Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e32382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          YtJAvNPuL1Xf22ayI0tJ+p/Fe/Z460HWvfUX9uT3XSk=
Subject key identifier:   76:A3:60:AD:E7:F4:8B:DF:54:EC:BC:EF:CD:E7:B2:5A:89:83:EA:EB
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0ADFF58B5403FE8BF85EF3CD85837F605F2BAEA7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:40 +0000
ROA not before:           Wed 29 Sep 2021 23:55:40 +0000
ROA not after:            Fri 30 Sep 2022 00:00:40 +0000
asID:                     17451
IP address blocks:        182.253.28.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:df:f5:8b:54:03:fe:8b:f8:5e:f3:cd:85:83:7f:60:5f:2b:ae:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:40 2021 GMT
            Not After : Sep 30 00:00:40 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:a3:af:5b:48:d3:44:d1:2c:da:b6:a0:2e:
                    93:ce:97:55:24:70:35:4c:67:b0:45:dd:5a:88:79:
                    fe:53:76:49:16:3f:cb:dc:14:9b:2a:7e:cb:57:f0:
                    f0:dc:99:6b:a6:ee:a1:db:fd:1d:c1:43:e7:79:ba:
                    4f:a4:cb:a2:fb:45:88:8c:64:58:f8:16:7b:9b:ad:
                    1a:39:c8:e2:0b:d9:b7:98:f8:e5:ee:6a:d9:a5:61:
                    38:d5:09:e9:e4:1c:49:fb:46:ea:67:a5:08:97:54:
                    c2:26:2e:77:c5:e0:5a:18:2b:9f:c6:7e:e2:8c:ce:
                    5a:a1:1f:4b:18:07:e5:ee:c2:97:11:69:8d:2a:bd:
                    f5:de:ad:a6:4b:97:c4:ff:66:41:dc:11:aa:92:a9:
                    01:95:0a:60:35:40:8b:c3:83:17:2e:96:86:6a:cb:
                    45:74:3f:32:a2:1f:24:10:b1:c8:00:11:10:cc:61:
                    07:ca:b7:27:d6:5f:5c:6d:08:e7:9f:55:75:bd:5e:
                    d3:09:72:9a:c1:3d:6f:45:f5:d6:c4:13:6d:ab:37:
                    a4:e0:75:cc:6c:ac:0b:19:37:ee:96:5e:68:02:7b:
                    50:38:d9:ca:f5:da:a2:94:a9:05:31:28:29:9a:85:
                    a8:25:40:b2:e2:a8:3b:a4:0c:a2:50:70:77:02:fc:
                    7b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A3:60:AD:E7:F4:8B:DF:54:EC:BC:EF:CD:E7:B2:5A:89:83:EA:EB
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:77:fa:89:fe:2a:e6:4b:c9:2d:53:ac:54:b0:10:b9:e7:24:
         d1:c5:3f:8d:8e:1c:a8:29:54:2a:c3:54:1f:01:91:73:78:57:
         c2:36:fc:8a:b8:e2:0a:09:2f:35:08:65:a4:a7:92:cd:7b:01:
         28:ec:34:48:33:d0:7f:34:e6:ec:c5:77:08:02:be:cc:e9:e4:
         30:fc:62:77:53:4e:ed:69:2e:ad:69:42:90:0c:4c:05:18:1d:
         0d:f7:5b:65:32:6b:34:0a:9b:11:c9:80:8a:84:b4:ad:18:7c:
         2c:28:a4:f8:3b:e4:4c:4f:87:4b:0d:c2:84:fd:78:19:c6:7c:
         4b:9e:c2:a6:a3:f7:05:14:d6:3e:ce:37:4b:b6:d0:fc:0e:c7:
         c0:09:a4:82:08:a0:d9:a9:51:38:8b:13:90:8d:6b:92:e1:ef:
         7a:6b:c8:77:39:a7:a6:4c:1b:ef:4a:85:28:c7:82:49:e0:9a:
         6e:d8:d3:42:bd:18:3e:5e:dc:f6:9d:bb:a5:d3:5e:a4:0a:2a:
         89:41:c7:ba:ea:44:51:58:b9:62:29:8b:c9:40:f8:df:37:08:
         20:37:52:0a:0b:47:be:5c:05:8f:02:e2:a1:82:47:58:1c:8d:
         b5:b9:a9:a7:07:fc:b9:8e:f2:b7:90:8a:b1:f0:85:db:a9:77:
         ae:82:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----