Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3235322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          4NgptQD2CGWwLflZf1PO+L0IC4P1PKzuHDAeAJm/4Gw=
Subject key identifier:   34:26:AA:90:75:13:8A:7E:94:AC:FF:11:FC:EF:6A:9D:88:F5:D6:10
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7B8272E87C032B1B24C1895A586CAA3D355DF45B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:44 +0000
ROA not before:           Wed 29 Sep 2021 23:55:44 +0000
ROA not after:            Fri 30 Sep 2022 00:00:44 +0000
asID:                     17451
IP address blocks:        182.253.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:82:72:e8:7c:03:2b:1b:24:c1:89:5a:58:6c:aa:3d:35:5d:f4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:44 2021 GMT
            Not After : Sep 30 00:00:44 2022 GMT
        Subject: CN=3082010A0282010100BFC2D3B3C973852114539AAEC0AA607AB53105307B868AB5718A7852D9BF9BDE48C13A6399921FBA41FD599EC6F87FA011FC07121EE9C9130DE9F98E09A01790DC62B7DC3F09DFC9CF4362AAC4CDC1825DAF60CEA8EFE88C23F95196267BB11E5034A1CFB5C6557DA272B4E2F660B7892EA3EE8C777F56F926C4CB9FF13FE45FF1F49CDE9964048E94CCC5DF05D75694855D58E86943EBD6E8E89970265D16B32236037BD4AC7D7FDCED4177BC39546004755E27B861CC306CD87C468F83BA04D9FE96BAAE568AEA50B11BA3B867F975BF20304CB364EE9E68E38CB7B931CB791BCC90F01385E0A75119E81B0A277564917431664FDC92D355684F668BF913FD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:d3:b3:c9:73:85:21:14:53:9a:ae:c0:aa:
                    60:7a:b5:31:05:30:7b:86:8a:b5:71:8a:78:52:d9:
                    bf:9b:de:48:c1:3a:63:99:92:1f:ba:41:fd:59:9e:
                    c6:f8:7f:a0:11:fc:07:12:1e:e9:c9:13:0d:e9:f9:
                    8e:09:a0:17:90:dc:62:b7:dc:3f:09:df:c9:cf:43:
                    62:aa:c4:cd:c1:82:5d:af:60:ce:a8:ef:e8:8c:23:
                    f9:51:96:26:7b:b1:1e:50:34:a1:cf:b5:c6:55:7d:
                    a2:72:b4:e2:f6:60:b7:89:2e:a3:ee:8c:77:7f:56:
                    f9:26:c4:cb:9f:f1:3f:e4:5f:f1:f4:9c:de:99:64:
                    04:8e:94:cc:c5:df:05:d7:56:94:85:5d:58:e8:69:
                    43:eb:d6:e8:e8:99:70:26:5d:16:b3:22:36:03:7b:
                    d4:ac:7d:7f:dc:ed:41:77:bc:39:54:60:04:75:5e:
                    27:b8:61:cc:30:6c:d8:7c:46:8f:83:ba:04:d9:fe:
                    96:ba:ae:56:8a:ea:50:b1:1b:a3:b8:67:f9:75:bf:
                    20:30:4c:b3:64:ee:9e:68:e3:8c:b7:b9:31:cb:79:
                    1b:cc:90:f0:13:85:e0:a7:51:19:e8:1b:0a:27:75:
                    64:91:74:31:66:4f:dc:92:d3:55:68:4f:66:8b:f9:
                    13:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:26:AA:90:75:13:8A:7E:94:AC:FF:11:FC:EF:6A:9D:88:F5:D6:10
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:95:f0:4d:c1:b1:49:e4:58:74:ac:d2:a0:f1:e8:29:3c:36:
