Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34312e302f32342d3234203d3e203338343832.roa
File:                     3138322e3235332e34312e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          W2/FoMCt0mznL+hcrqR+2/J4k6wZor7SWinO/+Ezudc=
Subject key identifier:   46:92:31:37:69:BA:04:AD:6C:C2:5F:CB:66:08:E9:A9:93:CB:5B:DA
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       755AB38C75D77149DC9DD6AEEB334BAE29029EF7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34312e302f32342d3234203d3e203338343832.roa
Signing time:             Thu 06 Jan 2022 08:45:04 +0000
ROA not before:           Thu 06 Jan 2022 08:40:04 +0000
ROA not after:            Fri 06 Jan 2023 08:45:04 +0000
asID:                     38482
IP address blocks:        182.253.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:5a:b3:8c:75:d7:71:49:dc:9d:d6:ae:eb:33:4b:ae:29:02:9e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jan  6 08:40:04 2022 GMT
            Not After : Jan  6 08:45:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:e1:91:d9:c2:d7:ef:41:19:95:40:4e:86:
                    42:8e:8e:ed:31:5a:36:d3:b6:0f:a5:01:4f:df:a9:
                    ad:9e:2f:3f:6d:63:28:af:b2:34:3c:f3:16:01:2c:
                    dc:6e:aa:43:8b:9a:cc:d9:6d:d2:df:b5:20:87:49:
                    1e:07:dd:ab:14:af:b0:75:c6:5b:8d:95:c2:58:77:
                    01:47:02:46:67:1e:19:97:b6:3d:51:5a:77:73:4b:
                    19:56:2e:c0:e3:71:5c:cf:ac:86:f7:e1:1b:66:a5:
                    ed:5c:9d:d3:6b:3c:b8:b1:06:c6:29:b2:9a:6c:ae:
                    29:25:5d:22:60:71:83:ad:2c:1b:9a:a8:db:b1:03:
                    68:62:26:8a:3d:b9:61:f8:75:50:28:45:4d:a8:16:
                    c3:a8:57:88:0c:bf:04:96:d9:b7:fe:f8:01:cc:18:
                    50:cd:34:ae:26:54:b3:14:af:66:c8:11:ba:17:c5:
                    17:95:2f:4d:2d:1e:56:26:ef:71:04:92:c0:fc:10:
                    0c:ea:80:9f:38:24:04:58:0f:3f:f1:e2:b2:08:ba:
                    d9:48:93:d4:36:80:af:5b:8d:00:c7:80:b2:75:3d:
                    a0:a8:e4:6f:a4:76:fe:ff:be:dd:13:aa:2a:7e:43:
                    37:a1:6b:77:af:47:93:f9:bb:73:35:0f:ee:25:82:
                    bc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:92:31:37:69:BA:04:AD:6C:C2:5F:CB:66:08:E9:A9:93:CB:5B:DA
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34312e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ed:db:67:19:31:01:1a:42:de:1b:80:e9:a0:d7:35:e4:7e:
         8b:87:ca:da:47:5e:55:24:54:b1:2a:7e:d3:6b:b3:cf:0a:0a:
         20:4e:9e:5a:a5:83:ef:27:9e:f5:e3:27:20:01:ab:af:bc:03:
         12:01:e4:bd:5c:63:30:1c:0f:98:f9:d4:e6:af:72:2e:49:a6:
         23:c4:9f:2e:99:c5:81:cb:ab:f7:2b:45:1c:87:c9:2d:2d:67:
         68:fc:2b:bf:19:6e:29:ee:f8:95:0e:7d:df:00:bc:91:57:d2:
         69:a2:af:03:e6:e0:0a:98:89:ad:91:b2:b8:9d:85:8b:1e:a2:
         b1:b2:7f:86:0a:05:7c:14:db:6f:19:94:f0:cd:83:81:6d:45:
         d8:36:2f:f9:07:e8:16:01:ad:87:28:a6:d3:4e:33:43:1f:9b:
         d7:51:1a:ca:71:55:d0:54:da:0f:83:e0:f5:0c:56:3a:44:c1:
         4b:ab:b8:6e:c3:84:14:ff:1a:2b:9b:7f:5b:ee:b2:c3:7b:e7:
         20:28:93:ad:24:0f:b5:8d:b8:b3:fc:04:48:ce:3e:37:c9:1f:
         7d:1c:ce:ed:8c:7f:b1:69:cc:38:9a:61:64:3e:cb:19:d0:f2:
         7f:12:10:c3:f4:4c:ab:c1:e7:fb:20:b8:cc:c8:2d:45:b3:df:
         fb:a0:9b:8c
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUdVqzjHXXcUncndau6zNLrikCnvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMjAxMDYwODQwMDRaFw0yMzAxMDYwODQ1MDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDZCM0UxOTFEOUMyRDdFRjQx
MTk5NTQwNEU4NjQyOEU4RUVEMzE1QTM2RDNCNjBGQTUwMTRGREZBOUFEOUUyRjNG
NkQ2MzI4QUZCMjM0M0NGMzE2MDEyQ0RDNkVBQTQzOEI5QUNDRDk2REQyREZCNTIw
ODc0OTFFMDdEREFCMTRBRkIwNzVDNjVCOEQ5NUMyNTg3NzAxNDcwMjQ2NjcxRTE5
OTdCNjNENTE1QTc3NzM0QjE5NTYyRUMwRTM3MTVDQ0ZBQzg2RjdFMTFCNjZBNUVE
NUM5REQzNkIzQ0I4QjEwNkM2MjlCMjlBNkNBRTI5MjU1RDIyNjA3MTgzQUQyQzFC
OUFBOERCQjEwMzY4NjIyNjhBM0RCOTYxRjg3NTUwMjg0NTREQTgxNkMzQTg1Nzg4
MENCRjA0OTZEOUI3RkVGODAxQ0MxODUwQ0QzNEFFMjY1NEIzMTRBRjY2QzgxMUJB
MTdDNTE3OTUyRjREMkQxRTU2MjZFRjcxMDQ5MkMwRkMxMDBDRUE4MDlGMzgyNDA0
NTgwRjNGRjFFMkIyMDhCQUQ5NDg5M0Q0MzY4MEFGNUI4RDAwQzc4MEIyNzUzREEw
QThFNDZGQTQ3NkZFRkZCRUREMTNBQTJBN0U0MzM3QTE2Qjc3QUY0NzkzRjlCQjcz
MzUwRkVFMjU4MkJDOTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1rPhkdnC1+9BGZVAToZCjo7tMVo207YPpQFP36mtni8/bWMor7I0
PPMWASzcbqpDi5rM2W3S37Ugh0keB92rFK+wdcZbjZXCWHcBRwJGZx4Zl7Y9UVp3
c0sZVi7A43Fcz6yG9+EbZqXtXJ3Tazy4sQbGKbKabK4pJV0iYHGDrSwbmqjbsQNo
YiaKPblh+HVQKEVNqBbDqFeIDL8Eltm3/vgBzBhQzTSuJlSzFK9myBG6F8UXlS9N
LR5WJu9xBJLA/BAM6oCfOCQEWA8/8eKyCLrZSJPUNoCvW40Ax4CydT2gqORvpHb+
/77dE6oqfkM3oWt3r0eT+btzNQ/uJYK8kwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FEaSMTdpugStbMJfy2YI6amTy1vaMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgz
NDM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC2/SkwDQYJKoZIhvcNAQELBQADggEBABXt22cZMQEa
Qt4bgOmg1zXkfouHytpHXlUkVLEqftNrs88KCiBOnlqlg+8nnvXjJyABq6+8AxIB
5L1cYzAcD5j51Oavci5JpiPEny6ZxYHLq/crRRyHyS0tZ2j8K78Zbinu+JUOfd8A
vJFX0mmirwPm4AqYia2RsridhYseorGyf4YKBXwU228ZlPDNg4FtRdg2L/kH6BYB
rYcoptNOM0Mfm9dRGspxVdBU2g+D4PUMVjpEwUuruG7DhBT/Giubf1vussN75yAo
k60kD7WNuLP8BEjOPjfJH30czu2Mf7FpzDiaYWQ+yxnQ8n8SEMP0TKvB5/sguMzI
LUWz3/ugm4w=
-----END CERTIFICATE-----