Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3135302e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3135302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Gyq3vLc1f7VJcGBh/5iXrBdLjMTxsEYe4OjEY+nY3xY=
Subject key identifier:   AB:BE:0D:7A:D5:B8:AA:BA:9D:EC:6D:FB:E3:DB:5A:CB:B9:C1:29:01
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       49003449B2C733E83EA12AC7FC8ABEDBF8BF0254
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3135302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:41 +0000
ROA not before:           Wed 29 Sep 2021 23:55:41 +0000
ROA not after:            Fri 30 Sep 2022 00:00:41 +0000
asID:                     17451
IP address blocks:        182.253.150.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:00:34:49:b2:c7:33:e8:3e:a1:2a:c7:fc:8a:be:db:f8:bf:02:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:41 2021 GMT
            Not After : Sep 30 00:00:41 2022 GMT
        Subject: CN=3082010A0282010100C2525187B13953BE49B90ACC2CB80668824410CA9FA6FBAB07D9764B0F47374D9CD0D708A15E6CBF670D1245DBB29DB7E8654A253587116B72BC22239B8A72D4C42734C242121E8A251955C243F1B1C4072F80F97ABD81ADA872B508F3A280119DA5A3CF17039CD32CD41574D7A6AAF9FBBBBC946C3BD3CCBCD4FC1ED17D497B516622922F925C8B4FA0AF3EAC3A17698006E230EE379393203B54D27D43B5FE129D36846F8283D63CDB9A25E046D310A2B8DE7390A3A67BC12318F3E267637699950CD35D33E632D12668C1B1E44B982F37E29AD47D3F0EE2835EFC824528187B0674A24AE9D4074EB7A13039599000EBB5F2A7F5ABF35DD95136B746B9E2A30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:51:87:b1:39:53:be:49:b9:0a:cc:2c:b8:
                    06:68:82:44:10:ca:9f:a6:fb:ab:07:d9:76:4b:0f:
                    47:37:4d:9c:d0:d7:08:a1:5e:6c:bf:67:0d:12:45:
                    db:b2:9d:b7:e8:65:4a:25:35:87:11:6b:72:bc:22:
                    23:9b:8a:72:d4:c4:27:34:c2:42:12:1e:8a:25:19:
                    55:c2:43:f1:b1:c4:07:2f:80:f9:7a:bd:81:ad:a8:
                    72:b5:08:f3:a2:80:11:9d:a5:a3:cf:17:03:9c:d3:
                    2c:d4:15:74:d7:a6:aa:f9:fb:bb:bc:94:6c:3b:d3:
                    cc:bc:d4:fc:1e:d1:7d:49:7b:51:66:22:92:2f:92:
                    5c:8b:4f:a0:af:3e:ac:3a:17:69:80:06:e2:30:ee:
                    37:93:93:20:3b:54:d2:7d:43:b5:fe:12:9d:36:84:
                    6f:82:83:d6:3c:db:9a:25:e0:46:d3:10:a2:b8:de:
                    73:90:a3:a6:7b:c1:23:18:f3:e2:67:63:76:99:95:
                    0c:d3:5d:33:e6:32:d1:26:68:c1:b1:e4:4b:98:2f:
                    37:e2:9a:d4:7d:3f:0e:e2:83:5e:fc:82:45:28:18:
                    7b:06:74:a2:4a:e9:d4:07:4e:b7:a1:30:39:59:90:
                    00:eb:b5:f2:a7:f5:ab:f3:5d:d9:51:36:b7:46:b9:
                    e2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BE:0D:7A:D5:B8:AA:BA:9D:EC:6D:FB:E3:DB:5A:CB:B9:C1:29:01
