Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3135382e302f32332d3233203d3e203137343531.roa
File:                     3138322e3235332e3135382e302f32332d3233203d3e203137343531.roa (raw, json)
Hash identifier:          rpqiTzhzs+WVG8zVNX3I7/YRFDTjhARGGg8lux9rdog=
Subject key identifier:   0A:14:63:E1:7E:A1:F2:6A:1C:ED:D1:DA:FB:AB:9C:77:B7:47:87:0A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       21B9219C049A1CED071E8468461543DFF5528EDD
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3135382e302f32332d3233203d3e203137343531.roa
Signing time:             Wed 23 Jun 2021 01:19:42 +0000
ROA not before:           Wed 23 Jun 2021 01:14:42 +0000
ROA not after:            Thu 23 Jun 2022 01:19:42 +0000
asID:                     17451
IP address blocks:        182.253.158.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:b9:21:9c:04:9a:1c:ed:07:1e:84:68:46:15:43:df:f5:52:8e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jun 23 01:14:42 2021 GMT
            Not After : Jun 23 01:19:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:fa:ea:31:3c:50:cc:49:23:6a:f4:3a:d2:
                    f3:10:9a:8d:c8:44:2e:1b:77:3e:37:74:ef:23:24:
                    d3:07:fc:d7:f1:79:d2:30:f5:f5:79:e4:71:fc:96:
                    a4:e4:00:b9:ed:23:0d:85:53:e1:28:39:da:37:0a:
                    3e:2f:6c:55:2a:92:f4:a9:d0:78:ed:25:b2:bb:9b:
                    4f:56:3a:91:32:bd:c4:e8:91:9d:cb:75:73:3e:ad:
                    03:80:b5:d9:98:aa:fb:f6:60:5a:2c:c3:da:66:e6:
                    72:f2:55:9d:d0:12:a6:f6:71:17:a8:b3:1a:b4:ea:
                    a4:bd:0b:e6:67:56:30:78:39:4d:91:8a:b4:1b:7d:
                    44:42:e7:05:eb:24:86:74:70:f2:b9:c7:7c:dd:5f:
                    d8:e7:87:04:6b:a4:5a:77:0b:d7:01:6a:88:e3:aa:
                    ed:8a:ee:ce:ff:3c:eb:52:81:1c:07:ec:62:95:a2:
                    c7:2f:4c:13:16:71:c1:af:99:02:ef:7a:66:da:fe:
                    d7:c9:23:0c:d0:de:27:2f:c8:34:2f:74:fb:08:ff:
                    29:62:2d:50:ad:38:04:6e:98:2a:6f:b8:6f:22:49:
                    68:34:19:af:7e:3b:d6:d4:f4:ca:ce:ea:c0:5f:30:
                    86:b7:15:64:ea:98:fa:c9:6b:96:35:74:02:76:c7:
                    95:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:14:63:E1:7E:A1:F2:6A:1C:ED:D1:DA:FB:AB:9C:77:B7:47:87:0A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3135382e302f32332d3233203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:0d:14:37:39:d1:17:83:57:7e:d7:c4:4b:61:e4:3a:70:8d:
         55:11:2e:7d:5c:43:e6:2e:79:34:00:19:93:ac:f0:0a:0d:55:
         05:10:17:07:fb:61:4e:56:81:cd:c1:5e:7b:0b:22:40:21:b0:
         57:3b:96:e7:d4:61:c5:ad:64:13:90:3e:52:5b:fc:1c:de:44:
         02:9b:20:94:ec:b1:ce:09:2b:9f:ac:6d:89:b7:1b:4c:35:46:
         f3:a1:dc:36:5c:e8:53:60:68:63:6c:6d:51:d4:2e:e4:3d:7a:
         b0:39:64:40:5f:02:9d:33:aa:33:d4:c3:61:09:0b:d2:be:6b:
         6e:9c:d1:3d:85:a7:36:51:14:dd:c7:6d:39:71:26:37:19:73:
         cb:d9:d0:3c:2b:99:95:54:98:3f:1a:7b:1c:f2:31:86:b4:28:
         60:06:82:1e:ff:b3:89:3c:dd:32:7e:80:24:fb:c6:21:6e:79:
         76:bf:0c:f9:65:15:c3:b1:fb:05:c6:8c:d5:33:3a:19:41:29:
         8c:b9:a1:21:14:9b:56:4e:d6:03:ca:ee:d9:c6:a5:ba:ba:38:
         91:c0:64:89:c5:ae:88:1b:bf:eb:95:3e:7f:48:10:e3:66:82:
         2d:d5:a8:5f:c6:13:73:42:1a:c5:99:9f:f3:18:d5:d9:06:ce:
         a8:d5:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----