Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33362e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e33362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          9L/qKxfAS1iqwthdrwCC/pfQffKa2dDf6fTSg4mgcQU=
Subject key identifier:   1A:E8:68:33:5A:52:D4:1D:6E:06:55:47:B5:54:76:37:16:36:89:C1
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7D876498D0B1C85E97E962ACC96F3BA2A9D0DF28
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33362e302f32342d3234203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:18:27 +0000
ROA not before:           Tue 14 Sep 2021 05:13:27 +0000
ROA not after:            Wed 14 Sep 2022 05:18:27 +0000
asID:                     17451
IP address blocks:        182.253.36.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:87:64:98:d0:b1:c8:5e:97:e9:62:ac:c9:6f:3b:a2:a9:d0:df:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:13:27 2021 GMT
            Not After : Sep 14 05:18:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:2e:7b:a3:15:6f:78:8a:10:27:f7:81:83:
                    7c:14:88:ad:e2:08:48:98:e0:b6:8b:ee:dd:88:7f:
                    77:04:ee:20:29:15:a0:83:22:45:7c:dc:e4:70:69:
                    1c:a5:fa:1b:56:3d:e7:54:ce:ca:4b:2a:11:b4:8e:
                    51:5a:4f:da:7d:3f:cc:a0:bb:fc:56:48:bc:b4:25:
                    41:f9:8b:66:52:ee:14:48:f1:56:13:29:a1:0d:ac:
                    0b:c7:a9:70:b8:fe:b9:c2:1f:55:fd:42:53:0d:ca:
                    09:ca:20:18:b6:97:06:be:75:5c:db:dd:db:44:5b:
                    f4:c2:56:3f:d7:44:9f:96:d3:5e:ca:78:2e:fa:7f:
                    d0:e0:d1:a4:1e:17:3a:4a:41:a8:aa:3a:15:f0:a1:
                    34:0d:35:17:ee:f4:97:e0:22:67:23:e1:e9:18:04:
                    53:84:ae:f9:c3:cd:9b:31:85:08:ad:d5:c3:df:43:
                    b4:26:8d:1c:6e:80:72:8c:87:4e:d4:3e:ea:c7:aa:
                    96:2b:96:a9:07:61:33:16:14:2e:57:ff:09:78:68:
                    d3:6f:39:82:95:42:f6:f4:a3:df:40:2b:71:f7:6d:
                    db:f9:55:2e:6b:0a:3a:84:f9:5a:df:72:93:1a:e4:
                    3f:4d:82:c0:c6:f7:4e:c0:66:e0:be:22:1e:aa:5f:
                    21:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E8:68:33:5A:52:D4:1D:6E:06:55:47:B5:54:76:37:16:36:89:C1
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:09:7b:6e:a3:c2:81:e4:a5:f5:33:d5:fc:b3:66:4c:93:
         74:f2:fa:38:0b:5e:50:8f:6e:88:25:70:cd:67:08:2f:b8:3d:
         32:25:55:a2:3e:51:12:40:1f:72:6f:83:51:0d:2c:1c:32:8f:
         30:eb:be:de:d1:0a:3b:60:d1:ef:f1:1f:42:78:f8:dd:12:52:
         7b:7a:0e:9b:1e:da:a2:c9:85:73:81:82:80:05:bd:f6:07:64:
         8f:c8:90:11:87:6c:46:5e:ce:ab:84:07:f3:99:fe:0d:bd:cc:
         2f:14:2e:e5:c8:a5:53:fa:b2:70:15:65:cb:be:fb:25:56:55:
         75:31:0f:f8:30:25:40:a1:00:9e:77:f9:84:77:ef:e5:cc:ca:
         2b:35:f7:9f:73:80:06:20:86:6c:dc:c0:8c:ea:05:99:dc:31:
         05:f9:de:ca:23:9c:65:90:db:88:75:c6:fa:3d:3e:d3:b8:a4:
         7f:00:d7:59:34:4b:b6:56:ba:c7:73:0c:8d:1c:7a:61:f4:af:
         6a:a3:09:31:0e:ac:51:13:e6:f3:e8:5c:66:9b:8a:51:20:c4:
         1f:3c:18:7f:15:4b:ea:25:99:07:2f:ea:33:c6:54:94:f3:34:
         76:83:4b:49:48:3c:18:24:82:e5:8c:3a:1d:1e:78:e5:99:45:
         6a:95:ac:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----