Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32332e302f32342d3234203d3e203338343832.roa
File:                     3138322e3235332e32332e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          1E/3o2taQfNevdjLKmfySRl7M77BjhtP6t4K7gLUN/Q=
Subject key identifier:   A8:A2:1D:D3:1A:44:E2:73:95:3A:67:8C:C8:71:3A:AB:B5:58:28:1C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       179544B17A39E02228FE5355EB595F255DABC023
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32332e302f32342d3234203d3e203338343832.roa
Signing time:             Mon 24 Jan 2022 05:32:27 +0000
ROA not before:           Mon 24 Jan 2022 05:27:27 +0000
ROA not after:            Tue 24 Jan 2023 05:32:27 +0000
asID:                     38482
IP address blocks:        182.253.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:95:44:b1:7a:39:e0:22:28:fe:53:55:eb:59:5f:25:5d:ab:c0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jan 24 05:27:27 2022 GMT
            Not After : Jan 24 05:32:27 2023 GMT
        Subject: CN=3082010A0282010100DAEF891B7AEFAC84A71F74F4E2210FA9B3687B61DDD6FD547D83F85C2E3BCE487F3E60C740C4122A92A6638470360CF33F53540487A13EF615194BA537A970FFC04302F832CC2DEA7059809F6DB2A4CAB53B38AD65FAC8F93CE0BC7E85A4C2A9E009346E82A54C965618B4A448DFD0BE88A62AEDB1BBDD023747235990936ABCDCEF8E8BF6D73052096A752D3705C391F68327083920529631474E375F9AFB888FA388EE06430AEAFBFBE1231309C9D732C06B00FAB90212C71956093E1F7AB0673CC5AA430F1F0DA9AE1DB13140FB8887E181C3C72FD173AFC7DF907D800F7D8416F3E702986BA53206341504BF29BE4FB98788343CFAD189E2D9214E45BDB90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ef:89:1b:7a:ef:ac:84:a7:1f:74:f4:e2:21:
                    0f:a9:b3:68:7b:61:dd:d6:fd:54:7d:83:f8:5c:2e:
                    3b:ce:48:7f:3e:60:c7:40:c4:12:2a:92:a6:63:84:
                    70:36:0c:f3:3f:53:54:04:87:a1:3e:f6:15:19:4b:
                    a5:37:a9:70:ff:c0:43:02:f8:32:cc:2d:ea:70:59:
                    80:9f:6d:b2:a4:ca:b5:3b:38:ad:65:fa:c8:f9:3c:
                    e0:bc:7e:85:a4:c2:a9:e0:09:34:6e:82:a5:4c:96:
                    56:18:b4:a4:48:df:d0:be:88:a6:2a:ed:b1:bb:dd:
                    02:37:47:23:59:90:93:6a:bc:dc:ef:8e:8b:f6:d7:
                    30:52:09:6a:75:2d:37:05:c3:91:f6:83:27:08:39:
                    20:52:96:31:47:4e:37:5f:9a:fb:88:8f:a3:88:ee:
                    06:43:0a:ea:fb:fb:e1:23:13:09:c9:d7:32:c0:6b:
                    00:fa:b9:02:12:c7:19:56:09:3e:1f:7a:b0:67:3c:
                    c5:aa:43:0f:1f:0d:a9:ae:1d:b1:31:40:fb:88:87:
                    e1:81:c3:c7:2f:d1:73:af:c7:df:90:7d:80:0f:7d:
                    84:16:f3:e7:02:98:6b:a5:32:06:34:15:04:bf:29:
                    be:4f:b9:87:88:34:3c:fa:d1:89:e2:d9:21:4e:45:
                    bd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A2:1D:D3:1A:44:E2:73:95:3A:67:8C:C8:71:3A:AB:B5:58:28:1C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32332e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:1b:ae:e4:25:d2:a6:0c:9a:db:ab:15:60:e8:47:b5:da:bc:
         ee:da:13:85:2a:33:b8:4b:97:79:87:c4:aa:54:84:93:bc:fd:
         9d:f6:ae:e1:5d:0e:79:89:bc:ad:41:0d:fa:06:0c:05:79:5c:
         f9:c0:b2:3c:42:89:87:80:57:d2:52:03:8d:0f:fd:44:51:e5:
         93:2a:85:41:8e:9e:0a:44:6f:e1:8b:0a:a9:78:8a:c5:f8:3b:
         1a:2f:15:b8:f7:d6:92:a6:61:c8:cf:b0:cd:d7:06:1e:f6:7b:
         42:ba:f1:64:47:b4:41:20:49:48:a4:0c:74:8a:7b:06:a2:03:
         ea:2a:d8:49:0f:93:53:9c:ca:b3:ce:6c:32:f7:6b:1a:35:6f:
         2c:7c:f3:66:a2:70:d6:33:aa:64:d5:48:07:2e:88:07:24:f0:
         43:07:5a:6e:cf:a1:97:cf:64:85:e2:ea:96:29:b6:da:99:50:
         64:1e:8a:17:e9:3e:7a:a7:cb:0f:5c:32:af:8e:a5:8d:94:00:
         98:c3:eb:d6:29:b5:b4:01:e7:98:2c:25:58:ee:54:7c:b6:d7:
         1a:43:0d:b7:46:79:55:e0:a5:35:ab:e2:7e:b0:57:31:e1:74:
         9f:9b:2f:d6:1f:50:61:e8:e4:14:9f:d8:71:cf:e1:b9:93:ac:
         da:2e:7c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----