Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3131322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          kbpr6Pug42x+bnBxgyZLyCYWwR3NCM8vQ64Ubq7SvRs=
Subject key identifier:   36:E5:72:A8:D2:60:A4:81:11:B7:C2:5F:50:7A:47:FB:30:67:F1:9F
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       194FFE03DE311928A23DEBFF09071CEB15371F5A
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:25 +0000
ROA not before:           Wed 29 Sep 2021 23:55:25 +0000
ROA not after:            Fri 30 Sep 2022 00:00:25 +0000
asID:                     17451
IP address blocks:        182.253.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4f:fe:03:de:31:19:28:a2:3d:eb:ff:09:07:1c:eb:15:37:1f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:25 2021 GMT
            Not After : Sep 30 00:00:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:09:75:e9:85:dc:7a:07:e5:b8:e8:f4:16:c5:
                    f1:a3:be:39:0c:47:54:b3:e1:1a:d3:78:91:a2:e8:
                    6b:d8:c9:0a:27:60:33:1d:29:99:d1:48:ef:24:d6:
                    ee:2a:4a:f2:bb:0e:93:5f:ce:1c:ff:ab:59:2d:a1:
                    f9:81:5c:28:53:c1:40:19:c1:33:78:4e:7c:ad:06:
                    4d:8b:a9:f5:cc:0f:57:ae:42:94:98:cc:05:17:fb:
                    0c:e7:8b:5c:d6:b5:ac:1b:78:93:3c:91:4d:25:50:
                    6f:95:a1:3b:05:ed:b5:f4:fe:f7:40:ab:90:5c:fc:
                    d3:04:8a:0f:88:0a:29:6b:a5:bf:f3:e9:cc:6d:ef:
                    cb:fc:8f:06:61:b9:11:98:a5:b9:6b:5b:91:dd:12:
                    16:9f:f1:0e:d5:65:5f:3b:a0:3f:63:18:4a:e5:36:
                    b0:14:74:eb:f0:7f:5a:c9:67:29:ff:cb:cf:70:c6:
                    3c:9c:e3:72:ab:05:64:ca:94:89:a2:b4:72:1f:1b:
                    d3:1e:7f:59:51:41:fc:7a:62:66:9a:fc:02:26:41:
                    96:e3:e8:98:9f:82:1b:fa:78:c3:65:2f:c2:b0:fb:
                    07:af:4d:04:bd:ec:75:6b:20:5d:5c:0c:fc:0b:9d:
                    24:a7:1b:af:ed:2c:4a:eb:af:e1:9a:65:04:42:67:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E5:72:A8:D2:60:A4:81:11:B7:C2:5F:50:7A:47:FB:30:67:F1:9F
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:47:19:b2:16:5a:a7:08:8b:3c:b1:56:17:7b:04:19:4d:db:
         cc:5c:c8:55:a2:13:46:aa:70:bb:80:af:2b:8a:3a:8a:4b:73:
         9d:81:89:ad:44:77:3f:dc:78:08:d0:00:cf:c7:e8:dd:28:78:
         8d:f2:86:c0:b4:e4:22:43:ea:40:57:3e:d1:4e:1e:03:54:ce:
         4a:21:a9:99:28:2d:e1:d9:d9:84:53:e8:bf:74:59:2a:3a:72:
         94:f5:20:f9:68:08:8b:48:ab:eb:e2:b6:33:31:4d:4c:21:42:
         81:dc:ef:20:8c:4a:a8:53:fd:20:a9:75:af:49:c5:52:e6:6e:
         0f:8c:7d:52:f6:99:2e:f0:7a:10:3e:2d:84:dd:74:a9:2b:aa:
         ff:50:c9:e1:35:4b:f6:1a:f7:cf:13:79:43:52:71:e3:5e:6a:
         6f:a4:37:13:6e:53:8a:2f:9d:0b:c7:92:b1:c3:37:eb:96:10:
         de:8b:52:88:17:91:2e:6b:2b:74:cb:4d:dd:c5:1d:b4:72:fd:
         c4:a8:88:9e:20:da:11:bd:8e:32:94:80:0a:d3:91:e2:c9:04:
         c5:0b:cd:82:9a:10:0e:55:32:46:60:8d:e0:25:f4:9a:dd:30:
         78:64:77:c4:d7:e2:40:63:fc:d0:6e:25:6f:31:58:03:79:be:
         13:e0:dc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----