzExNUM5RDIwMDA1QTVB
OENGN0M4RDgyNjBCNzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2QP3/2tJ/mWNkRnd8PC/9e02lsjDIRQexQktscEhtCODQzG2O5Th
FmRyl3abDCs2YP9vuaeLtKsrELU3sDNNPt6AkdVK029DZxT109ShwOqxuFCQvFrM
Ap38maGemE6+SAEU3EQ1de32PxHAq+mekNe/2LHu8H78D8w7vyFpmDVlPQ6t+Doz
rk8uCPmYzfTwkiW4Ue588i6Fk4zygmzK1h8R4uMh16CBkDlcSCbpxkA2Vzzux8gW
FiQfVkx/hresAbfXgj9Fz+zNQVIENNbx4YZ7oFyHJD3PibQgI66jvs+apjzqWnsc
YQBCdp4mqGzQ7RwRXJ0gAFpajPfI2CYLdwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FMlbNaPBRiUcbVQAU+Flcj/YfgCqMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjMwMzMyZTMxMzQzMjJlMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADLjkQwDQYJKoZIhvcNAQELBQADggEBAJd8Vk30kVOU
R9JRfCzltrLf9k3PmG7c0vaIT0bsS2LZvKUWiFTMSJAAoThtzU+tHfkGbcwK7ES1
b/LWY+T7hT3ZlVn/q946QkLC/DPYuRv11rlWXdZeBlMDd5pbqlj1RW/LwHJ3/rzA
0v+uBp4eUWUstBmTkHqcAPS5hUqpniN2JFy/b+8zLVj0757j80071S/Kh5xGUj7A
jH8E1yh8jC0Dbidy5tKHgdcF7mk3zQnPXTI/q0P/j2Y90KMvIOnTpoL1wUTOnGSd
oc6BZjp3J4+iDAqC9r3uCp4eku2YCxTVvX+lYt421lbeaVI3U7bx2+/CdKgM0v6n
Ep5x5fuOxuk=
-----END CERTIFICATE-----