Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3230352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          TYE9Vk9Y9KzUTgu9cZC1LOUXYjTQVuOy+lzQlfDOkFQ=
Subject key identifier:   D6:08:8B:62:28:03:C0:76:01:6D:14:68:49:E3:E0:D7:E6:85:82:11
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5E70614175B8EA78F2D074C4C9A3B1B7429D44A0
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:03 +0000
ROA not before:           Wed 29 Sep 2021 23:56:03 +0000
ROA not after:            Fri 30 Sep 2022 00:01:03 +0000
asID:                     17451
IP address blocks:        182.253.205.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:70:61:41:75:b8:ea:78:f2:d0:74:c4:c9:a3:b1:b7:42:9d:44:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:03 2021 GMT
            Not After : Sep 30 00:01:03 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:43:e2:07:13:ce:ef:23:32:49:5b:a7:da:0f:
                    71:1a:dc:25:00:77:81:0b:7b:dd:75:33:ea:2a:1e:
                    5c:2e:48:bc:bf:12:62:2d:1b:ed:18:1c:1d:ec:fa:
                    0e:db:e1:e4:6b:67:a4:d5:6f:51:16:85:d3:51:4e:
                    3d:68:43:97:b9:5c:c7:b9:54:78:e4:17:a3:e5:1d:
                    b2:be:d6:29:4b:31:37:22:96:aa:83:e0:e6:07:95:
                    d7:83:76:b8:2e:0e:80:18:00:70:fb:c6:e6:ac:6f:
                    c5:53:de:7a:ce:61:2e:83:a7:65:06:64:f7:4d:11:
                    51:dc:26:ba:dc:e0:31:b4:ac:20:b0:20:6f:8c:8b:
                    0d:7e:a6:a6:86:20:fe:35:41:61:65:42:3f:39:a6:
                    0b:9e:c0:23:03:a4:25:67:d0:07:26:3d:4a:07:82:
                    01:a1:3b:00:04:ab:de:59:46:12:b6:1a:3f:e3:cb:
                    64:e2:ec:ab:0d:e9:fd:44:f2:76:75:3c:3f:a9:88:
                    25:36:06:cf:21:70:42:19:0e:d5:4e:a7:1d:57:11:
                    23:61:e3:2e:ad:93:70:2f:50:f1:ce:29:61:1d:b0:
                    ef:18:de:f2:28:75:b8:ea:1a:90:df:69:c6:9a:fa:
                    6c:22:d6:64:18:9c:1e:1c:02:8c:c4:33:0d:7e:fa:
                    da:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:08:8B:62:28:03:C0:76:01:6D:14:68:49:E3:E0:D7:E6:85:82:11
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:cd:a4:54:0b:06:91:11:7b:11:40:2c:f2:ec:09:05:ad:8e:
         e7:6a:6c:70:0f:a0:71:73:81:66:2a:8b:f6:3b:17:ab:a1:06:
         6b:35:7d:d5:83:d2:01:cf:ba:5f:7d:06:86:73:3a:06:8a:8f:
         a2:38:65:60:14:0c:db:42:96:53:26:d0:32:ce:a2:7d:bf:2d:
         b7:fc:71:27:49:00:1c:52:cd:67:3d:ee:f0:c2:82:87:89:62:
         ec:9d:41:c4:35:89:3d:94:77:02:3f:d0:5e:2f:16:f7:22:05:
         ce:b9:2a:51:29:18:ba:00:64:1c:ca:f8:16:32:19:62:14:50:
         4d:2e:ff:0b:dc:1c:a1:60:04:b8:87:45:05:eb:e8:b1:9d:58:
         5d:18:98:b4:37:ed:fa:10:14:38:e6:21:c2:b5:d7:57:14:77:
         11:34:28:58:f1:7c:78:b8:fd:18:4e:b4:d5:f8:2a:b7:19:42:
         47:f1:42:69:fc:42:43:04:ad:6e:cd:ae:18:fd:bf:16:26:c3:
         01:c7:f0:70:b1:0b:47:0f:a2:4f:53:d5:8d:39:73:f6:bd:ab:
         32:1f:c9:4d:06:f4:49:bd:4a:bb:ca:92:25:fd:3e:d3:a9:66:
         75:c6:4b:69:da:0b:0b:e2:7d:9b:13:74:c2:a6:bc:1f:3e:ec:
         7f:03:0a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----