Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e36312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          dVjRO6hxsGqIbzsLodDe/92HOHP0O4wXvkyYCbv1DKQ=
Subject key identifier:   24:EB:42:BF:94:2B:BE:28:AB:79:8B:FE:D0:34:25:C3:83:E2:1A:33
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7E37AEF445B9E74AFEA01BDD17C58F91027EE3CC
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:39 +0000
ROA not before:           Wed 29 Sep 2021 23:55:39 +0000
ROA not after:            Fri 30 Sep 2022 00:00:39 +0000
asID:                     17451
IP address blocks:        182.253.61.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:37:ae:f4:45:b9:e7:4a:fe:a0:1b:dd:17:c5:8f:91:02:7e:e3:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:39 2021 GMT
            Not After : Sep 30 00:00:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:45:88:4b:0e:0d:94:52:9e:80:34:22:e4:
                    e2:59:c0:49:ab:3d:e9:68:b4:7a:1e:4b:c2:14:26:
                    63:d5:9c:78:d8:bf:10:63:ea:b5:74:c1:65:3a:5f:
                    35:12:e0:ae:eb:48:56:05:89:7a:53:11:75:4f:51:
                    ec:ba:ea:d8:d6:c8:e5:86:c4:85:e1:15:e2:43:37:
                    58:4e:46:a3:0b:b0:c5:cc:3e:87:16:ac:03:e0:ce:
                    cd:8e:79:32:e0:34:74:71:8d:f2:95:ca:63:41:33:
                    f2:b0:96:ef:43:7c:26:73:37:db:f5:7a:94:f4:e7:
                    82:eb:46:bb:74:fd:f6:8b:98:3b:7e:8e:0c:94:cb:
                    b5:04:c5:18:a5:f7:aa:fa:24:d1:6b:49:d9:b8:0b:
                    f4:09:6b:50:d2:d0:56:df:f5:8d:5e:66:34:ed:b4:
                    a5:78:c6:ed:8b:6c:a5:59:2d:e7:6e:0c:16:40:1b:
                    7d:35:8b:0d:3f:fe:fc:40:70:16:d5:53:06:88:fb:
                    3b:cf:e4:94:60:3b:24:ba:bf:b5:a4:25:4f:78:c9:
                    f5:d6:f3:c9:f5:97:77:4d:fa:f2:20:d0:ab:96:96:
                    d2:d1:4a:7d:1e:d1:ce:c0:bc:7d:90:ac:2f:b6:f1:
                    e0:94:d7:01:b5:7a:b9:84:41:bc:48:74:18:90:b2:
                    2d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EB:42:BF:94:2B:BE:28:AB:79:8B:FE:D0:34:25:C3:83:E2:1A:33
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:88:ad:64:49:40:92:40:86:74:94:d2:7d:f5:c4:f1:28:66:
         6f:e9:80:f7:e0:75:cd:22:0b:67:52:a1:8d:cd:35:f8:bc:1c:
         50:03:15:ec:42:89:af:8b:bd:23:22:9f:3c:fe:fa:c3:ed:9a:
         7d:92:a2:17:3a:c7:37:12:04:96:f3:ef:b3:fd:d5:cb:61:5e:
         77:12:14:71:6f:9a:95:63:74:d9:fa:9b:82:f4:cd:88:c3:7b:
         43:7e:ce:72:a6:47:52:20:3a:34:74:29:81:e9:e8:61:74:fc:
         33:68:86:c0:9b:60:0e:33:4d:d7:1f:cf:a6:48:95:b2:65:f2:
         57:dd:1e:22:89:1a:d9:4f:f7:c6:41:4c:73:8d:c4:7c:c7:83:
         39:10:0e:54:70:eb:09:de:fd:d5:b9:66:b7:fd:bb:62:a3:61:
         b0:df:2f:a6:e6:38:07:98:f9:79:4c:2e:de:d5:90:a5:6b:9a:
         5b:5a:55:2f:11:e4:ca:37:65:59:89:bc:a4:8d:49:4d:77:39:
         9b:93:23:a3:1a:ff:1a:f8:fe:4c:23:2d:78:9a:f3:e2:a5:73:
         6e:d0:e9:75:99:b3:97:2e:09:36:c8:0a:d5:34:5a:cd:cd:da:
         c3:c8:3f:f3:30:70:37:40:ba:81:ef:48:f6:1a:f7:66:09:cd:
         15:0f:a8:45
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUfjeu9EW550r+oBvdF8WPkQJ+48wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MzlaFw0yMjA5MzAwMDAwMzlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTdGNTQ1ODg0QjBFMEQ5NDUy
OUU4MDM0MjJFNEUyNTlDMDQ5QUIzREU5NjhCNDdBMUU0QkMyMTQyNjYzRDU5Qzc4
RDhCRjEwNjNFQUI1NzRDMTY1M0E1RjM1MTJFMEFFRUI0ODU2MDU4OTdBNTMxMTc1
NEY1MUVDQkFFQUQ4RDZDOEU1ODZDNDg1RTExNUUyNDMzNzU4NEU0NkEzMEJCMEM1
Q0MzRTg3MTZBQzAzRTBDRUNEOEU3OTMyRTAzNDc0NzE4REYyOTVDQTYzNDEzM0Yy
QjA5NkVGNDM3QzI2NzMzN0RCRjU3QTk0RjRFNzgyRUI0NkJCNzRGREY2OEI5ODNC
N0U4RTBDOTRDQkI1MDRDNTE4QTVGN0FBRkEyNEQxNkI0OUQ5QjgwQkY0MDk2QjUw
RDJEMDU2REZGNThENUU2NjM0RURCNEE1NzhDNkVEOEI2Q0E1NTkyREU3NkUwQzE2
NDAxQjdEMzU4QjBEM0ZGRUZDNDA3MDE2RDU1MzA2ODhGQjNCQ0ZFNDk0NjAzQjI0
QkFCRkI1QTQyNTRGNzhDOUY1RDZGM0M5RjU5Nzc3NERGQUYyMjBEMEFCOTY5NkQy
RDE0QTdEMUVEMUNFQzBCQzdEOTBBQzJGQjZGMUUwOTRENzAxQjU3QUI5ODQ0MUJD
NDg3NDE4OTBCMjJEMzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp/VFiEsODZRSnoA0IuTiWcBJqz3paLR6HkvCFCZj1Zx42L8QY+q1
dMFlOl81EuCu60hWBYl6UxF1T1HsuurY1sjlhsSF4RXiQzdYTkajC7DFzD6HFqwD
4M7Njnky4DR0cY3ylcpjQTPysJbvQ3wmczfb9XqU9OeC60a7dP32i5g7fo4MlMu1
BMUYpfeq+iTRa0nZuAv0CWtQ0tBW3/WNXmY07bSleMbti2ylWS3nbgwWQBt9NYsN
P/78QHAW1VMGiPs7z+SUYDskur+1pCVPeMn11vPJ9Zd3TfryINCrlpbS0Up9HtHO
wLx9kKwvtvHglNcBtXq5hEG8SHQYkLItOQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FCTrQr+UK74oq3mL/tA0JcOD4hozMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC2/T0wDQYJKoZIhvcNAQELBQADggEBACCIrWRJQJJA
hnSU0n31xPEoZm/pgPfgdc0iC2dSoY3NNfi8HFADFexCia+LvSMinzz++sPtmn2S
ohc6xzcSBJbz77P91cthXncSFHFvmpVjdNn6m4L0zYjDe0N+znKmR1IgOjR0KYHp
6GF0/DNohsCbYA4zTdcfz6ZIlbJl8lfdHiKJGtlP98ZBTHONxHzHgzkQDlRw6wne
/dW5Zrf9u2KjYbDfL6bmOAeY+XlMLt7VkKVrmltaVS8R5Mo3ZVmJvKSNSU13OZuT
I6Ma/xr4/kwjLXia8+Klc27Q6XWZs5cuCTbICtU0Ws3N2sPIP/MwcDdAuoHvSPYa
92YJzRUPqEU=
-----END CERTIFICATE-----