Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233362e302f32342d3234203d3e203338343832.roa
File:                     3138322e3235332e3233362e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          nY8k6HseMBeomCQnvo/w0QCmDx+3DuloCUIQNnZ4//w=
Subject key identifier:   B6:11:2C:E4:82:FC:52:DE:9C:0C:DF:50:68:A1:39:E2:04:D1:BF:C5
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       79B92B10D09A45A6734B998D039112207DBFFAD4
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233362e302f32342d3234203d3e203338343832.roa
Signing time:             Mon 20 Sep 2021 04:00:54 +0000
ROA not before:           Mon 20 Sep 2021 03:55:54 +0000
ROA not after:            Tue 20 Sep 2022 04:00:54 +0000
asID:                     38482
IP address blocks:        182.253.236.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b9:2b:10:d0:9a:45:a6:73:4b:99:8d:03:91:12:20:7d:bf:fa:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 20 03:55:54 2021 GMT
            Not After : Sep 20 04:00:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ff:53:ea:17:ad:73:ed:c5:0b:2a:4f:42:d2:
                    6c:7c:ad:fb:e4:b0:5e:d6:2e:d6:56:47:9d:4a:07:
                    33:c0:57:ba:55:90:0b:95:10:4b:70:d6:b7:df:b8:
                    05:ae:23:27:60:44:2a:b7:18:ae:4f:ce:f1:1b:1d:
                    dd:24:b3:5a:fa:21:98:98:61:2e:5a:ed:7f:dd:2a:
                    c5:ee:93:1d:1c:3f:8c:19:1f:8d:cf:58:9e:90:5a:
                    3a:bc:34:a6:45:b9:c1:e3:46:0a:a6:e4:20:77:d2:
                    94:5e:70:c9:12:ac:03:31:5e:67:0c:62:1c:04:16:
                    31:3e:4d:42:cd:bb:23:69:1d:c1:92:50:e0:95:c9:
                    7b:43:ce:1b:07:cb:ad:0d:ea:c7:87:61:e2:b4:ac:
                    94:4f:99:47:b8:f5:0f:fa:db:3d:e0:b2:0e:50:c5:
                    b5:dc:4b:72:f6:96:24:b4:13:87:c9:46:9c:ac:3b:
                    8c:ae:5e:33:04:70:6b:c4:1f:94:98:f1:ed:e1:81:
                    a7:84:bc:27:9e:e1:58:61:89:d2:c4:49:fe:89:2e:
                    02:3c:bb:d7:86:7f:2d:66:c0:e5:68:b7:b7:16:05:
                    eb:1d:fc:27:1c:d2:22:99:77:35:33:97:95:03:d7:
                    e7:c9:0e:fa:99:59:c1:df:e9:1c:99:fa:80:8f:30:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:11:2C:E4:82:FC:52:DE:9C:0C:DF:50:68:A1:39:E2:04:D1:BF:C5
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233362e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:24:43:e2:10:46:dd:1f:b2:b9:70:26:37:03:fc:a0:61:16:
         80:a7:d0:46:b4:0e:60:ea:d5:2a:1e:9a:1a:ca:6e:ea:ed:ef:
         b4:e2:55:fe:8c:a7:4c:f1:18:4c:c6:e6:d7:6f:82:3f:45:95:
         ee:fc:61:31:6c:c5:79:22:19:90:3e:e3:5a:5f:4a:0f:1d:ba:
         0c:68:a3:c8:a8:ab:bc:46:1b:d6:0f:d1:f7:ff:94:80:d9:8f:
         99:e4:35:ff:e3:60:b5:2b:90:bd:97:f3:c2:fd:7e:c9:bc:13:
         3f:9c:22:a4:3c:c8:c0:f0:b0:8d:40:84:c3:82:77:7b:85:65:
         65:9a:c0:b2:43:f0:51:59:4d:6f:e8:b0:3b:81:bd:b6:54:c2:
         5d:49:ee:d4:2f:ae:d7:dd:d2:56:c1:89:e4:6c:b7:dd:24:b0:
         e7:de:9a:98:7b:f0:58:93:13:2f:a6:b4:10:8a:e7:a3:4e:eb:
         ec:cb:1a:9e:ed:66:af:80:ca:e1:b9:0a:0c:41:39:60:41:99:
         69:77:53:fd:d9:a5:5a:1f:89:c4:7e:0a:df:99:0d:5a:3f:5f:
         6d:d9:22:6b:85:49:2b:af:26:19:38:62:46:be:74:2a:97:43:
         8c:c2:29:30:93:ea:cf:73:d8:b3:19:25:45:91:0b:6f:09:20:
         65:69:05:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----