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3135302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:d2:d0:e7:ef:00:13:0f:59:d2:69:bb:25:60:d5:a2:bf:2c:
         21:55:ca:9f:6a:64:2f:41:c0:a2:57:62:a1:8f:27:81:aa:83:
         00:bc:64:b3:58:d7:89:9f:18:2b:45:6f:54:a5:8a:b7:3c:9d:
         67:8c:da:c8:31:af:b0:d1:bf:23:42:8a:48:99:79:9f:f4:31:
         19:b2:7d:87:a5:60:6c:f8:19:67:14:48:14:94:28:75:63:f0:
         79:d1:05:e9:37:9e:13:e2:e1:1f:64:c7:c4:85:1f:ce:c8:88:
         b0:ad:11:d0:89:de:02:85:9c:84:7e:2a:18:f7:bb:c0:bc:69:
         86:ee:96:33:c4:32:66:5d:03:f5:62:e2:99:ba:24:a0:d9:b1:
         83:88:da:d7:7f:0e:f3:b2:cc:23:e1:06:c9:bd:2b:07:ea:18:
         b9:44:57:a3:ab:95:3b:0b:06:a2:39:7d:34:76:f3:42:e9:f5:
         94:50:5c:c6:67:95:8b:bd:ea:27:fc:09:c3:2c:8c:c2:1b:1b:
         6f:a6:a9:dd:d2:ea:8c:bd:46:77:fd:3f:85:73:48:f3:0e:ca:
         83:ca:19:e7:70:5e:f2:9e:f9:64:df:70:31:83:f0:9b:28:55:
         0b:40:4a:68:41:c3:e7:69:80:4b:80:a2:48:99:7d:7e:a6:63:
         b4:f5:ba:cf
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUSQA0SbLHM+g+oSrH/Iq+2/i/AlQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDFaFw0yMjA5MzAwMDAwNDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzI1MjUxODdCMTM5NTNCRTQ5
QjkwQUNDMkNCODA2Njg4MjQ0MTBDQTlGQTZGQkFCMDdEOTc2NEIwRjQ3Mzc0RDlD
RDBENzA4QTE1RTZDQkY2NzBEMTI0NURCQjI5REI3RTg2NTRBMjUzNTg3MTE2Qjcy
QkMyMjIzOUI4QTcyRDRDNDI3MzRDMjQyMTIxRThBMjUxOTU1QzI0M0YxQjFDNDA3
MkY4MEY5N0FCRDgxQURBODcyQjUwOEYzQTI4MDExOURBNUEzQ0YxNzAzOUNEMzJD
RDQxNTc0RDdBNkFBRjlGQkJCQkM5NDZDM0JEM0NDQkNENEZDMUVEMTdENDk3QjUx
NjYyMjkyMkY5MjVDOEI0RkEwQUYzRUFDM0ExNzY5ODAwNkUyMzBFRTM3OTM5MzIw
M0I1NEQyN0Q0M0I1RkUxMjlEMzY4NDZGODI4M0Q2M0NEQjlBMjVFMDQ2RDMxMEEy
QjhERTczOTBBM0E2N0JDMTIzMThGM0UyNjc2Mzc2OTk5NTBDRDM1RDMzRTYzMkQx
MjY2OEMxQjFFNDRCOTgyRjM3RTI5QUQ0N0QzRjBFRTI4MzVFRkM4MjQ1MjgxODdC
MDY3NEEyNEFFOUQ0MDc0RUI3QTEzMDM5NTk5MDAwRUJCNUYyQTdGNUFCRjM1REQ5
NTEzNkI3NDZCOUUyQTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwlJRh7E5U75JuQrMLLgGaIJEEMqfpvurB9l2Sw9HN02c0NcIoV5s
v2cNEkXbsp236GVKJTWHEWtyvCIjm4py1MQnNMJCEh6KJRlVwkPxscQHL4D5er2B
rahytQjzooARnaWjzxcDnNMs1BV016aq+fu7vJRsO9PMvNT8HtF9SXtRZiKSL5Jc
i0+grz6sOhdpgAbiMO43k5MgO1TSfUO1/hKdNoRvgoPWPNuaJeBG0xCiuN5zkKOm
e8EjGPPiZ2N2mZUM010z5jLRJmjBseRLmC834prUfT8O4oNe/IJFKBh7BnSiSunU
B063oTA5WZAA67Xyp/Wr813ZUTa3RrniowIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FKu+DXrVuKq6next++PbWsu5wSkBMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzNTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9ljANBgkqhkiG9w0BAQsFAAOCAQEAEtLQ5+8A
Ew9Z0mm7JWDVor8sIVXKn2pkL0HAoldioY8ngaqDALxks1jXiZ8YK0VvVKWKtzyd
Z4zayDGvsNG/I0KKSJl5n/QxGbJ9h6VgbPgZZxRIFJQodWPwedEF6TeeE+LhH2TH
xIUfzsiIsK0R0IneAoWchH4qGPe7wLxphu6WM8QyZl0D9WLimbokoNmxg4ja138O
87LMI+EGyb0rB+oYuURXo6uVOwsGojl9NHbzQun1lFBcxmeVi73qJ/wJwyyMwhsb
b6ap3dLqjL1Gd/0/hXNI8w7Kg8oZ53Be8p75ZN9wMYPwmyhVC0BKaEHD52mAS4Ci
SJl9fqZjtPW6zw==
-----END CERTIFICATE-----