Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3138332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          UN/56oO2S9LEIAL7BEXRSTnULUQhUcZfaOGz397Cz/M=
Subject key identifier:   EF:5B:D5:06:EE:AA:D2:76:AB:94:79:77:05:44:00:85:A2:2A:99:32
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6494E580A41403DF9FD8931BC9C1004DDBF1D6F5
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138332e302f32342d3234203d3e203137343531.roa
Signing time:             Fri 15 Oct 2021 03:00:01 +0000
ROA not before:           Fri 15 Oct 2021 02:55:01 +0000
ROA not after:            Sat 15 Oct 2022 03:00:01 +0000
asID:                     17451
IP address blocks:        182.253.183.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:94:e5:80:a4:14:03:df:9f:d8:93:1b:c9:c1:00:4d:db:f1:d6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Oct 15 02:55:01 2021 GMT
            Not After : Oct 15 03:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:a3:05:19:40:79:46:a4:c3:73:2e:06:8f:
                    13:4d:fd:0d:7a:d6:b0:58:64:05:e7:24:07:35:03:
                    32:27:7c:c0:da:95:00:4c:7d:65:04:d3:d5:b7:d3:
                    19:f6:33:26:99:ac:f8:99:3c:7d:84:1c:58:ef:09:
                    cd:0e:81:94:84:31:08:1c:bf:db:04:f5:04:20:7d:
                    58:e2:97:ae:bd:06:2d:c7:86:b3:42:53:1a:2c:02:
                    12:5e:7b:8b:6b:52:e1:bc:9b:53:52:31:97:e8:ad:
                    cf:17:9f:47:b5:ca:8c:48:ef:be:c7:67:64:a5:fe:
                    96:e5:5c:e9:aa:f5:2b:e0:fd:59:2f:1c:eb:45:10:
                    70:dc:0d:61:d0:8f:f9:b5:64:e0:94:96:27:f4:68:
                    a0:f0:11:7e:14:50:4c:9e:0b:17:ef:2c:d3:71:88:
                    93:c7:90:fd:d2:36:26:b3:fc:b3:74:a0:a3:10:d4:
                    47:08:99:47:42:57:0d:72:83:c5:53:83:53:0f:64:
                    cd:6a:2a:b2:1b:c0:ef:5e:db:63:c8:18:7a:5e:55:
                    f4:e9:42:48:f8:1d:9a:90:92:3a:94:4f:d8:a9:58:
                    60:72:ab:22:28:ed:c4:64:79:2d:10:57:1c:28:67:
                    01:9c:37:d8:e8:f8:f0:55:a9:84:ee:f5:fc:0a:12:
                    24:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5B:D5:06:EE:AA:D2:76:AB:94:79:77:05:44:00:85:A2:2A:99:32
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3138332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:8a:38:1e:4f:5b:1a:32:9b:9b:38:0c:de:43:4f:32:f9:71:
         df:0d:16:17:06:a9:65:d1:7f:f5:3d:fa:2a:e1:b1:15:15:ed:
         be:14:a8:7f:df:dc:d2:be:ae:69:91:98:a1:92:80:a0:15:2e:
         7f:f9:0c:97:21:a0:58:06:9f:e9:3c:ef:a8:8d:d6:a0:3d:7e:
         85:fd:f8:f0:ab:52:70:28:f6:68:76:51:c1:a1:a2:86:70:ce:
         cf:42:07:68:b8:e7:56:f0:fc:0a:16:43:97:26:f8:f4:13:17:
         e9:3c:67:47:8c:14:b8:54:28:fc:38:7b:cb:77:0c:92:6d:17:
         3b:de:2c:ea:75:10:6a:dd:de:91:c7:22:3c:a3:b5:91:2e:99:
         57:97:28:70:28:c8:7b:3a:a8:ad:df:a7:46:50:0e:26:f4:7c:
         76:52:76:e9:24:64:e1:7d:02:d3:ff:26:3e:4a:b6:8a:f4:f6:
         86:dc:d3:67:04:9b:0d:e9:5d:0b:ff:c6:ea:43:06:2b:0e:d4:
         a1:0e:e1:bd:43:73:68:21:90:21:02:eb:4e:92:9f:99:ed:e3:
         83:46:ed:69:56:95:64:32:32:7b:43:29:f0:bb:ab:d1:ec:e0:
         e8:4f:fe:ed:b2:47:6c:ec:da:36:a4:de:ca:05:05:b9:9a:d8:
         f9:d4:e5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----