         53:33:1a:c0:1f:fc:36:52:d9:6d:ae:da:90:f4:06:ed:78:c4:
         0f:6c:7e:cf:06:f6:93:fd:af:00:1a:fd:a1:d8:77:99:95:77:
         04:e0:0a:3f:b2:0b:9d:53:d1:d0:11:59:69:95:28:c4:c2:ad:
         8b:68:57:00:f9:7f:98:82:b1:a4:db:c0:be:2d:5f:ec:88:c2:
         bf:02:ea:9e:23:0a:03:64:89:3a:12:ff:c5:21:03:f6:84:f4:
         4c:bd:32:26:e4:8c:e2:68:0e:a8:18:a7:3b:81:c8:0f:cf:d0:
         ea:38:3d:d1:b7:48:e5:6f:d8:18:81:b0:33:83:6a:8b:13:ae:
         99:52:04:d4:92:89:95:ec:33:67:59:a7:d5:d4:c1:47:16:a5:
         0d:f3:2a:dd:43:ef:92:3a:8e:8a:5a:19:ab:ba:3b:46:17:f6:
         35:c4:20:65:28:78:06:23:e7:71:8c:54:16:b1:5c:8e:0c:d6:
         bc:2e:83:35:2d:71:69:45:10:cc:03:07:b0:12:35:3a:c6:ec:
         01:ca:71:e8:1d:76:65:a8:4a:c9:ba:bb:1c:54:9f:a4:44:94:
         72:7b:be:5f:c1:c8:86:21:5f:75:cd:1f:3e:15:12:6f:d2:bf:
         50:74:93:14
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUe4Jy6HwDKxskwYlaWGyqPTVd9FswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDRaFw0yMjA5MzAwMDAwNDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkZDMkQzQjNDOTczODUyMTE0
NTM5QUFFQzBBQTYwN0FCNTMxMDUzMDdCODY4QUI1NzE4QTc4NTJEOUJGOUJERTQ4
QzEzQTYzOTk5MjFGQkE0MUZENTk5RUM2Rjg3RkEwMTFGQzA3MTIxRUU5QzkxMzBE
RTlGOThFMDlBMDE3OTBEQzYyQjdEQzNGMDlERkM5Q0Y0MzYyQUFDNENEQzE4MjVE
QUY2MENFQThFRkU4OEMyM0Y5NTE5NjI2N0JCMTFFNTAzNEExQ0ZCNUM2NTU3REEy
NzJCNEUyRjY2MEI3ODkyRUEzRUU4Qzc3N0Y1NkY5MjZDNENCOUZGMTNGRTQ1RkYx
RjQ5Q0RFOTk2NDA0OEU5NENDQzVERjA1RDc1Njk0ODU1RDU4RTg2OTQzRUJENkU4
RTg5OTcwMjY1RDE2QjMyMjM2MDM3QkQ0QUM3RDdGRENFRDQxNzdCQzM5NTQ2MDA0
NzU1RTI3Qjg2MUNDMzA2Q0Q4N0M0NjhGODNCQTA0RDlGRTk2QkFBRTU2OEFFQTUw
QjExQkEzQjg2N0Y5NzVCRjIwMzA0Q0IzNjRFRTlFNjhFMzhDQjdCOTMxQ0I3OTFC
Q0M5MEYwMTM4NUUwQTc1MTE5RTgxQjBBMjc3NTY0OTE3NDMxNjY0RkRDOTJEMzU1
Njg0RjY2OEJGOTEzRkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAv8LTs8lzhSEUU5quwKpgerUxBTB7hoq1cYp4Utm/m95IwTpjmZIf
ukH9WZ7G+H+gEfwHEh7pyRMN6fmOCaAXkNxit9w/Cd/Jz0NiqsTNwYJdr2DOqO/o
jCP5UZYme7EeUDShz7XGVX2icrTi9mC3iS6j7ox3f1b5JsTLn/E/5F/x9JzemWQE
jpTMxd8F11aUhV1Y6GlD69bo6JlwJl0WsyI2A3vUrH1/3O1Bd7w5VGAEdV4nuGHM
MGzYfEaPg7oE2f6Wuq5WiupQsRujuGf5db8gMEyzZO6eaOOMt7kxy3kbzJDwE4Xg
p1EZ6BsKJ3VkkXQxZk/cktNVaE9mi/kT/QIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FDQmqpB1E4p+lKz/Efzvap2I9dYQMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzIzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb9/DANBgkqhkiG9w0BAQsFAAOCAQEAIpXwTcGx
SeRYdKzSoPHoKTw2UzMawB/8NlLZba7akPQG7XjED2x+zwb2k/2vABr9odh3mZV3
BOAKP7ILnVPR0BFZaZUoxMKti2hXAPl/mIKxpNvAvi1f7IjCvwLqniMKA2SJOhL/
xSED9oT0TL0yJuSM4mgOqBinO4HID8/Q6jg90bdI5W/YGIGwM4NqixOumVIE1JKJ
lewzZ1mn1dTBRxalDfMq3UPvkjqOiloZq7o7Rhf2NcQgZSh4BiPncYxUFrFcjgzW
vC6DNS1xaUUQzAMHsBI1OsbsAcpx6B12ZahKybq7HFSfpESUcnu+X8HIhiFfdc0f
PhUSb9K/UHSTFA==
-----END CERTIFICATE-----