Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3138312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          M4CqdF3Vf3h3F11PAyzrDZHMspNQlwFClZYOJe1NxQM=
Subject key identifier:   14:C5:2E:19:86:55:F6:29:1E:58:5B:63:B9:CD:EF:EB:42:0C:FA:4B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2CE9FC4A83F5EBF0064CD9EED6E669FFEA1451D5
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:29 +0000
ROA not before:           Wed 29 Sep 2021 23:55:29 +0000
ROA not after:            Fri 30 Sep 2022 00:00:29 +0000
asID:                     17451
IP address blocks:        182.253.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e9:fc:4a:83:f5:eb:f0:06:4c:d9:ee:d6:e6:69:ff:ea:14:51:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:29 2021 GMT
            Not After : Sep 30 00:00:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:ad:b8:59:5d:68:64:df:ca:8d:ec:05:58:
                    0b:67:e2:22:35:9a:5f:0e:f1:97:f1:79:22:10:92:
                    97:3d:da:81:35:6c:10:d3:a7:13:ee:0e:e8:7b:df:
                    9c:e1:63:02:81:9e:4c:73:bc:13:90:0b:5f:ed:12:
                    52:5d:df:41:f5:55:be:21:6f:e7:7d:41:c1:12:c0:
                    5b:dd:c5:00:a3:5b:42:dc:fc:a2:18:e6:e6:79:b2:
                    5c:78:56:43:15:92:ee:be:d3:18:50:57:31:59:2f:
                    10:da:42:e0:b5:9a:47:25:d5:45:ce:28:3e:a4:a6:
                    40:35:0f:f1:7b:2b:3e:94:4a:7c:4b:88:f7:dc:2b:
                    c4:7c:23:d7:2f:7a:73:e5:55:d3:bd:01:e1:82:d4:
                    eb:07:14:1e:b0:e8:dc:3e:3f:86:8c:39:19:8e:bc:
                    42:a1:22:7f:0e:43:d1:72:2f:bd:1c:82:60:c6:8c:
                    87:4c:ee:5d:fa:ec:c4:18:a6:26:eb:bf:79:85:36:
                    33:64:6e:f5:30:2e:30:93:9f:fb:c4:a8:37:db:ae:
                    d0:39:36:10:75:c5:ef:0d:34:7d:9c:40:ec:cb:4e:
                    23:65:03:c5:ea:bc:6e:5e:d8:e6:0c:2f:c8:69:d3:
                    b2:cc:cf:b9:7f:e0:71:d4:03:43:70:aa:7a:02:8a:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C5:2E:19:86:55:F6:29:1E:58:5B:63:B9:CD:EF:EB:42:0C:FA:4B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:7e:82:8d:c2:34:78:ed:3d:76:88:6d:12:b7:a4:f5:ce:e4:
         d0:d9:5a:cb:e6:c9:c1:ee:42:3f:9b:e3:08:4b:42:5d:e0:c5:
         09:7a:56:1b:2b:05:6d:02:f0:10:26:96:01:44:a9:dd:9e:90:
         72:e8:73:fa:b0:69:5b:83:05:f8:34:ab:c6:f6:7d:45:e5:46:
         85:2a:3a:0f:8e:fd:43:cc:9d:6e:63:c1:d1:ca:74:34:60:b4:
         a0:ec:23:cf:ef:78:fa:1c:89:56:4a:a8:54:ea:a1:01:fd:0e:
         f5:37:c2:27:3f:13:fc:44:96:f1:83:08:a1:52:b6:e3:a6:cb:
         3d:fe:9a:aa:f7:de:2e:5a:fe:d7:df:c2:a9:51:6e:07:17:c8:
         56:52:a2:3a:72:36:87:15:68:72:09:f1:47:e0:7b:8e:85:0d:
         95:9c:30:bb:de:51:c4:d1:77:1e:2d:06:5b:5d:18:58:e8:11:
         27:4c:71:e3:b4:9f:6a:03:d2:05:23:1f:9d:84:64:1c:00:dc:
         88:8c:54:14:c1:80:45:02:70:b7:6a:ae:b7:b5:17:d1:f7:a8:
         91:e1:1d:0b:c8:fa:16:eb:74:fb:9b:40:92:e5:94:7a:20:e7:
         c5:d1:e8:61:a2:70:d4:9b:5c:f1:79:86:ae:2f:49:c9:fa:14:
         2a:8d:9d:e1
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIULOn8SoP16/AGTNnu1uZp/+oUUdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MjlaFw0yMjA5MzAwMDAwMjlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjU2QUFEQjg1OTVENjg2NERG
Q0E4REVDMDU1ODBCNjdFMjIyMzU5QTVGMEVGMTk3RjE3OTIyMTA5Mjk3M0REQTgx
MzU2QzEwRDNBNzEzRUUwRUU4N0JERjlDRTE2MzAyODE5RTRDNzNCQzEzOTAwQjVG
RUQxMjUyNURERjQxRjU1NUJFMjE2RkU3N0Q0MUMxMTJDMDVCRERDNTAwQTM1QjQy
RENGQ0EyMThFNkU2NzlCMjVDNzg1NjQzMTU5MkVFQkVEMzE4NTA1NzMxNTkyRjEw
REE0MkUwQjU5QTQ3MjVENTQ1Q0UyODNFQTRBNjQwMzUwRkYxN0IyQjNFOTQ0QTdD
NEI4OEY3REMyQkM0N0MyM0Q3MkY3QTczRTU1NUQzQkQwMUUxODJENEVCMDcxNDFF
QjBFOERDM0UzRjg2OEMzOTE5OEVCQzQyQTEyMjdGMEU0M0QxNzIyRkJEMUM4MjYw
QzY4Qzg3NENFRTVERkFFQ0M0MThBNjI2RUJCRjc5ODUzNjMzNjQ2RUY1MzAyRTMw
OTM5RkZCQzRBODM3REJBRUQwMzkzNjEwNzVDNUVGMEQzNDdEOUM0MEVDQ0I0RTIz
NjUwM0M1RUFCQzZFNUVEOEU2MEMyRkM4NjlEM0IyQ0NDRkI5N0ZFMDcxRDQwMzQz
NzBBQTdBMDI4QTc4N0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtWqtuFldaGTfyo3sBVgLZ+IiNZpfDvGX8XkiEJKXPdqBNWwQ06cT
7g7oe9+c4WMCgZ5Mc7wTkAtf7RJSXd9B9VW+IW/nfUHBEsBb3cUAo1tC3PyiGObm
ebJceFZDFZLuvtMYUFcxWS8Q2kLgtZpHJdVFzig+pKZANQ/xeys+lEp8S4j33CvE
fCPXL3pz5VXTvQHhgtTrBxQesOjcPj+GjDkZjrxCoSJ/DkPRci+9HIJgxoyHTO5d
+uzEGKYm6795hTYzZG71MC4wk5/7xKg3267QOTYQdcXvDTR9nEDsy04jZQPF6rxu
XtjmDC/IadOyzM+5f+Bx1ANDcKp6Aop4fQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FBTFLhmGVfYpHlhbY7nN7+tCDPpLMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzODMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9tTANBgkqhkiG9w0BAQsFAAOCAQEAF36CjcI0
eO09dohtErek9c7k0Nlay+bJwe5CP5vjCEtCXeDFCXpWGysFbQLwECaWAUSp3Z6Q
cuhz+rBpW4MF+DSrxvZ9ReVGhSo6D479Q8ydbmPB0cp0NGC0oOwjz+94+hyJVkqo
VOqhAf0O9TfCJz8T/ESW8YMIoVK246bLPf6aqvfeLlr+19/CqVFuBxfIVlKiOnI2
hxVocgnxR+B7joUNlZwwu95RxNF3Hi0GW10YWOgRJ0xx47SfagPSBSMfnYRkHADc
iIxUFMGARQJwt2qut7UX0feokeEdC8j6Fut0+5tAkuWUeiDnxdHoYaJw1Jtc8XmG
ri9JyfoUKo2d4Q==
-----END CERTIFICATE-----