Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3139342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          V4ZVwY+4/W9wr/vx2gnq3bh51vIkwNoRXy+nGqlaS1I=
Subject key identifier:   7F:B5:67:74:A2:70:B0:09:9C:CF:4F:20:E4:4C:97:EA:1A:3D:A5:B9
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       30E28664DFB9B19A06BE70564A21188F15C43389
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139342e302f32342d3234203d3e203137343531.roa
Signing time:             Fri 16 Jul 2021 00:13:05 +0000
ROA not before:           Fri 16 Jul 2021 00:08:05 +0000
ROA not after:            Sat 16 Jul 2022 00:13:05 +0000
asID:                     17451
IP address blocks:        182.253.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e2:86:64:df:b9:b1:9a:06:be:70:56:4a:21:18:8f:15:c4:33:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jul 16 00:08:05 2021 GMT
            Not After : Jul 16 00:13:05 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d2:fa:ff:65:d7:a3:e4:8a:27:c8:98:16:bf:
                    9a:db:28:9d:92:1a:93:c7:ae:4d:b4:8a:c5:dd:a1:
                    da:35:19:39:ab:c5:e7:e5:45:e0:e9:ac:f3:df:a4:
                    75:a6:02:41:ce:91:34:ec:93:cb:3e:3c:c9:04:30:
                    d6:85:be:53:5f:3a:0e:53:69:eb:0b:55:4b:78:27:
                    20:f0:be:32:02:1b:de:f6:56:c3:fe:61:68:66:ed:
                    e0:e4:58:27:38:5b:45:c9:ac:46:45:13:01:59:c6:
                    22:fc:5c:87:89:0f:8c:77:eb:50:ec:a4:f1:03:84:
                    80:bc:a5:cc:68:68:28:c5:c2:d6:18:de:d7:8b:7a:
                    74:27:1b:0c:5d:4a:9f:3d:9e:63:a8:2b:b8:e5:bc:
                    af:01:bd:6c:ca:be:61:6a:cb:ad:a9:e3:b3:07:24:
                    a9:62:3a:a8:7c:c3:b0:48:53:8b:81:b7:81:e7:0a:
                    24:b9:79:6e:8a:29:bf:65:de:51:42:9e:81:8b:58:
                    48:ff:fc:d8:80:f4:ce:fa:46:3a:c4:70:ea:c9:51:
                    89:22:da:83:8a:84:e6:c6:cb:1c:92:2a:40:12:94:
                    a6:69:a8:92:97:95:44:ca:73:a8:fc:ba:d4:52:1c:
                    d4:a1:2b:b3:5d:17:f4:b7:cd:c2:bd:18:5c:37:ae:
                    27:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B5:67:74:A2:70:B0:09:9C:CF:4F:20:E4:4C:97:EA:1A:3D:A5:B9
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d5:d5:6a:ce:09:f3:26:7c:99:65:08:9d:b2:b0:b5:04:a4:
         df:1f:cf:8d:61:6e:e0:d0:4b:e4:b4:ae:f7:fe:e8:0c:88:1d:
         1f:1e:a1:c3:6b:51:ed:2a:2b:de:87:24:14:9c:d6:53:0e:90:
         c4:0d:6f:b6:dd:cd:29:6c:78:c0:43:b1:47:10:6b:8d:de:46:
         8d:90:01:2b:d7:59:84:c8:90:15:f1:90:c7:ce:2e:0d:79:d8:
         ff:97:bb:51:08:01:3a:0b:42:2d:8b:d6:65:b8:30:d2:d3:23:
         31:77:4e:85:c4:84:71:54:ad:50:e4:60:5a:28:dd:49:52:7f:
         f3:ec:30:97:d3:fe:9b:a2:a6:91:21:04:ab:1c:37:b5:5b:74:
         ef:c7:01:bb:a5:02:b2:c5:3d:cf:a4:39:c9:16:b4:27:50:c3:
         fe:f3:cb:78:78:bf:89:32:a4:a0:eb:2e:d8:83:4f:7d:9d:6f:
         f4:f1:1d:fe:a7:eb:bc:ee:09:fd:65:19:93:5c:9b:5b:d3:40:
         9f:d9:94:ff:c5:95:e8:c8:23:c1:6f:dd:63:38:70:a3:c5:7a:
         18:af:4c:a3:28:ea:1a:fc:0b:7b:ba:b5:79:8c:89:65:53:46:
         4b:f0:0b:92:97:90:d7:66:4d:49:9d:dc:81:c3:0d:62:0a:bf:
         2e:db:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----