Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3231372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Z5g26ZR/oeveDC3W1g1LdXGWxenM0R7rt0MmLnPyrbw=
Subject key identifier:   B8:91:81:8B:62:FD:E9:B4:99:6F:7A:2C:01:82:05:BB:49:F7:6F:9D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6A5958AAC8809AFD54977D47F710E4CB10D8083A
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:07 +0000
ROA not before:           Wed 29 Sep 2021 23:56:07 +0000
ROA not after:            Fri 30 Sep 2022 00:01:07 +0000
asID:                     17451
IP address blocks:        182.253.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:59:58:aa:c8:80:9a:fd:54:97:7d:47:f7:10:e4:cb:10:d8:08:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:07 2021 GMT
            Not After : Sep 30 00:01:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6f:8a:c3:12:02:2c:e1:5b:15:18:31:36:58:
                    bb:67:0a:47:19:6f:54:eb:49:a2:00:d2:25:be:c1:
                    55:36:06:59:bd:45:9d:93:4c:36:4f:56:27:cc:15:
                    5b:1b:c6:97:53:15:a9:cd:7a:5b:e8:4f:8c:75:af:
                    98:2d:a6:ce:5e:90:f5:43:54:aa:af:18:56:79:05:
                    e0:2c:f3:8e:c4:46:d6:88:97:e7:62:8f:91:55:8e:
                    41:32:59:b1:c6:51:56:52:71:ad:85:6e:49:be:24:
                    0a:ad:e0:18:9c:ae:69:ef:e8:4c:4f:c3:fc:39:4e:
                    ef:53:af:b2:4f:ff:e2:1e:b3:a2:87:2f:8f:20:b6:
                    0f:e5:15:8c:1e:0e:0b:c0:5d:ff:ef:38:2d:75:75:
                    0e:b4:ac:a1:6d:61:cd:f6:9b:ab:eb:34:ea:df:48:
                    f6:2c:59:ee:fb:1f:75:47:00:7a:d8:e6:53:f8:8e:
                    48:ac:33:a6:84:d6:70:fb:21:7e:d5:b4:48:04:d1:
                    00:3f:74:87:67:be:11:6a:bf:64:bb:a1:21:26:dd:
                    c9:7d:77:31:54:56:00:21:76:65:42:af:9a:5b:70:
                    a0:46:8b:ef:f1:a7:13:77:24:0c:1f:1a:fc:78:61:
                    33:72:cd:df:ad:99:d8:c9:e2:64:8c:3f:ec:3e:4f:
                    b7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:91:81:8B:62:FD:E9:B4:99:6F:7A:2C:01:82:05:BB:49:F7:6F:9D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:81:f2:36:50:05:c6:f1:b7:7d:2a:15:87:85:1d:cb:37:cc:
         34:06:69:eb:e9:e0:fb:11:36:2c:a4:68:3e:52:3e:9e:59:c2:
         b2:f4:8e:ec:dd:b5:1d:96:3d:9e:66:c9:cb:f8:0f:c2:b0:7b:
         07:94:e7:53:ab:01:12:2c:72:3c:03:22:75:7c:9d:02:bd:38:
         5b:39:29:2f:2d:27:35:46:c8:55:f3:94:b7:76:b7:35:83:5e:
