Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3231392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          QAcLI+HAcr4mFXXrgVRE/WRF/NQ/pM+wC+mOOhIbA8A=
Subject key identifier:   D8:01:40:42:C1:CD:2A:5A:E9:5A:6B:DF:E1:97:9D:F4:26:57:49:F5
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       047342D9D567271F989128B25B303D148E3D3D07
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231392e302f32342d3234203d3e203137343531.roa
Signing time:             Wed 07 Jul 2021 03:46:08 +0000
ROA not before:           Wed 07 Jul 2021 03:41:08 +0000
ROA not after:            Thu 07 Jul 2022 03:46:08 +0000
asID:                     17451
IP address blocks:        182.253.219.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:73:42:d9:d5:67:27:1f:98:91:28:b2:5b:30:3d:14:8e:3d:3d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jul  7 03:41:08 2021 GMT
            Not After : Jul  7 03:46:08 2022 GMT
        Subject: CN=3082010A0282010100CDEE9FFBA4E1936E0265EECE19768D527FC099F25930DAA232C988F8A22D4D9B9F83F56AB5BFD2B26E23C3E7B57112BF97E47A3595B8384527FF20C3D36DA47511E261A21DC9200A054AED168CCA67199935AFB23C34BD410DB4BFAA993D90C34F7DCA6F98378E4507AC1AB47EF2943496A4F1275DF0E6E7AC2E8813C89D53BEB0CFA94ABCD90CFDD8096CCD738DDFF1AD6DA731A0183C14E29C1F83B14FCB2A270284E9579E1A8D4E725193F025E058B23B50B9A6556B7FD3B48117796EB68D9ED1EABF535EDB48AECC2DAAC125FC24C008865CD761938B5CEF6CC0EC983D622CF40C682D53A7356C4037F9A9504B5899D160B2594B575A86CA0E06C8F8E7CB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:9f:fb:a4:e1:93:6e:02:65:ee:ce:19:76:
                    8d:52:7f:c0:99:f2:59:30:da:a2:32:c9:88:f8:a2:
                    2d:4d:9b:9f:83:f5:6a:b5:bf:d2:b2:6e:23:c3:e7:
                    b5:71:12:bf:97:e4:7a:35:95:b8:38:45:27:ff:20:
                    c3:d3:6d:a4:75:11:e2:61:a2:1d:c9:20:0a:05:4a:
                    ed:16:8c:ca:67:19:99:35:af:b2:3c:34:bd:41:0d:
                    b4:bf:aa:99:3d:90:c3:4f:7d:ca:6f:98:37:8e:45:
                    07:ac:1a:b4:7e:f2:94:34:96:a4:f1:27:5d:f0:e6:
                    e7:ac:2e:88:13:c8:9d:53:be:b0:cf:a9:4a:bc:d9:
                    0c:fd:d8:09:6c:cd:73:8d:df:f1:ad:6d:a7:31:a0:
                    18:3c:14:e2:9c:1f:83:b1:4f:cb:2a:27:02:84:e9:
                    57:9e:1a:8d:4e:72:51:93:f0:25:e0:58:b2:3b:50:
                    b9:a6:55:6b:7f:d3:b4:81:17:79:6e:b6:8d:9e:d1:
                    ea:bf:53:5e:db:48:ae:cc:2d:aa:c1:25:fc:24:c0:
                    08:86:5c:d7:61:93:8b:5c:ef:6c:c0:ec:98:3d:62:
                    2c:f4:0c:68:2d:53:a7:35:6c:40:37:f9:a9:50:4b:
                    58:99:d1:60:b2:59:4b:57:5a:86:ca:0e:06:c8:f8:
                    e7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:01:40:42:C1:CD:2A:5A:E9:5A:6B:DF:E1:97:9D:F4:26:57:49:F5
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:9b:d2:9b:09:f5:1d:e8:ae:5d:66:23:6c:00:f5:80:db:2f:
         34:01:89:a9:5d:61:21:80:8e:86:90:98:60:82:8c:e2:24:5e:
         6f:77:d2:88:8b:31:40:de:6c:e5:75:ad:3b:ad:ff:1b:2c:f3:
         d9:23:84:da:41:d9:72:63:60:91:c1:0e:cd:b5:88:ae:a5:07:
         97:e8:1f:2a:a1:c9:91:71:94:20:a5:e4:d5:b0:0e:11:d1:74:
         88:26:aa:5c:6c:e4:9e:64:54:68:1b:a0:fe:73:5f:c4:75:1a:
         2f:e5:f4:b6:9b:ed:b0:35:dc:cc:fa:d8:99:ab:bb:a9:89:62:
         72:37:c2:fd:66:85:15:7e:83:ca:44:09:62:6f:fc:35:70:8d:
         31:8a:d2:8f:0f:f1:04:1c:a2:bb:fc:c1:7e:82:57:94:3e:d4:
         6c:22:7f:9d:a0:d8:cb:be:1a:73:ca:4a:75:a2:2b:32:4f:46:
         e2:7d:69:2c:4a:ec:dc:89:57:ee:3d:c3:84:f1:18:f8:cb:f3:
         20:67:e8:45:86:95:e0:12:58:ad:ac:9a:62:06:13:45:c8:d4:
         2e:45:fc:c2:43:f2:29:17:de:35:bf:37:f5:ca:c8:ed:4a:83:
         05:9c:9d:a2:a8:82:94:ca:b8:49:83:2e:03:71:9f:8d:ae:f5:
         c7:1d:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----