         8b:f6:ad:0e:8b:c6:9c:41:99:cd:c3:25:ac:0a:7f:f1:37:cc:
         76:77:9b:33:29:4c:5d:d1:f0:e8:cc:67:c9:c3:57:2b:49:5e:
         28:61:84:0d:48:66:d7:c6:df:a9:18:e7:d8:89:d8:87:32:4e:
         2d:65:4d:55:7c:2a:19:5f:bc:bb:b6:30:65:f1:2d:31:86:21:
         fa:15:e2:5e:7c:6b:e0:5c:1c:08:d6:96:d8:16:24:95:43:ea:
         39:10:11:70:25:65:82:7b:52:45:58:d1:cf:f9:ad:d8:23:6e:
         b0:4b:34:5c:b4:5e:60:db:93:14:4a:8e:07:ea:45:28:52:7d:
         fd:8d:18:ba:b1:dc:45:19:92:38:95:69:eb:5f:82:c9:e4:a5:
         bf:3f:5c:06:60:a7:1f:eb:01:99:58:fb:f0:ba:c5:5e:9a:b7:
         97:35:fa:18
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUallYqsiAmv1Ul31H9xDkyxDYCDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU2MDdaFw0yMjA5MzAwMDAxMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTc2RjhBQzMxMjAyMkNFMTVC
MTUxODMxMzY1OEJCNjcwQTQ3MTk2RjU0RUI0OUEyMDBEMjI1QkVDMTU1MzYwNjU5
QkQ0NTlEOTM0QzM2NEY1NjI3Q0MxNTVCMUJDNjk3NTMxNUE5Q0Q3QTVCRTg0RjhD
NzVBRjk4MkRBNkNFNUU5MEY1NDM1NEFBQUYxODU2NzkwNUUwMkNGMzhFQzQ0NkQ2
ODg5N0U3NjI4RjkxNTU4RTQxMzI1OUIxQzY1MTU2NTI3MUFEODU2RTQ5QkUyNDBB
QURFMDE4OUNBRTY5RUZFODRDNEZDM0ZDMzk0RUVGNTNBRkIyNEZGRkUyMUVCM0Ey
ODcyRjhGMjBCNjBGRTUxNThDMUUwRTBCQzA1REZGRUYzODJENzU3NTBFQjRBQ0Ex
NkQ2MUNERjY5QkFCRUIzNEVBREY0OEY2MkM1OUVFRkIxRjc1NDcwMDdBRDhFNjUz
Rjg4RTQ4QUMzM0E2ODRENjcwRkIyMTdFRDVCNDQ4MDREMTAwM0Y3NDg3NjdCRTEx
NkFCRjY0QkJBMTIxMjZEREM5N0Q3NzMxNTQ1NjAwMjE3NjY1NDJBRjlBNUI3MEEw
NDY4QkVGRjFBNzEzNzcyNDBDMUYxQUZDNzg2MTMzNzJDRERGQUQ5OUQ4QzlFMjY0
OEMzRkVDM0U0RkI3QUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp2+KwxICLOFbFRgxNli7ZwpHGW9U60miANIlvsFVNgZZvUWdk0w2
T1YnzBVbG8aXUxWpzXpb6E+Mda+YLabOXpD1Q1SqrxhWeQXgLPOOxEbWiJfnYo+R
VY5BMlmxxlFWUnGthW5JviQKreAYnK5p7+hMT8P8OU7vU6+yT//iHrOihy+PILYP
5RWMHg4LwF3/7zgtdXUOtKyhbWHN9pur6zTq30j2LFnu+x91RwB62OZT+I5IrDOm
hNZw+yF+1bRIBNEAP3SHZ74Rar9ku6EhJt3JfXcxVFYAIXZlQq+aW3CgRovv8acT
dyQMHxr8eGEzcs3frZnYyeJkjD/sPk+3rQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FLiRgYti/em0mW96LAGCBbtJ92+dMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzIzMTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb92TANBgkqhkiG9w0BAQsFAAOCAQEAH4HyNlAF
xvG3fSoVh4UdyzfMNAZp6+ng+xE2LKRoPlI+nlnCsvSO7N21HZY9nmbJy/gPwrB7
B5TnU6sBEixyPAMidXydAr04WzkpLy0nNUbIVfOUt3a3NYNei/atDovGnEGZzcMl
rAp/8TfMdnebMylMXdHw6MxnycNXK0leKGGEDUhm18bfqRjn2InYhzJOLWVNVXwq
GV+8u7YwZfEtMYYh+hXiXnxr4FwcCNaW2BYklUPqORARcCVlgntSRVjRz/mt2CNu
sEs0XLReYNuTFEqOB+pFKFJ9/Y0YurHcRRmSOJVp61+CyeSlvz9cBmCnH+sBmVj7
8LrFXpq3lzX6GA==
-----END CERTIFICATE-----